Storm Binary Tracker Updates
I had some spare time this afternoon, so I decided to update the web interface to my Storm Tracker Database. I hope everyone finds these changes useful, as I have include several correlated data...
View ArticleStorm Worm spam and domain names update
I ran the Storm Worm in my lab again tonight with no real surprising results to be found. It seems as though the Storm Worm authors are having issues keeping their Military theme going with Registrars...
View ArticleClik here to view.
Storm goes Phishing
Looks like the Authors of the Storm Worm have started to spam out phishing emails to our inboxes, so be ready tomorrow morning to warn your users. The following domain names are being used as the...
View ArticleClik here to view.
Storm returns Rootkit Functionality
This isn’t the first time the authors of the Storm Worm Trojan used a rootkit to hide it’s presence on user’s computers, and frankly I was really shocked when they had stopped including this...
View ArticleClik here to view.
Storm Worm new “Currency Theme” campaign begins
Looks like my prediction on the Storm Worm authors changing their theme within the coming days has just been confirmed. The newest Storm Worm Social Engineering theme is “Currency Based”, focusing on...
View ArticleStorm revists love theme and postcard.exe
I guess the Amero and the Domain Name outages just weren’t working out for the Storm Authors, as they have shifted back to an old theme. The message is simple: You’ve got an animated postcard from...
View ArticleClik here to view.
Storm Worm FBI vs FaceBook
A new Storm Campaign has been identified by my binary tracker this morning around 8am Central Standard Time. This new campaign is titled: “FBI vs Facebook” and is most likely another attempt at using...
View ArticleNew Storm Domains to go with FBI vs Facebook theme
Running the Storm Worm tonight in my lab uncovered some new Storm Domain names to go along with the new “FBI vs Facebook” theme. Here is a list of these new domain names: BestValueNews.com...
View ArticleClik here to view.
Storm spam leads to money laundering and more, oh my!
Sorry for the lack of coverage this month, as I have been extremely busy catching up with everything after going to Blackhat and Defcon. Anyways I spent a few hours watching the Storm Worm in my lab...
View ArticleStorm Worm – Go away, we’re not home
In the last few weeks I have received several requests for information regarding the Storm Worm. So today I thought I would perform an analysis in my lab on the last Storm Binary (postcard.exe) I...
View Article
