Attacks section
Accounts of cyber-attacks, frauds and attempted frauds
Analysis of a web attack
2008/05/01 | [Original] | The last major web attack to date hit dozen of thousands major websites. Trusted names like the U.N, MSNBC.com and several UK government sites have been compromised and were infecting their users with malware. We take a closer look at this attack.Adobe Reader exploited, attack not detected
2008/02/09 | [Original] | A recently-patched vulnerability discovered in Adobe's Reader and Acrobat is being actively used to install malware through infected ad banners. Though the Trojan horse being pushed is detected, the exploit itself still passes through anti-viruses at this time.Mysterious Javascript malware compromises UK sites
2008/01/21 | [Original] | According to security vendors about 230 British websites have been compromised and serve malware to their visitors. The problem is, nobody knows how those websites got compromised in the first place. And more importantly, how they keep getting compromised after been cleaned-up.Excel 0-Day flaw used in targeted attacks
2008/01/17 | [Original] | Microsoft admitted a 0-Day vulnerability in some version of its Excel software was being actively used to target specific enterprise. The flaw allows to compromise a user's PC upon opening a booby-trapped document.Massive SQL attack compromises tens of thousands of websites
2008/01/10 | [Original] | A massive SQL Injection attack targeted websites running MS SQL Server in the last few weeks. It compromised thousands of high-profile websites, which in turn infected their visitors with classical malwares.Spammers experiment with two-stages spam
2007/12/31 | [Original] | By poisoning small mailing-lists on the web, spammers get their subsequent email messages to look legitimate and pass through filters. The new tactic is called Double-Stage Spam.ICANN warns of front running scam
2007/12/21 | [Original] | The domain names authority warns of possible scam when checking domains availability. Malicious operators could be intercepting the requests and buying the domain names first.Britain hit by worst identity theft ever
2007/11/23 | [Original] | Two hard disks containing the private data of about half the British population were lost during a postal transfer.
Check-out our sister site !
Into IAM ?
The IAM 2008 Series
SecurityNewsletter interviews major Identity & Access Management players to give you the lead on what IAM will be in 2008.



