AegisLab has been integrated into VirusTotal’s file online scanning service!
VirusTotal announced that AegisLab has been integrated into the file scanner backbone since February 4, 2013. The official announcement: VirusTotal += AegisLab
Author Archives: Leo Wu
FollowAegisLab Web Guard has been integrated into VirusTotal’s URL online scanning service!
VirusTotal, a subsidiary of Google, is a free online service that analyzes files and URLs enabling the identification of viruses, worms, trojans and other kinds of malicious content detected by antivirus engines and website scanners! VirusTotal announced that AegisLab Web Guard has been integrated into the URL scanner backbone since October 31, 2013. The official […]
Security Alert 2013-08-23：Facebook scam mail leads to Blackhole Exploit Kit！
AegisLab discovers that many forged Facebook's notices, essentially phishing mails, have been spread. The adversary employed the trick of the social engineering to perform this kind of attacks. It is difficult to distinguish whether the notices are true or not since the contents and the format of the notices are similar to the official ones. […]
Security Alert 2013-07-08：Be careful with fake browser updating website!(IE、Chrome、Firefox)
AegisLab found a malicious URL：hxxp://update-critical.com，it would detect your browser and redirect you to the fake browser updating website respectively! We discovered there are three types of these fake browser updating websites! AegisLab also found the similar case before：『 安全通報2013-01-03: SEO汙染,瀏覽器更新請注意!! 』，it's not a new trick! Moreover，hackers add instructions and following steps in these fake browser updating websites! IE：hxxp://update-critical.com → hxxp://update-critical.com/ie/ie.html → hxxp://update-critical.com/ie/IEUpdate.exe […]
Security Alert 2013-06-06：Blackhole Exploit Kit 2.0 outbreak again!
According to http://permalink.gmane.org/gmane.comp.security.ids.snort.emerging-sigs/19247，Blackhole Exploit Kit 2.0 infected many websites named "*/linkendorse.html". It often uses large SPAM mails to spread the malicious links! AegisLab also collected many similar malicious links. When you connect to these victim websites，they will redircet you to hxxp://onlinedatingblueprint.net/news/suspect-someplace.php We can see "Redirecting to Complain details… Please wait…"，the sentence is well-known Blackhole Exploit Kit's pattern! For […]