Threat Research

It’s what we do.

A peek inside the Umbra malware loader

January 20, 2012By Dancho Danchev

The thriving cybercrime underground marketplace has a lot to offer. From DIY botnet builders, DIY DDoS platforms, to platforms for executing clickjacking and likejacking campaigns, next to drive-by malware attacks, the ecosystem is…read more

A peek inside the Cythosia v2 DDoS Bot

January 9, 2012By Dancho Danchev

by Dancho Danchev With DDoS extortion and DDoS for hire attacks proliferating, next to the ever decreasing price for renting a botnet, it shouldn’t come as a surprise that cybercriminals are constantly experimenting…read more

A peek inside the PickPocket Botnet

January 6, 2012By Dancho Danchev

by Dancho Danchev Malicious attackers quickly adapt to emerging trends, and therefore constantly produce new malicious releases. One of these recently released underground tools, is the PickPocket Botnet, a web-based command and control…read more

Mass SQL injection attack affects over 200,000 URLs

January 5, 2012By Dancho Danchev

by Dancho Danchev Security researchers from the Internet Storm Center, have intercepted a currently ongoing SQL injection attack, that has already affected over 200,000 URLs. The attack was originally detected in early December, 2011….read more

For your eyes only (please)

December 1, 2011By glhaldeman

By the Webroot Threat Team Have you ever had the queasy experience of sending a message to someone that you’d rather not have anyone else see, and then hoping that it won’t get…read more

Reflections on mobile security

November 21, 2011By Armando Orozco

By Armando Orozco Be wary the next time you enter your passcode into your iPhone on the bus – someone could be shoulder surfing. In fact, a team of researchers from the University…read more

Top 7 Cybersecurity Predictions for 2012

November 17, 2011By glhaldeman

By Mel Morris From Stuxnet to Sony, a number of cyberattacks emerged in 2011 that experts have predicted for quite some time. I predict 2012 will be even more pivotal, thrusting cybersecurity into…read more

In space, no one can hear you hack

November 14, 2011By glhaldeman

By the Webroot Threat Team Two of NASA’s satellites were hacked during 2007 and 2008, according to a draft report to be officially released later this month. According to the United States–China Economic…read more

A look inside the SpyEye Trojan admin console

October 24, 2011By glhaldeman

By Michael Johnson At Webroot we’ve been researching and chronicling developments with SpyEye since we first saw it in April 2010. This nasty Trojan is the successor to the Zeus Trojan, and it…read more

true