<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Evil Intentions &#187; malware</title>
	<atom:link href="http://psoug.org/blogs/mike/tag/malware/feed/" rel="self" type="application/rss+xml" />
	<link>http://psoug.org/blogs/mike</link>
	<description>Discussion of Security-Related Topics</description>
	<lastBuildDate>Sat, 30 Jun 2012 14:00:36 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.5.1</generator>
		<item>
		<title>Zeus Botnet Traps Researchers With Honeypot</title>
		<link>http://psoug.org/blogs/mike/2010/11/04/zeus-botnet-traps-researchers-with-honeypot/</link>
		<comments>http://psoug.org/blogs/mike/2010/11/04/zeus-botnet-traps-researchers-with-honeypot/#comments</comments>
		<pubDate>Thu, 04 Nov 2010 16:38:28 +0000</pubDate>
		<dc:creator>mike</dc:creator>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[bots]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://psoug.org/blogs/mike/?p=419</guid>
		<description><![CDATA[The authors of a recent Zeus Trojan exploit, which targeted federal taxpayers, also set up a special honeypot trap for researchers who might investigate the attack. They set up a phony &#34;administrative panel&#34; that fed the researchers fake statistics on the number of Zeus-infected machines, as well as fake &#34;botnet&#34; software that actually gathered intelligence [...]]]></description>
		<wfw:commentRss>http://psoug.org/blogs/mike/2010/11/04/zeus-botnet-traps-researchers-with-honeypot/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Twitter Exploit Soils The Internet</title>
		<link>http://psoug.org/blogs/mike/2010/09/21/twitter-exploit-soils-the-internet/</link>
		<comments>http://psoug.org/blogs/mike/2010/09/21/twitter-exploit-soils-the-internet/#comments</comments>
		<pubDate>Tue, 21 Sep 2010 14:19:11 +0000</pubDate>
		<dc:creator>mike</dc:creator>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[hacks]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[stupidity]]></category>
		<category><![CDATA[twitter]]></category>

		<guid isPermaLink="false">http://psoug.org/blogs/mike/?p=381</guid>
		<description><![CDATA[A security flaw is curently being exploited on Twitter, AKA The Confetti Of The Internet. Reportedly it&#039;s just blocking access to accessing user&#039;s Twitter home pages and also auto-retweeting the exploit code whenever you move your mouse over parts of the page. However, there have also been reports (not surprisingly) of the exploit being used [...]]]></description>
		<wfw:commentRss>http://psoug.org/blogs/mike/2010/09/21/twitter-exploit-soils-the-internet/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Free Malware, Courtesy of Network Solutions</title>
		<link>http://psoug.org/blogs/mike/2010/08/17/free-malware-courtesy-of-network-solutions/</link>
		<comments>http://psoug.org/blogs/mike/2010/08/17/free-malware-courtesy-of-network-solutions/#comments</comments>
		<pubDate>Tue, 17 Aug 2010 18:22:49 +0000</pubDate>
		<dc:creator>mike</dc:creator>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[hacking]]></category>
		<category><![CDATA[malware]]></category>

		<guid isPermaLink="false">http://psoug.org/blogs/mike/?p=362</guid>
		<description><![CDATA[Sometimes you have to wonder if key people at large companies just are asleep at the switch, or if anyone is even at the switch. Or if there&#039;s even a switch to begin with. Word comes from Net-Security.org that Network Solutions, one of the largest registrars in the world, has been serving up heapin&#039; helpings [...]]]></description>
		<wfw:commentRss>http://psoug.org/blogs/mike/2010/08/17/free-malware-courtesy-of-network-solutions/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>At Siemens, We Just Don&#8217;t Care</title>
		<link>http://psoug.org/blogs/mike/2010/07/25/at-siemens-we-just-dont-care/</link>
		<comments>http://psoug.org/blogs/mike/2010/07/25/at-siemens-we-just-dont-care/#comments</comments>
		<pubDate>Sun, 25 Jul 2010 15:53:27 +0000</pubDate>
		<dc:creator>mike</dc:creator>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[hacking]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[microsoft]]></category>

		<guid isPermaLink="false">http://psoug.org/blogs/mike/?p=325</guid>
		<description><![CDATA[Bad News for users of Siemens devices that run the WinCC operating system: Siemens deliberately made their system running WinCC deeply vulnerable, knew about the problem for 2 or more years, and made a command decision to do&#8230;.nothing. That&#039;s right: Siemens built a seriously stupid vulnerability into their systems and then ignored it for over [...]]]></description>
		<wfw:commentRss>http://psoug.org/blogs/mike/2010/07/25/at-siemens-we-just-dont-care/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Dude, You&#8217;re Getting A Trojan!</title>
		<link>http://psoug.org/blogs/mike/2010/07/21/dude-youre-getting-a-trojan/</link>
		<comments>http://psoug.org/blogs/mike/2010/07/21/dude-youre-getting-a-trojan/#comments</comments>
		<pubDate>Wed, 21 Jul 2010 15:17:37 +0000</pubDate>
		<dc:creator>mike</dc:creator>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[hacking]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[programming]]></category>

		<guid isPermaLink="false">http://psoug.org/blogs/mike/?p=322</guid>
		<description><![CDATA[As an added (but unwanted) service, it appears that computer maker Dell is shipping motherboards that come pre-infected with a firmware-based trojan. Dell has confirmed that some of the firm&#039;s PowerEdge R410 server motherboards &#34;contain spyware of unspecified function&#34;. &#34;Dude, you&#039;re getting a Trojan!&#34; On one of their support forums, Dell states, &#34;The potential issue [...]]]></description>
		<wfw:commentRss>http://psoug.org/blogs/mike/2010/07/21/dude-youre-getting-a-trojan/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Brand New Flash Vulnerability &#8220;in the wild&#8221;</title>
		<link>http://psoug.org/blogs/mike/2010/06/07/brand-new-flash-vulnerability-in-the-wild/</link>
		<comments>http://psoug.org/blogs/mike/2010/06/07/brand-new-flash-vulnerability-in-the-wild/#comments</comments>
		<pubDate>Mon, 07 Jun 2010 03:01:06 +0000</pubDate>
		<dc:creator>mike</dc:creator>
				<category><![CDATA[General]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[flash]]></category>
		<category><![CDATA[hacks]]></category>
		<category><![CDATA[malware]]></category>

