Archive for September, 2008

A surprising thing …

Monday, September 29th, 2008

I have just got a worm in the last place where you can think that something like this can happen … in the university faculty of engineering where I study.

Here the beasty

News from AVerz

Monday, September 15th, 2008

I got a description for my greasemonkey worm.
It’s the first time that they write a full and good description for one of my virii…

Wasting time …

Sunday, September 14th, 2008

I have just found a great open source real time strategy game called warzone2100 and now I am wasting all my time on it …
The start of university is very near for me…

Good & Bad news

Thursday, September 4th, 2008

Good news: I have moved back to EOF-project and my friend Mike_Hood got a description for his lnk infecting virus.
Bad news: DoomRiderz is dead :(

How to make the life of commercial malwares simpler

Wednesday, September 3rd, 2008

From zdnet


Just hours after the release of Google Chrome, researcher Aviv Raff discovered that he could combine two vulnerabilities ? a flaw in Apple Safari (WebKit) and a Java bug discussed at this year?s Black Hat conference ? to trick users into launching executables direct from the new browser.

Raff has cooked up a harmless demo of the attack in action, showing how a Google Chrome users can be lured into downloading and launching a JAR (Java Archive) file that gets executed without warning.

In the proof-of-concept, Raff?s code shows how a malicious hacker can use a clever social engineering lure ? it requires two mouse clicks ? to plant malware on Windows desktops.

The Google Chrome user-agent shows that Chrome is actually WebKit 525.13 (Safari 3.1), which is an outdated/vulnerable version of that browser.

Apple patched the carpet-bombing issue with Safari v3.1.2.

Some Google Chrome early adopters using Windows Vista are reporting that files downloaded from the Internet are automatically dropped on the desktop, setting up a scenario where a combo-attack using this unpatched IE flaw could be used in attacks.