Parveen Vashishtha

以前のブログ で、ソーシャルエンジニアリングの手法を駆使した攻撃者が、ユーザーを脅してミスリーディングアプリケーションを購入させようとする手口について報告しました。そして今度は、少し異なる手口でユーザーを欺く複数の Web サイトが見つかりました。 これらの Web サイトは、ユーザーを騙すために、悪意のあるページにアクセスしようとしたときにセキュリティ機能やセキュリティ技術によって返されるページによく似た偽のページを表示します。ただし、たとえば Google では［Get me out of here］ボタンが表示されるのに対して、偽のページでは、［Download Upd

The use of search engines to deliver malware is well known. Previously we reported that attackers were using Google-sponsored search results to promote malicious websites. Instead of using techniques such as search engine optimization (SEO) poisoning to get the optimum listing in the search en

Easter is around the corner and as expected, attackers have already started to poison search engine queries to redirect users to websites that deliver misleading applications. Various search keywords related to Easter have been poisoned in Internet search results so that links to rogue websites ar

In a blog article from last year , I discussed the rise in popularity of exploits using ActiveX overwrite/delete vulnerabilities due to their ease of use. Since that time, we have seen over 100 such vulnerabilities. Microsoft requires developers of ActiveX controls to mark their controls “n

In our previous analysis we discussed ‘What is Mpack and how it works.’ We had reviewed MPackversion 0.84 in our previous blog; this time we will compare it with an updated version, MPack v 0.91. 1. The exploits include the existing ones present in v0.84. The list of exploits is present a