I Am Security » toolkit http://www.iamit.org/blog Security news and research Mon, 26 Jul 2010 09:20:36 +0000 en hourly 1 http://wordpress.org/?v=abc Down the rabbit hole all the way to Miami http://www.iamit.org/blog/2009/09/down-the-rabbit-hole-all-the-way-to-miami/ http://www.iamit.org/blog/2009/09/down-the-rabbit-hole-all-the-way-to-miami/#comments Fri, 25 Sep 2009 01:13:47 +0000 iamit http://www.iamit.org/blog/?p=368
  • Taking the Red Pill Down the Rabbit Hole
  • ExcaliburCon summary and general China notes
  • Cyber[Crime|War] – connecting the dots – BlackHat EU 2010
    • ]]>     So the talk at Hacker Halted was really good – I was impressed with the quality of the audience and the presentations.
    As promised, I’m posting my slide deck here for your reference. Enjoy!
    Down_the_rabbit_Hole-Ian_Amit

    Related posts:

    1. Taking the Red Pill Down the Rabbit Hole
    2. ExcaliburCon summary and general China notes
    3. Cyber[Crime|War] – connecting the dots – BlackHat EU 2010

    ]]>     http://www.iamit.org/blog/2009/09/down-the-rabbit-hole-all-the-way-to-miami/feed/ 1     The impact of just 5 random letters… http://www.iamit.org/blog/2008/01/the-impact-of-just-5-random-letters/ http://www.iamit.org/blog/2008/01/the-impact-of-just-5-random-letters/#comments Thu, 17 Jan 2008 02:50:00 +0000 iamit http://www.iamit.org/blog/?p=36
  • Two steps forward, one step back – controling botnets…
  • Hitting the nail on the head
  • Hosting provider crackdown?
    • ]]>

    We have been watching in amazement the impact our latest Malicious Page of the Month had on the industry and media.
    From coverage at Fox Business News, and the Washington Post, all the way to the more “traditional” security outlets such as SecurityFocus, SC Magazine and bloggers such as Dancho Danchev.

    The scary thing is the non-media related impact – we are still seeing a tremendous amount of domains (and sites) that are still compromised. Just a quick preview of the ongoing research we are putting into this – we are getting closer to getting to the root (no pun intended) cause of the problem that seems to affect Linux webservers (and this time it may not be a cPanel related issue for a change).

    Looking forward to posting an update soon as we make progress in cracking this one.

    Related posts:

    1. Two steps forward, one step back – controling botnets…
    2. Hitting the nail on the head
    3. Hosting provider crackdown?

    ]]>     http://www.iamit.org/blog/2008/01/the-impact-of-just-5-random-letters/feed/ 0     Tying it all up – explosive exploits… http://www.iamit.org/blog/2007/03/tying-it-all-up-explosive-exploits/ http://www.iamit.org/blog/2007/03/tying-it-all-up-explosive-exploits/#comments Thu, 22 Mar 2007 02:33:30 +0000 iamit http://www.iamit.org/blog/?p=6
  • Analyzing an AJAX Attack Vector in the wild
  • Have something to hide? make a lot of noise about it!
  • IFRAME is a security risk???
    • ]]>     The funniest thing happened yesterday – at a watercooler conversation our CTO informs us of a site that uses techniques from almost all of our trend reports (which means we are right as usual…). The interesting part was that it was one of those “iframe” sites that give you a small iframe html code to put in your website and they’ll pay you “per-infection” (is this thing copyrighted/patented yet??? ;-) ).

    Old news…

    But – after looking into the code he figured that this is pretty nasty stuff that basically BYPASSES every major security vendor’s detection technology (except for ours of course – and no – it’s not a marketing spin…).

    A few hours later we pushed out an “Extra” version of the “Malicious Page of the Month” dubbed “Malicious Page Under Benchmark” to show how the most modern names in security can’t handle a bunch of hackers that publicly spread their exploits.

    Check it out at: http://www.finjan.com/content.aspx?id=1367

    Be safe…

    Related posts:

    1. Analyzing an AJAX Attack Vector in the wild
    2. Have something to hide? make a lot of noise about it!
    3. IFRAME is a security risk???

    ]]>     http://www.iamit.org/blog/2007/03/tying-it-all-up-explosive-exploits/feed/ 0