Threat Category: Vulnerabilities and exploits | Page 59

Saturday seemed like a quiet day, apart from the new Sober, however it was far from that. In the morning I received some local reports claiming that some respectable sites were distributing malware.

As it turns out, a popular Adserver had been compromised and scripts were modified in such a way…

Homegrown third-party patches for Internet Explorer or why it is not such a wise ideea to use cooking oil in your car’s engine.

About Sun Microsystems’ initiative to give away Solaris 10 free and a link to Sadmind, the only known Solaris worm.

How antivirus protection could help you not get arrested

AV products are NOT all the same

With the recently discovered exploits in Internet Explorer used by Bofra variants, Mozilla Foundation’s announcement of Firefox 1.0 comes just at the right moment.

On the different meanings of “hacker”: we’ve received an inquiry from some of our readers regarding the usage of this term on our website…

Email worms sent the virusology trend in early spring: Bagle, Mydoom and Netsky all spread as attachments to infected emails, and all used social engineering techniques in order to propagate.

Reports

Kaspersky researchers analyze updated CoolClient backdoor and new tools and scripts used in HoneyMyte (aka Mustang Panda or Bronze President) APT campaigns, including three variants of a browser data stealer.

Kaspersky discloses a 2025 HoneyMyte (aka Mustang Panda or Bronze President) APT campaign, which uses a kernel-mode rootkit to deliver and protect a ToneShell backdoor.

Kaspersky GReAT experts analyze the Evasive Panda APT’s infection chain, including shellcode encrypted with DPAPI and RC5, as well as the MgBot implant.

Kaspersky expert describes new malicious tools employed by the Cloud Atlas APT, including implants of their signature backdoors VBShower, VBCloud, PowerShower, and CloudAtlas.

Vulnerabilities and exploits

Adserver compromised – legitimate sites serving malware

Third party patches

OS wars and Solaris

Open up – police!

AV products are NOT all the same

More on safe browsing

To hack or not to hack

Malware Evolution: May Roundup

Reports

HoneyMyte updates CoolClient and deploys multiple stealers in recent campaigns

The HoneyMyte APT evolves with a kernel-mode rootkit and a ToneShell backdoor

Evasive Panda APT poisons DNS requests to deliver MgBot

Cloud Atlas activity in the first half of 2025: what changed

Subscribe to our weekly e-mails