SANS ISC: insidious botnets, MSN phishing, the honor of thieves.

• SANS Site Network
  • Current Site
  • SANS Internet Storm Center
  • Other SANS Sites Help
  • Graduate Degree Programs
  • Security Training
  • Security Certification
  • Security Awareness Training
  • Penetration Testing
  • Industrial Control Systems
  • Cyber Defense Foundations
  • DFIR
  • Software Security
  • Government OnSite Training

SANS ISC InfoSec Forums

Insidious Botnets:

Botnets keep getting more malicious every day. Now we're seeing ones that
are logging all the activity of the compromised computer to the botnet controller,
such as what application is running and what the user is typing into that application.

MSN Phishing:

It appears that your bank account isn't all that the phishermen want--they want
your MSN user accounts too. We've gotten a report of an email going around
asking users to verify their account information, due to a "tech problem".
Yes "Deary Msn user" (or "Darling MSN services client", if you prefer), you
should be suspicious and definately NOT click on that link, even though it
appears legitimate.

No honor among thieves:

We've also gotten a report that there is an application circulating the Internet
claiming to be a crack for Half-Life 2 to disable STEAM registration. In reality,
it's a simple VisualBasic backdoor. Shocking. Simply shocking.