原站：http://www.websensesecuritylabs.com/alerts/

标签：websense

“Security Labs”的内容更新

累计：406 篇（自 2007-09-04 起）

更新：约2篇/周，最后更新4 天前

Security Labs

Injection code masquerades as Google Analytics

the websense® threatseeker® network has discovered a new wave of injection of malicious code disguising itself as google analytics, by adopting similar code snippets and malicious domains. it is quite convincing at first glance, but remember, usually we put the analytics code at the bottom of the page, instead of at the top, so this is a goo... (4 天前)

http://inezha.com/w/re3t7a84

Security Labs

Buyers beware—of Olympic scams

shady ticket deals for the 2012 london olympics? hardly surprising. but when the source is google's famous adwords advertising service—one of the internet giant's main sources of income—then a double take might be in order. a bbc investigation found that a google search for "olympic tickets" resulted in top-of-the-page placement of sponsored sites fo... (10 天前)

http://inezha.com/w/ndaa6a8w

Security Labs

3-2-1 Wordpress vulnerability leads to possible new

this past weekend one compromised web site in particular caught my attention. based on my analysis, the site was compromised because it was running an old version of wordpress (3.2.1) that is vulnerable to publicly available exploits [1] [2]. the web site injection is only somewhat interesting. what is more interesting is the redirection chain and resu... (13 天前)

http://inezha.com/w/9fcila81

Security Labs

Trojan caught on camera shows CAPTCHA is still a sec

in a series of blogs a few years back, we covered how malware could abuse and circumvent online services that use captcha tests as part of their security (1 2). in this blog, we take a look at a recent malware variant from the wild caught on camera that shows captcha tests used by some online services may still be weak. the image below (picture 1) s... (13 天前)

http://inezha.com/w/b73pua80

Security Labs

Phoenix, Phoenix, I need help!

the websense® threatseeker® network has been tracking an ongoing malicious email campaign in which a recipient is asked to click a link to check a bill mistakenly received by another user. we have been monitoring campaigns of thousands of emails similar to this one for a while now and notice that the phoenix exploit kit is used. the campaign... (16 天前)

http://inezha.com/w/tca8rt8n

Security Labs

entrepreneur.com compromised with CrimePack

today, websense® threatseeker® network alerted us that entrepreneur.com has been compromised by cyber criminals, resulting in potentially malicious content being downloaded to a user's machine. entrepreneur.com is a very popular information and community resource for small businesses on the web (see alexa rank). websense customers are protected... (16 天前)

http://inezha.com/w/x0cx2t8i

Security Labs

Search for Google Chrome leads to Compromised Chrome

this morning websense® threatseeker® network alerted us that if a user enters the term "download chrome" in google search, the 36th result would result in potentially malicious content being downloaded to the user's machine. i'll briefly describe the attack vector in which the content is sent to the user.web search search for "download chrom... (16 天前)

http://inezha.com/w/yj3ubt8f

订阅者 ( 1 )