The AlienVault Blogs: Taking On Today’s Threats
Latest

The most recent posts from across the AlienVault blogs.

Labs

Late-breaking discoveries and in-depth analysis.

How-To

Practical, how-to advice, tips and guidance.

Hot

Perspectives on trends and industry happenings.

Category: Exploits

Posted in Labs Blog

Just a few days ago, the source code of the famous KINS banking trojan was leaked. KINS is a professional-grade banking trojan, destinated to infect as much computers as possible in order to steal credit cards, bank account credentials and related information from victims. Seen as a replacement to Citadel, it was identified in the wild not long ago. Now,… Read more

Posted in: Malware, Exploits, Windows, Crimeware
Tags: malware, yara, botnet, criminals, bot, crimeware

Posted in Labs Blog

Last week, our friends from Norman published a great report on a cyber espionage campaign named Operation Hangover.  We have released some Yara rules to detect most of the payloads mentioned on the paper. You can download the rules from our Github space: On the other hand the Hangover attackers have been using several payloads with network capabilities to steal… Read more

Posted in: News, Attacks, Malware, Exploits, Snort, APT
Tags: malware, apt, hangover

Posted in Labs Blog

A few days ago we reported a new Watering Hole campaign affecting a U.S Department of Labor website. In our first analysis we reported that the exploited vulnerability was CVE-2012-4792 . Further analysis showed that the vulnerability exploited wasn’t CVE-2012-4792 but a new zeroday vulnerability affecting Internet Explorer 8 (CVE-2013-1347). It was confirmed by Microsoft that released… Read more

Posted in: Attacks, Malware, Exploits, Advisory, APT
Tags: cve-2013-1347

Posted in Labs Blog

During the last few hours we have identified that one the U.S. Department of Labor website has been hacked and it is serving malicious code. Clarification: The website affected is the The Department of Labor (DOL) Site Exposure Matrices (SEM) Website  “The Department of Labor (DOL) Site Exposure Matrices (SEM) Website is a repository… Read more

Posted in: Attacks, Exploits, APT
Tags: deep panda, cve-2012-4792

Posted in Labs Blog

- What is Bitcoin? Bitcoin is an online descentralised virtual currency based on an open source, P2P protocol. Bitcoins can be transferred using a computer without relying on a financial institution. If you haven’t heard about Bitcoin I recommend you watch the following video: Both the Bitcoin creation and transfer is performed by computers called “miners… Read more

Posted in: News, Attacks, Malware, Exploits, Snort
Tags: botnet, bitcoin, zeus, ddos, litecoin, mtgox, darkomet, dorkbot, khelios, wallet