After the holiday season is over and people resumed their office with new year work load ahead, it all started with phishing scam on one of the India’s popular nationalized bank. Since 8th January I had been observing that I had been receiving phishing emails targeting Punjab National Bank of India. The email looked as […]
New Google Android based mobiles phone are being released one by one and the trend of fraudulent android applications has started to surface.Among the several applications that were available on Android Market, it was observed that few moblie banking applications were providing the facility of just connecting the user to mobile banking website of the […]
Some user reported of receiving mail from BANK OF INDIA with subject line “BANK OF INDIA -Beware of fraudulent emails”. The Bank seem to be woken up by the recent surge to fraudulent emails targeting their users. The mail contains an attachment named “Take_Care_from_Phishing_emails.doc” which provides some Tips for safe and secure banking. If you […]
A new virus infects Delphi installations. Infected program searches for installed versions of Delphi and modifies SysConst.dcu in each of them; old version is saved as SysConst.bak. After infection all Delphi projects compiled on this computer start infecting Delphi at every computer they are launched on. Current detected as W32.Induc.A
Overview of the March 2009 Microsoft patches and their status. 1 critical and 2 important updates MS09-006 Multiple input validation vulnerabilities in the windows kernel allow random code execution though the GDI component (WMF and EMF files yet again), and privilege escalations that allow random code to be run in kernel mode. Replaces MS08-061. MS09-007 […]
Mozilla has released version 3.0.7 of Firefox. This release fixes several issues found in the previous version. The most critical item fixed is the problem of a crash causing memory corruption. For release notes click here
Overview of the February 2009 Microsoft patches and their status. 2 critical and 2 important updates MS09-002 Cumulative MSIE patch, adds fixes for multiple vulnerabilities that lead to random code execution with the rights of the logged on user Replaces MS08-073 and MS08-078. MS09-003 Multiple vulnerabilities allow code execution and DoS. Replaces MS08-039. MS09-004 An […]
The worm spread by exploiting the RPC vulnerability MS08-067, It also attempted to brute-force user passwords when connecting to the ADMIN$ share of systems on the local network.
Overview of the January 2009 Microsoft patches and their status. MS09-001 Vulnerabilities in SMB Could Allow Remote Code Execution.
The Internet Systems Consortium has released an update for all supported BIND 9.x versions. In this update a potential DNS poisoning vector has been addressed. The problem appears to affect only specific BIND configuration where DNSSEC has been enabled. Refer to the ISC BIND Server software Index
