Blog

Blogs

The Websense Security Labs Blog delivers the most current information about breaking security research topics and today's advanced Internet threats.  Websense Security Labs investigates and publishes information about outbreaks, new threats and other relevant Web security topics to protect organizations from converging risks to their data from Web, email and user based attacks.

Do we protect against the STORM attacks?

08.25.2007 - 11:32 AM
Since early July the Storm Trojan has been the most active attack that we have seen in a couple years on the net. Is it a worm? A Trojan? A Bot? A spam agent? The answer is "All of the above"!
Read more »

New filename for Storm Trojan / Bot

08.20.2007 - 7:28 PM
The Storm Trojan / Bot continues to spread like wildfire.&nbsp; The latest version has a variety of subjects and email bodies but now uses the filename applet.exe. Email copy sample: <font face="Arial, Helv...
Read more »

They don&rsquo;t call it the World &ldquo;Wild&rdquo; Web for nothing....

08.17.2007 - 3:10 PM
There are several trends we are seeing in our security research these days. The biggest are: the increased use of exploit kits to run code on end-users machine based on browser vulnerabilities, the massive amounts of compromised web servers on the net, and the big increases in information stealing code. Now obviously the web is an entanglement of pages connected together through links. Recently I started researching a set of pages which lead me down such an entanglement. This time it was different though as each step along the way I found compromised machines in different locations. While some of them were connected to each other, many were hosted in other geographies. The one commonality was the motive&nbsp; operandi: to steal data by installing information stealing Trojan Horses. These included; banking password stealers, general information grabbers, and game stealing code. <p...
Read more »