PandaLabs

Why you shouldn't watch Obama throw punches on Twitter

If you get a direct message on Twitter telling you to click a link to watch a video of President Barack Obama punching a guy, don't do it.

Spammers are using the idea of the president retaliating against someone for calling him the n-word to steal Twitter passwords and deliver malware to computers, security company PandaLabs noted today.

It's a scheme that uses the names of Twitter, Facebook, and YouTube for nefarious purposes, with spammers creating fake pages to dupe unsuspecting Twitter users.

The scam involves sending a Twitter direct message that reads "Check out Obama punch … Read more

Report: Stolen data sold over online black market

Cybercriminals buy and sell stolen information using a vast network of online stores, forums, and even social-networking accounts, according to a report released yesterday by PandaLabs.

Posing as a cybercriminal to gain access to this online black market, PandaLabs researchers uncovered a world where the bad guys work together to buy and sell stolen bank account information, credit card numbers, passwords, and other products. Much of this illegal enterprise is done through online stores and forums, but PandaLabs found criminals using Facebook and Twitter accounts to set up shop as well.

Though this black market is relatively open, the security … Read more

Malware found on second Vodafone HTC Magic

When Panda Security found malware on a brand new Android-based Vodafone HTC Magic earlier this month, Vodafone said it was an "isolated local incident." Now, a second phone has been found harboring malware, including a program that turns infected machines into zombies as part of the Mariposa credit card and bank log-in-stealing botnet, according to Spain-based PandaLabs.

After hearing about PandaLabs' discovery, an employee at another Spanish security company, S21Sec, checked his recently acquired HTC Magic and found the Mariposa malware lurking on it, according to a PandaLabs blog post on Wednesday.

"This guy had also purchased … Read more

Breaking the Mariposa botnet (Q&A)

At its height, the Mariposa botnet consisted of about 13 million computers in 190 countries. A joint operation by researchers from Canadian security firm Defence Intelligence and Spain's PandaLabs, in conjunction with the FBI and the Guardia Civil, led to the arrest of three men in Spain earlier this month in connection with the Mariposa botnet.

The men, who had no specific computer training, are believed to have played a part in operating the command-and-control servers for the botnet, according to PandaLabs' technical director Luis Corrons, who spoke to ZDNet UK about Mariposa following the arrests.

When did security … Read more

Report finds fake antivirus on the rise

Malware posing as antivirus software is spreading fast with tens of millions of computers infected each month, according to a report to be released on Wednesday from PandaLabs.

PandaLabs found 1,000 samples of fake antivirus software in the first quarter of 2008. In a year, that number had grown to 111,000. And in the second quarter of 2009, it reached 374,000, Luis Corrons, technical director of PandaLabs said in a recent interview.

"We've created a specific team to deal with this," he said, of the rogue antivirus software that issues false warnings of infections … Read more

Cybercriminals use fake search engines to spread malware

Cybercriminals have moved on from search engine optimization techniques and are now creating fake search sites designed solely to direct Web surfers to pages hosting malware, Panda Security warned on Wednesday.

Previously, attackers resorted to sending e-mails with malicious code in attachments and with links to malicious Web sites and took measures to push those Web sites higher in search engine rankings. Now, they're also creating fake search engines that are showing up in Google search results, according to a PandaLabs blog posting.

When people use the engines to search for popular terms, like "flu statistics," the … Read more