Endpoint Protection

The Four Phases of Every Attack

Let’s face it, threats have gotten much more complex; like complex mechanisms they use multiple, consecutive methods to attack. At McAfee, our research teams continually analyze the threat landscape, and define threats in terms of their attack mechanisms, which consistently fall into four categories. First malware needs a way to come in contact with unsuspecting Read more…

Tags: Endpoint Protection, Endpoint Security, security, security attacks, security threats

RDP+RCE=Bad News (MS12-020)

See March 15 and 16 updates at the end of this blog. —————————————————-   The March Security Bulletin release from Microsoft was relatively light in volume. Out of the six bulletins released, only one was rated as Critical. And for good reason. MS12-020 includes CVE-2012-0002. This flaw is specific to the Remote Desktop Protocol (RDP) present on Read more…

Tags: Cyber Security Mom, Cybercrime, data breach, Data Protection, Endpoint Protection, enterprise, global threat intelligence, labs, malware, McAfee Labs, Microsoft Security Bulletin, MS12-020, Network Security, Risk and Compliance

An Update on DNSChanger and Rogue DNS Servers

In late 2011, the FBI released documents and data focusing on “Operation Ghost Click.” This malicious operation, leveraging a variety of DNSChanger-type malware, was defined by the FBI as an “international cyber ring that infected millions of computers.” Associated malware samples and events can be traced back several years, and multiple platforms were targeted. To this day many remain Read more…

Tags: Cybercrime, Endpoint Protection, enterprise, global threat intelligence, malware, McAfee, Risk and Compliance

Another Overview of Exploit Packs

Recently I blogged about some exploit packs. In that post I showed a table that had 10 common malware kits. I listed the vulnerabilities used, referenced by their Common Vulnerabilities & Exposures (CVE) names. There were 45 vulnerabilities in the table. From the data, this idea was taken up by Mila Parkour via her Contagio Read more…

Tags: Cybercrime, data breach, Data Protection, Endpoint Protection, global threat intelligence, identity theft, malware, Network Security, social networking

McAfee Q4 Threats Report Shows Malware Surpassed 75 Million Samples in 2011

Today we released our Fourth Quarter 2011 Threat Report, revealing that malware surpassed the our estimate of 75 million unique malware samples last year. Although the release of new malware slowed a bit in Q4, mobile malware continued to increase and recorded its busiest year to date. Malware The overall growth of PC-based malware actually Read more…

Tags: Android, Cybercrime, data breach, Data Protection, Endpoint Protection, enterprise, facebook, global threat intelligence, identity protection, Identity thieves and cybercriminals, malware, mobile security, Network Security, Risk and Compliance, security, social networking, spam

Rooting Out Rootkits

You have deployed every security solution imaginable. You leverage defense in depth. You update and patch regularly. You have built a fortress with a moat. But deep below all your tools is a rootkit saying “everything is ok” while secretly monitoring everything the system is doing and silently extracting data. How can this happen? What Read more…

Tags: Deep Defender, DeepSAFE, Endpoint Protection, intel, Rookits

Only A Few Days Left (by Alex Thurber)

As I write this, it is one week from Thanksgiving, here in the United States. This is our kick-off to the holiday season, which got me thinking about our year-end and the realization that while there may be 36 shopping days till Christmas there are far fewer selling days before we reach our Dec. 28, Read more…

Tags: Alex Thurber, Commercial and Enterprise Deal Registration, Endpoint Protection, Endpoint security suite upgrade, Enhanced Deal Registration, gold software support, I Series, intrusion prevention, M Series, mcafee total protection, McAfee Vulnerability Manager, Risk Management, SMB Extravaganza, thurber

McAfee Labs Releases “Fake Alert” Stinger

McAfee Labs is pleased to announce the availability of our “Fake Alert” Stinger – an improved Stinger tool with aggressive generic content targeted at enhanced detection and remediation of fake alert based threats. In our efforts to provide the best of protection for our customers against rogue security products or fake alert type malware – Read more…

Tags: Cybercrime, Data Protection, Endpoint Protection, fake alert, fake-av, Family Safety, identity protection, identity theft, malware

The New Reality of Stealth Crimeware

Anyone who has been in information security recently knows that it has gotten easier for cybercriminals to build stealth crimeware. The malware we deal with on a regular basis grows ever more difficult to find, while high-end targeted attacks such as Stuxnet and other advanced persistent threats (APTs, the abbreviation I hate) are using ever Read more…

Tags: advanced persistent threats, APT, crimeware, Cybercrime, Data Protection, Endpoint Protection, identity protection, malware, Network Security, Operation Aurora, rootkit, Rootkits, security, Stuxnet

Botnets Demystified and Simplified

Let’s face it: Most people–even folks in the security industry–have a hard time explaining botnets (robot networks of infected computers) in a way that your Uncle Joe or Aunt Betty can understand. Is it really a big deal? Yes, it is. With the rapid growth in malware and bot infections we’re seeing, it’s important for Read more…

Tags: bot, botnet, Cybercrime, Data Protection, Endpoint Protection, facebook, global threat intelligence, identity protection, malware, social networking, spam, Web 2.0, zombie, zombie computers