Articles Index
TDSS aka TDL: A Botnet Framework
New renditions of the TDSS / TDL bot have some saying it's virtually indestructible. Certainly TDSS / TDL does present some unique challenges, as seen in this overview.
MACDefender aka Mac Protector: Scareware for Mac
MACDefender is a scareware program designed to trick Mac users. Usually, MACDefender is delivered via the Web, often via tainted search engine results. While scareware has long plagued Windows users, it's a relatively new threat for Mac users.
BlackHole RAT
BlackHole is a remote administration tool (RAT) that, used maliciously, can also serve as a remote access trojan. The BlackHole RAT can be used on either Mac OS X or Windows computers, and enables a remote attacker to perform potentially malicious actions on the victim's computer.
Blackhole Exploit Kit
The Blackhole exploit kit is a framework for delivering exploits via compromised or third-party websites. Most notable for its sophisticated Traffic Direction Script (TDS), the Blackhole exploit kit enables attackers to configure rules that enforce custom responses.
Malicious Software Removal Tool
The Microsoft Malicious Software Removal Tool (MSRT) is a very accessible (and free) adjunct to existing antivirus protection, but it is not a replacement for antivirus and its detection data is not indicative of overall malware infection rates or of overall malware prevalance.
StarLogger Keylogger
StarLogger is commercial monitoring software that records keystrokes and captures screenshots. Captured data is sent via email to designated recipients. On March 30, 2011, it was reported that Samsung installed the StarLogger keylogger on laptops sold through retail stores.
Antivirus Action
Antivirus Action is classified as a rogue scanner, a category of scam software sometimes referred to as scareware. Rogue scanners masquerade as antivirus, antivirus, or other security software, claiming the user's system is infected in order to trick them into paying for a full version.
Antivirus Master
Antivirus Master is classified as a rogue scanner, a category of scam software sometimes referred to as scareware. Rogue scanners masquerade as antivirus, antivirus, or other security software, claiming the user's system is infected in order to trick them into paying for a full version.
Central Command - Antivirus Vendor
Central Command - Antivirus Software Vendor
Quick Heal Technologies - Antivirus Vendor
Quick Heal Technologies - Antivirus Software Vendor
CA Technologies - Antivirus Vendor
CA Technologies antivirus software
Coranti, Inc. - Antivirus Vendor
Coranti, Inc. - Antivirus Software Vendor
BitDefender - Antivirus Vendor
bitdefender antivirus software vendor
Avira GmbH (formerly H+BEDV) - Antivirus Vendor
Avira GmbH (formerly H+BEDV) - Antivirus Software Vendor
AVAST Software (formerly ALWIL) - Antivirus Vendor
AVAST Software (formerly ALWIL) - Antivirus Software Vendor
Bullguard - Antivirus Vendor
bullguard antivirus software vendor - company brief
AVG Technologies (formerly Grisoft) - Antivirus Vendor
AVG Technologies (formerly Grisoft) - Antivirus Software Vendor - company brief
Agnitum - Antivirus Vendor
Agnitum Antivirus Software Vendor - Company Brief
Aladdin Knowledge Systems - Antivirus Vendor
Aladdin Knowledge Systems Antivirus Software Vendor - Company Brief
AhnLab, Inc. - Antivirus Vendor
AhnLab, Inc. Antivirus Software Vendor - company brief
Postcard from Hallmark Virus Hoax
The Postcard from Hallmark virus hoax is a knock-off on the old "A Virtual Card for You" hoax. The postcard from hallmark hoax includes a link to a Snopes article which is worded in such a way that it appears the hoax warning is legitimate. It isn't.
Stuxnet Worm
Stuxnet is a computer worm that targets the types of industrial control systems (ICS) that are commonly used in infrastructure supporting facilities (i.e. power plants, water treatment facilities, gas lines, etc).
Sality Virus
Sality is a family of file infecting viruses that spread by infecting exe and scr files. The virus also includes an autorun worm component that allows it to spread to any removable or discoverable drive. In addition, Sality includes a downloader trojan component that installs additional malware via the Web.
Bredolab
Bredolab is a downloader trojan that is used by attackers to distribute a wide range of malware, often scareware but also including variants of Zeus/Zbot backdoor trojans.
Black in the White House
The Black in the White House virus hoax is a variation of A Virtual Card for You hoax and the Invitation Virus hoax.