Secure blogging

Finally, we’re here! A weblog from the international antivirus lab at Kaspersky, with news, interesting details, top level security information and from time to time, even pictures! 🙂

While on the subject of blogging, I have to say that posting to this weblog is probably one of the most complex (and secure!) online processes I’ve seen. IP-based authentication, public/secret key pairs, passwords plus a few other extra security protocols which I cannot disclose. Just the way a proper security product should be. (grin)

Speaking of security and weblogs, there’s a new popular exploit on the internet targetting WordPress, maybe the most powerful weblogging software out there. This vulnerability is fixed by the WordPress 1.2.1 release, so if you are an WordPress user, make sure you run the latest update.

Kaspersky researchers have discovered new Mirage Kitten attacks using previously undocumented malware families: NodeRabbit in Node.js and PollCat in JavaScript.

Our experts discovered a new CoolClient backdoor variant with a kernel-mode rootkit driver that hides malicious processes, files, and network connections from security tools and threat analysts.

Kaspersky experts break down a new Armored Likho campaign that poses as a fundraising efforts and delivers a new Still Toolkit aimed at stealing Telegram data and eavesdropping on victims.

Kaspersky researchers reveal previously undocumented malware attributed to Mirage Kitten (UNC1549, Smoke Sandstorm, Nimbus Manticore): NightLedger backdoor, ArcBridge, and BridgeHead tunneling tools.