article thumbnail

Why Malware Crypting Services Deserve More Scrutiny

Krebs on Security

If you operate a cybercrime business that relies on disseminating malicious software, you probably also spend a good deal of time trying to disguise or “crypt” your malware so that it appears benign to antivirus and security products. In 2010, someone with the username Pepyak on the Russian language affiliate forum GoFuckBiz[.]com

Malware 208
article thumbnail

Ask Fitis, the Bear: Real Crooks Sign Their Malware

Krebs on Security

Megatraffer explained that malware purveyors need a certificate because many antivirus products will be far more interested in unsigned software, and because signed files downloaded from the Internet don’t tend to get blocked by security features built into modern web browsers. “Why do I need a certificate?

Malware 228
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

On Chinese "Spy Trains"

Schneier on Security

It's also why the United States has blocked the cybersecurity company Kaspersky from selling its Russian-made antivirus products to US government agencies. We have credible reports that the Chinese hacked Gmail around 2010, and there are ongoing concerns about both censorship and surveillance by the Chinese social-networking company TikTok.

article thumbnail

Breach Exposes Users of Microleaves Proxy Service

Krebs on Security

Launched in 2013, Microleaves is a service that allows customers to route their Internet traffic through PCs in virtually any country or city around the globe. Microleaves works by changing each customer’s Internet Protocol (IP) address every five to ten minutes. Which hints at a possible BOTNET. “Online[.]io

article thumbnail

Tracing the Supply Chain Attack on Android

Krebs on Security

A historic records search at Domaintools on that tosaka1027@gmail.com address says it was used to register 24 Internet domain names , including at least seven that have been conclusively tied to the spread of powerful Android mobile malware. net 2010-11-22 ALIBABA CLOUD COMPUTING (BEIJING) CO., com and rurimeter[.]com 2333youxi[.]com

Mobile 239
article thumbnail

Behind the scenes with the head of Kaspersky’s GReAT

SecureList

In 2010, he became Director of our Global Research and Analysis Team (GReAT). Unfortunately, none of the antivirus products that were available back then were actually able to clean the virus, so the teachers who knew I had some experience with computers asked me if I could write an antivirus for it.

article thumbnail

Tracing the Supply Chain Attack on Android

Krebs on Security

A historic records search at Domaintools on that tosaka1027@gmail.com address says it was used to register 24 Internet domain names , including at least seven that have been conclusively tied to the spread of powerful Android mobile malware. net 2010-11-22 ALIBABA CLOUD COMPUTING (BEIJING) CO., com and rurimeter[.]com 2333youxi[.]com

Mobile 157