A day before Thanksgiving, as I was doing my work, I came across a sample (SHA1:b9b52db22d35c50081054d4ece39f520ae3ef9fe) from a customer submission, with the usual " ecard.exe " filename. It has an image icon but with an .EXE extension; a clear...

We recently discovered a sample that is trying to exploit the 0-day Adobe vulnerability tracked by CVE-2010-3654 . This sample is being distributed as a PDF file, and it has a lot of complicated steps before the final payload is executed. Analyzing this...

New rogue security programs seem to be popping up all the time, but when we dig a little deeper what we see is mostly just new variants of the same old rogues. Five months ago, we wrote about a rogue we call Win32/Fakeinit that used the name "Security...

We've seen a few rogue security programs use elements of legitimate security software in order to try to make themselves appear more authentic. It was inevitable that Microsoft Security Essentials would be the target of this kind mimicry. While some rogues...

Facebook continues being a popular target for malware authors as we discover yet another family that uses this popular social network to propagate. The main component, which we detect as Trojan:Java/Boonana , is written in Java which gives it cross platform...