In a recently discovered spam e-mail campaign promoting fake AV, the links in the messages take users to one of more than 300 compromised domains. Once users lands on the page, a JavaScript message warning about a “critical process activity” prepares them for a fake scan which immediately starts “running.” “The page

 [More]

Microsoft has gone after another botnet, this time targeting some of the command-and-control infrastructure behind the Zeus network with a takedown effort that included seizing two IP addresses used for C&C servers and filing suit against 39 unnamed defendants. The action against Zeus is the latest in a string of such moves

 [More]

A Kaspersky Lab researcher has discovered a Brazilian social engineering campaign that attempts to trick Facebook users into installing a malicious plug-in hosted on Google’s Chrome Web Store. The Facebook scam-page solicits victims by promising to teach them how to “remove the virus from their Facebook profile.” Securelist claims that the application has

 [More]

We knew that political posturing over the privacy brouhaha involving employer requests for access to Facebook accounts was only just getting started. Today U.S. Sens. Richard Blumenthal (D-Conn.) and Charles Schumer (D-N.Y.) called on two federal agencies -- the Department of Justice and the Equal Employment Opportunity Commission -- to investigate what

 [More]