Security Labs

Blog

Blogs

The Websense Security Labs Blog delivers the most current information about breaking security research topics and today's advanced Internet threats.  Websense Security Labs investigates and publishes information about outbreaks, new threats and other relevant Web security topics to protect organizations from converging risks to their data from Web, email and user based attacks.

Go to the new Security Labs Blog

Packer Detection and Generic Unpacking Techniques

02.29.2008 - 1:47 PM
Malware authors often use their own protections or packers to prevent automated unpacking of their executables. This is an attempt to delay development of antivirus (AV) signatures or in-depth behavioral analysis.
Read more »

Who do you trust with your web traffic?

02.26.2008 - 9:16 AM
More and more businesses, schools, and government agencies are managing Internet usage. In many cases, organizations are setting up policies to prevent users from accessing sites like MySpace, FaceBook, gambling, and shopping.
Read more »

Google's CAPTCHA busted in recent spammer tactics

02.22.2008 - 4:52 PM
Websense Security Labs has discovered that Googles popular web mail service Gmail is being targeted in recent spammer tactics. Spammers in these attacks managed to created bots that are capable of signing up and creating random Gmail accounts for spamming purposes.
Read more »

New MySpace Link Hack in Use

02.21.2008 - 11:06 AM
Websense Security Labs has been tracking a technique that allows for easier social engineering on MySpace. The technique involves the creation of malformed anchor tags with style attributes that cover most of the clickable page with whatever link an attacker wants. Use of this technique has been detected in MySpace phishing sites, adult dating spam, and other questionable content.
Read more »

Google IE toolbar 404 “hijacking”

02.14.2008 - 3:47 PM
Much has been written about the recent "hijacking" of 404 pages by Google's IE toolbar, causing a stir. Rather than rely on hearsay, we like to refer to the authoritative source about what Google has officially said about this. In our research, we have discovered malicious sites returning HTTP 404 codes (indicating that the web site requested could not be found), and then turning around to serve a page ...
Read more »

Streamlined anti-CAPTCHA operations by spammers on Microsoft Windows Live Mail

02.06.2008 - 1:37 PM
Websense Security Labs ThreatSeeker technology has discovered that Windows Live Mail accounts have been targeted in recent spammer tactics. In these recent attacks, spammers have managed to create bots that are capable of signing up and creating random Live Mail accounts that could be used for a wide range of subsequent attacks.
Read more »