spam

Websense® Security Labs™ ThreatSeeker® Intelligence Cloud has
identified a LinkedIn profile configured to use social engineering
techniques in order to target fellow LinkedIn users.  Here at Websense
we refer to The 7 St…

An ongoing, large-scale injection campaign has been raging for the
last 6 months. This campaign utilises a toolkit, dubbed CookieBomb (due
to its signature use of cookies), which is fascinating not only in its
apathy toward a particular platform, but also the code used in the
injections, and way in which it has evolved to escape and evade
traditional AV platforms and structures. This blog will:

• describe the evolution of not only the raw code involved in these
  attacks, but also the delivery mechanisms with which users are lured to
  infected, or outright malicious, pages
• implicitly highlight the interaction between, and quid pro quo nature of, major threat-actors within the malware ecosphere
• describe the use of session Cookies and the etymology of the toolkit name: CookieBomb
• outline the use of CookieBomb to drive traffic toward EK infrastructure, directly or via TDS systems
• cover the migration from  BHEK to competing EKs in light of the BHEK author’s arrest
• detail the point at which the campaign forked into two distinct entities

…(read more)

The 2013 Threat Report from the Websense® Security Labs™ is now available.
 
The report details mobile, social, email and web-based threats, and
while it is full of ominous data points, it is a very interesting read.
The report is…