		<guid isPermaLink="false">http://psoug.org/blogs/mike/?p=239</guid>
		<description><![CDATA[Adobe late Friday warned that attackers are exploiting a &#34;critical vulnerability&#34; in the company&#39;s most widely-used software: Flash Player and Adobe Reader. The zero-day vulnerability is similar to one Adobe patched in July 2009. Amusingly, this one comes just days after the company&#39;s head of security admitted that hackers have its software in their crosshairs. [...]]]></description>
		<wfw:commentRss>http://psoug.org/blogs/mike/2010/06/07/brand-new-flash-vulnerability-in-the-wild/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Another Exploit Just For Facebook</title>
		<link>http://psoug.org/blogs/mike/2010/06/01/another-exploit-just-for-facebook/</link>
		<comments>http://psoug.org/blogs/mike/2010/06/01/another-exploit-just-for-facebook/#comments</comments>
		<pubDate>Tue, 01 Jun 2010 01:36:07 +0000</pubDate>
		<dc:creator>mike</dc:creator>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[facebook]]></category>
		<category><![CDATA[malware]]></category>

		<guid isPermaLink="false">http://psoug.org/blogs/mike/?p=236</guid>
		<description><![CDATA[It seems like Facebook is the hacking community&#39;s wet dream, the sunny playland that&#39;s always packed with childlike users who are easily convinced to hand over the keys to their privacy and security. For about the last day or so a series of attacks have exploited Facebook&#39;s &#39;Like&#39; feature through a simple clickjacking exploit. Using [...]]]></description>
		<wfw:commentRss>http://psoug.org/blogs/mike/2010/06/01/another-exploit-just-for-facebook/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>A Fun New Exploit Called &#8220;Tab-napping&#8221;</title>
		<link>http://psoug.org/blogs/mike/2010/05/25/a-fun-new-exploit-called-tab-napping/</link>
		<comments>http://psoug.org/blogs/mike/2010/05/25/a-fun-new-exploit-called-tab-napping/#comments</comments>
		<pubDate>Tue, 25 May 2010 20:26:23 +0000</pubDate>
		<dc:creator>mike</dc:creator>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[hacks]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[tricks]]></category>
		<category><![CDATA[web]]></category>

		<guid isPermaLink="false">http://psoug.org/blogs/mike/?p=230</guid>
		<description><![CDATA[Named with a nod to the word &#34;kidnapping&#34;, Brian Krebs details a nifty new exploit that&#39;s bound to make it&#39;s way to your browser sooner or later. This new phishing exploit relies on user inattention and your trust in browser tabs, and&#160; is likely to fool even the most security-savvy web surfers. Mozilla Firefox creative [...]]]></description>
		<wfw:commentRss>http://psoug.org/blogs/mike/2010/05/25/a-fun-new-exploit-called-tab-napping/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>The Newest Hacking Threat: Rogue Subdomains</title>
		<link>http://psoug.org/blogs/mike/2010/05/23/the-newest-hacking-threat-rogue-subdomains/</link>
		<comments>http://psoug.org/blogs/mike/2010/05/23/the-newest-hacking-threat-rogue-subdomains/#comments</comments>
		<pubDate>Sun, 23 May 2010 23:56:56 +0000</pubDate>
		<dc:creator>mike</dc:creator>
				<category><![CDATA[General]]></category>
		<category><![CDATA[exploit]]></category>
		<category><![CDATA[hacking]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[tricks]]></category>

		<guid isPermaLink="false">http://psoug.org/blogs/mike/?p=224</guid>
		<description><![CDATA[It seems that in their never-ending quest to find new ways to avoid detection, hackers have have ramped up the use of an exploit technique that has, up to now, not been widely used. The technique involves modifying a (compromised) site&#39;s DNS settings to use add &#34;hidden&#34; subdomains that serve up malware, either directly or [...]]]></description>
		<wfw:commentRss>http://psoug.org/blogs/mike/2010/05/23/the-newest-hacking-threat-rogue-subdomains/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>FTC shuts down porn- and botnet-loaded ISP</title>
		<link>http://psoug.org/blogs/mike/2010/05/19/ftc-shuts-down-porn-and-botnet-loaded-isp/</link>
		<comments>http://psoug.org/blogs/mike/2010/05/19/ftc-shuts-down-porn-and-botnet-loaded-isp/#comments</comments>
		<pubDate>Wed, 19 May 2010 22:02:13 +0000</pubDate>
		<dc:creator>mike</dc:creator>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[bots]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[spam]]></category>
		<category><![CDATA[spyware]]></category>

		<guid isPermaLink="false">http://psoug.org/blogs/mike/?p=219</guid>
		<description><![CDATA[The Federal Trade Commission acted today to effectively kill off the Internet Service Provider 3FN, who the agency said ran an operation primarily devoted to hosting spam, porn, botnets, phishing and a variety of other malicious Web content. The ISP&#39;s servers (along with its other assets) have been seized for sale, and the ISP has [...]]]></description>
		<wfw:commentRss>http://psoug.org/blogs/mike/2010/05/19/ftc-shuts-down-porn-and-botnet-loaded-isp/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
