Threat Category: Vulnerabilities and exploits | Page 59

A worm that targets phpBB is on the loose

Secunia Research reports IE vulnerability which can be used to spoof website contents

There’s no question about it – 2004 will be marked in history as the ‘Year of Browser Vulnerabilities’.

Microsoft has issued another unscheduled patch, for Internet Explorer. It closes the IFrame vulnerability – this was detected on November 2nd, and has been widely exploited by a variety of malware.

More problems for SCO?

A brief overview of the evolution of malicious code in October 2004.

More from the AVAR 2004 conference in Tokyo

Saturday seemed like a quiet day, apart from the new Sober, however it was far from that. In the morning I received some local reports claiming that some respectable sites were distributing malware.

As it turns out, a popular Adserver had been compromised and scripts were modified in such a way…

Homegrown third-party patches for Internet Explorer or why it is not such a wise ideea to use cooking oil in your car’s engine.

About Sun Microsystems’ initiative to give away Solaris 10 free and a link to Sadmind, the only known Solaris worm.

How antivirus protection could help you not get arrested

AV products are NOT all the same

With the recently discovered exploits in Internet Explorer used by Bofra variants, Mozilla Foundation’s announcement of Firefox 1.0 comes just at the right moment.

On the different meanings of “hacker”: we’ve received an inquiry from some of our readers regarding the usage of this term on our website…

Email worms sent the virusology trend in early spring: Bagle, Mydoom and Netsky all spread as attachments to infected emails, and all used social engineering techniques in order to propagate.

Reports

Kaspersky researchers reveal previously undocumented malware attributed to Mirage Kitten (UNC1549, Smoke Sandstorm, Nimbus Manticore): NightLedger backdoor, ArcBridge, and BridgeHead tunneling tools.

An in-depth analysis of Umbrij, a new tool used by the ToddyCat APT group to compromise corporate email communications in Gmail. The attack targeted OAuth authorization tokens, allowing threat actors to gain access to Google services.

Cloud Atlas attacks the public sector and diplomatic structures of Russia and Belarus, using ReverseSocks, SSH, and Tor for persistence in infected systems and its new tool, PowerCloud.

Kaspersky researchers analyze a range of new PebbleDash-based tools used in recent Kimsuky campaigns and reveal their connection to the AppleSeed malware cluster.

Vulnerabilities and exploits

Net-Worm.Perl.Santy.a outbreak

Another Internet Explorer flaw

Highly critical vulnerability in Netscape 7.x

IFrame vulnerability closed

SCO site hacked?

Malware Evolution: October Roundup

Japan – high technology, high security

Adserver compromised – legitimate sites serving malware

Third party patches

OS wars and Solaris

Open up – police!

AV products are NOT all the same

More on safe browsing

To hack or not to hack

Malware Evolution: May Roundup

Reports

Mirage Kitten targets Middle East and Africa region with new malware

ToddyCat: your hidden email assistant. Part 2

Cloud Atlas activity in the second half of 2025 and early 2026: new tools and a new payload

Kimsuky targets organizations with PebbleDash-based tools