Feeds

Blackhole 2: Crimeware kit gets stealthier, Windows 8 support

Malware-flinging tool to target mobiles too

Combat fraud and increase customer satisfaction

Cybercrooks have unveiled a new version of the Blackhole exploit kit. Version 2 of Blackhole is expressly designed to better avoid security defences. Support for Windows 8 and mobile devices is another key feature, a sign of the changing target platforms for malware-based cyberscams.

The release also includes a spruced-up user interface – so the tool can now be used by the less technically able criminal – as well as a revised licensing structure that puts a greater emphasis on renting rather than buying the application.

Rental prices run from $50 a day while leasing the software for a year costs around $1,500.

The Blackhole exploit kit has been around for about two years, during which time it has become the preferred tool for running drive-by download attacks. Cybercrooks must first find a site that can be exploited to insert malicious code, thus exposing users of often legitimate sites to attacks from linked hacker-controlled portals powered by Blackhole. The exploit kit will also attempt to download malware on the PCs of visiting surfers by taking advantage of any unlatched Java, browser or Adobe Flash vulnerability it manages to find.

The end result is that an unpatched Windows PC becomes infected with a banking Trojan, fake anti-virus or botnet agent after visiting a compromised website.

A good write-up on the new features of Blackhole and what this means for security firms and enterprise security defenders can be found in a blog post by Sophos here. ®

SANS - Survey on application security programs

Whitepapers

Mobile application security study
Download this report to see the alarming realities regarding the sheer number of applications vulnerable to attack, as well as the most common and easily addressable vulnerability errors.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Securing web applications made simple and scalable
In this whitepaper learn how automated security testing can provide a simple and scalable way to protect your web applications.
Combat fraud and increase customer satisfaction
Based on their experience using HP ArcSight Enterprise Security Manager for IT security operations, Finansbank moved to HP ArcSight ESM for fraud management.