Author Archive
Beware of SOPA Scams
By Aryeh Goretsky at 17 January, 2012, 8:23 pm
Tomorrow, on January 18, 2012, dozens of popular websites covering a diverse range of subjects will be blacking out their home pages in protest of the U.S. Stop Online Piracy Act (SOPA). Some of these websites are well-known, such as the English language web site for the encyclopedic Wikipedia and quirky news site Boing Boing, … Read More…
Read More >>Online Poker, Real Fraud
By Aryeh Goretsky at 21 September, 2011, 11:27 am
The United States Attorney Office for the Southern District of New York received a flurry of attention in April, 2011 when they unsealed an indictment against the three largest Internet poker companies in the United States—Absolute Poker, Full Tilt Poker and PokerStars—for fraud, gambling and money laundering. Today, the USAO upped the ante with an … Read More.
Read More >>Online Poker, Real Fraud
By Aryeh Goretsky at 21 September, 2011, 11:27 am
The United States Attorney Office for the Southern District of New York received a flurry of attention in April, 2011 when they unsealed an indictment against the three largest Internet poker companies in the United States—Absolute Poker, Full Tilt Poker and PokerStars—for fraud, gambling and money laundering. Today, the USAO upped the ante with an … Read More.
Read More >>1000 days of Conficker
By Aryeh Goretsky at 17 August, 2011, 9:12 am
It has been 1,000 days since the Conficker worm first appeared on November 21, 2008. For the first two months after its initial appearance we received a trickle of reports through our ThreatSense.NET telemetry system. By January of 2009 that had become a flood, and then a deluge, as this “super worm” rose to meteoric … Read More.
Read More >>Where there’s smoke, there’s FireWire
By Aryeh Goretsky at 28 July, 2011, 11:19 am
Forensic software developer PassWare announced a new version of its eponymous software forensics kit on Tuesday. Already several news sources are writing about how the program can automatically obtain the login password from a locked or sleeping Mac simply by plugging in a USB flash drive containing their software and connecting it to another computer … Read More.
Read More >>Osama bin Laden is alive and well… on Facebook
By Aryeh Goretsky at 4 May, 2011, 4:55 am
The death of Osama bin Laden has gone viral, with blogs, social media and search engines pumping terabytes of rumor, innuendo and conspiracy theories at the speed of light, along with the occasional kilobyte of truth. As the number of people searching for pictures and videos of bin Laden’s execution has skyrocketed, the criminal syndicates … Read More.
Read More >>Global malware thrives on the demise of a global terrorist
By Aryeh Goretsky at 3 May, 2011, 6:52 pm
[NOTE: As we were publishing this articl, our Latin American office discovered another Black Hat SEO campaign incorporating promises of Osama bin Laden videos on Facebook. Click here to view their article in Spanish. We will follow up on this shortly. AG]
The malware phenomenon started by the announcement of Osama Bin Laden’s death continues unabated, … Read More.
Coreflood dries up
By Aryeh Goretsky at 15 April, 2011, 11:06 am
The US Department of Justice's announcement yesterday of the takedown of the command and control (C&C) servers for the Coreflood bots (detected by ESET as Win32/AFCore) and seizure of their domains marks another step in the growing awareness that crime, whether it is committed with bullets or with botnets, is still crime.
This particular botnet, about … Read More.
Deep in the Hard Drive of Texas?
By Aryeh Goretsky at 13 April, 2011, 5:44 pm
As David Harley blogged earlier, the Comptroller of Public Accounts office for the state of Texas yesterday began notifying state employees that the names, addresses, social security numbers and other records of some 3.5 million current or former state employees had been accessible via the Internet.
Unlike the earlier Epsilon Data Management data breach, it seems no … Read More.
Trojan in Microsoft Update Catalog – A Bunny Bites Back
By Aryeh Goretsky at 4 February, 2011, 12:03 pm
UPDATE #1 Randy Abrams has posted a follow-up article, Anatomy of a Biting Bunny – The Infected Microsoft Catalog Update with additional information about how update services work, why they might distribute third-party code and what might be done to prevent malware from being distributed on services like Microsoft's Windows Update in the future. 7-FEB-2011.
Last week, we received … Read More.


