Exploits

Uncategorised

Koobface Botnet Starts Serving Client-Side Exploits

25 Nov 2009 By Dancho Danchev

UPDATED, Wednesday, December 02, 2009: The systematic rotation of new redirectors and scareware domains remains ongoing, with no signs of resuming the use of client-side exploits. Some of the latest ones include inviteerverwhere .cn – Email: box@cethcuples.com -> scanner-infoa .com – Email: inout@celestia.com, scareware detection rate; 1economyguide .cn – Email: contact@berussa.de -> superdefenceaj .com –Read More

Uncategorised

Syrian Embassy in London Serving Malware

27 Sep 2007 By Dancho Danchev

After Bank of India was serving malware in August, next to the U.S Consulate in St.Petersburg two days later in September, now the Syrian Embassy in London is the latest victim of a popular malware embedding attack which took place between the 21st and 24th of September. As obfuscating the IFRAMEs in order to makeRead More

Uncategorised

Delaying Yesterday's "0day" Security Vulnerability

27 May 2006 By Dancho Danchev

I never imagined we would be waiting for the release of a “0day” vulnerability, but I guess that’s what happens if you’re not a customer of an informediary in the growing market for software vulnerabilities — growth in respect to, researchers, infomediaries and security vulnerabilities. Stay tuned for “Exploit Of Windows 2000 Zero-day To HitRead More

Uncategorised

Shaping the Market for Security Vulnerabilities Through Exploit Derivatives

08 May 2006 By Dancho Danchev

In a previous post “0bay – how realistic is the market for security vulnerabilities?” I gave a brief overview of the current market infomediaries and their position, listed various research I recommend you to go through, and speculated on an auction based market model. During April, at the CanSecWest Security Conference “Groups argued over meritsRead More

Uncategorised

The Current State of Web Application Worms

04 May 2006 By Dancho Danchev

Remeber the most recent Yahoo! Mail’s XSS vulnerabilities, or the MySpace worm? I just read through a well written summary on Web Application Worms by Jeremiah Grossman, from WhiteHat Security, “Cross-Site Scripting Worms and Viruses – The Impending Threat and the Best Defense“, an excerpt : “Samy, the author of the worm, was on aRead More

Uncategorised

"Successful" communication

17 Mar 2006 By Dancho Danchev

You know Dilbert, don’t you? I find this cartoon a very good representation of what is going on in the emerging market for software vulnerabilities, and of course, its OTC trade practices — total miscommunication and different needs and opinions. While different opinions and needs provoke quality discussion and I understand the point that everyoneRead More

Uncategorised

Where's my 0day, please?

07 Mar 2006 By Dancho Danchev

A site I was recently monitoring disappeared these days, so I feel it’s about time I blog on this case. I have been talking about the emerging market for software vulnerabilities for quite some time, and it’s quite a success to come across that the concept has been happening right there in front of us.Read More

Uncategorised

How to win 10,000 bucks until the end of March?

17 Feb 2006 By Dancho Danchev

I feel that, in response to the recent event of how the WMF vulnerability got purchased/sold for $4000 (an interesting timeframe as well), iDefense are actively working on strengthening their market positioning – that is the maintain their pioneering position as a perhaps the first company to start paying vulnerability researchers for their discoveries. TheRead More

Uncategorised

A timeframe on the purchased/sold WMF vulnerability

15 Feb 2006 By Dancho Danchev

The WMF vulnerability and how it got purchased/sold for $4000 was a major event during January, at least for me as for quite some time the industry was in the twilight zone by not going through a recently released report. But does this fact matters next to figuring out how to safeguard the security ofRead More

Uncategorised

Was the WMF vulnerability purchased for $4000?!

30 Jan 2006 By Dancho Danchev

Going through Kaspersky’s latest summary of Malware – Evolution, October – December 2005, I came across a research finding that would definitely go under the news radar, as always, and while The Hackers seem to be more elite than the folks that actually found the vulnerability I think the issue itself deserves more attention relatedRead More

Dancho Danchev's Leading Cyber Threat Intelligence Products Portal