Category Archives: malware

Android Malware, believe the hype.

…or “Just how much Android malware is there anyway?”

Mobile malware can no longer be ignored!

The security industry has an embarrassing problem. For several years it became a matter of course for the big names in security to warn annually that ‘next year’ was to be the year of mobile malware. “Look out“, we said, “mobile malware, it’s coming…“; but it never did. It remained elusively over the threat horizon. In reality, every year since Cabir in 2004 we have saw appearances and developments in mobile malware (originally for Symbian, J2ME and Windows CE) but it simply never reached critical mass or moved beyond the mischievous.

Continue reading

New bracelets for ransomware kingpin

Image courtesy of .v1ctor. on Flickr

I’m happy to say that, as a result of close cooperation between Trend Micro threat research and Spanish law enforcement a number of important arrests have been made in connection with the Reveton ransomware. The Spanish police announcement can be found here [Spanish].

Over the past several months Trend Micro researchers have been providing evidence and intelligence related to the Reveton ransomware or “police trojan”. Law enforcement in Spain first became interested in this malware as a result of complaints they were receiving from victims of the scam. Trend Micro and Spanish law enforcement agencies have collaborated extremely closely; sharing intelligence, sharing samples and related technical detail. As a direct result of activities carried out by Trend Micro threat research, they were able to map the criminal network infrastructure including traffic redirection and command and control servers. Some of the intelligence gathered by law enforcement enabled them to reach a high degree of certainty of the identity of one of the individuals at the very top of this criminal gang.
Continue reading

US Energy Department next victim of Targeted Attack

Image courtesy of IndigoValley on Flickr

In the wake of last week’s confirmed attacks against The New York Times, Wall Street Journal and Washington Post comes a shocking new revelation that the US Energy Department, home to the National Nuclear Security Administration which looks after America’s nuclear arsenal has also fallen victim to compromise.

According to a report in the Washington Free Beacon, officials have confirmed that 14 servers and 20 workstations were compromised during the attack.
Continue reading