Comments for M86 Security Labs Blog

Comment on Web Hijacks with AJAX by På den säkra sidan – Utgåva 04 | SAFESIDE-bloggen

På den säkra sidan – Utgåva 04 | SAFESIDE-bloggen — Thu, 05 Jan 2012 13:20:06 +0000

[...] Teknik tungt: Ladda skadlig javascript genom AJAX (CS) http://labs.m86security.com/2012/01/web-hijacks-with-ajax/ [...]

Comment on Facebook Scam Spreading: ‘Hey, I just made a photoshop of you, check it out’ by Facebook Photoshop Scam Spreading Like Wildfire | National Cyber Security

Facebook Photoshop Scam Spreading Like Wildfire | National Cyber Security — Sat, 16 Jul 2011 21:56:37 +0000

[...] Clicking on Facebook links is dangerous business. At least a few of aren’t aware of this sad fact; otherwise, the latest scam Facebook app wouldn’t be spreading at the alarming rate of almost 90,000 clicks per hour. [...]

Comment on Facebook Scam Alert: ‘Everyone do check what she did on cam’ Spreading by Ways to mitigate risk with a corporate social media policy | Business Tutorials, Courses and Articles

Sat, 16 Jul 2011 00:25:16 +0000

[...] news of late. M86 Security Inc. has tracked a number of Facebook scams using malicious photos, wall posts and third-party applications. M86 researchers say [...]

Comment on 0-day exploit used in a targeted attack – CVE-2011-1255 by Recently Patched IE Flaw Exploited as Zero-Day | CISSP 2 CISSP

Recently Patched IE Flaw Exploited as Zero-Day | CISSP 2 CISSP — Wed, 29 Jun 2011 10:02:06 +0000

[...] “Based on data we have reviewed from various sources, we can say with a high level of certainty, that the anonymous researcher who according to Microsoft’s security advisory, reported the vulnerability details to VeriSign iDefense, or at least one of his acquaintances, had used the vulnerability details for malicious purposes, as part of targeted attacks,” malware experts from M86 Security say. [...]

Comment on Phishing Scam in an HTML Attachment by Under the phishing filters’ radar | GESS IT

Under the phishing filters’ radar | GESS IT — Fri, 06 May 2011 08:51:46 +0000

[...] issued by modern browsers such as Firefox and Chrome. On its blog, security firm M86Security reports that the trick involves attaching an HTML document instead of sending a link. It remains unclear [...]

Comment on Malicious Spam on the increase again by Commtouch: 71 percent increase in new zombies | ZDNet

Commtouch: 71 percent increase in new zombies | ZDNet — Mon, 02 May 2011 15:22:28 +0000

[...] M86 Security is also reporting an increase in malicious spam, attributing the growing trend to the ongoing spamvertised notifications and verification order [...]

Comment on Rustock down? by Rustock Botnet Flatlined, Spam Volumes Plummet — Krebs on Security

Rustock Botnet Flatlined, Spam Volumes Plummet — Krebs on Security — Thu, 17 Mar 2011 17:47:36 +0000

[...] me a note privately.Update, March 17, 1:47 p.m., ET: Add the graphic from M86 Security labs, which said on its blog that it also has seen a Rustock spam dry up, and that the botnet’s controllers are not [...]

Comment on Rustock down? by Rustock botnet's operations disrupted | ZDNet

Rustock botnet's operations disrupted | ZDNet — Thu, 17 Mar 2011 16:36:32 +0000

[...] to Symantec and M86 Security, an unknown team of researchers managed to successfully disrupt the spamming operations of one of [...]

Comment on Rustock down? by Rustock botnet mysteriously goes dark

Rustock botnet mysteriously goes dark — Thu, 17 Mar 2011 16:29:12 +0000

[...] the reason, lets hope this one sticks,” wrote M86′s Phil Hay. “Previous attempts at botnet shutdowns have tended to be short lived as the botnet herders [...]

Comment on Can’t Believe A Girl Did This Because of Justin Bieber? You Shouldn’t by I can’t believe a GIRL did this because of Justin Bieber | ZDNet

I can’t believe a GIRL did this because of Justin Bieber | ZDNet — Tue, 01 Mar 2011 22:25:51 +0000

[...] M86 Security Labs has branded it a “likejacking” scam (a play on the term clickjacking, which means prompting a victim to click something while a different action is taken behind the scenes) and said it was similar to previous campaigns that were first observed last year. Clicking the link leads to FouTube page, a fake version of YouTube, that says “Please Watch this video only if you are 16 years or older.” The FouTube player video window is overlayed with a hidden iframe; clicking on it anywhere will submit a Facebook Like and spread the post on the victim’s Facebook page. [...]