Malware Blog news pickups: February 27 - March 5, 2010

Pageviews to blog posts picked up

	27-Feb	28-Feb	1-Mar	2-Mar	3-Mar	4-Mar	5-Mar
Malware Blog	1,854	1,782	2,021	2,037	3,784	3,684	1,682
Spam Quarantine Notification = Spam by Mary Bagtas	-	-	6	13	4	4	2
New Exploit Bypasses DEP by Carolyn Guevarra	-	-	-	-	146	84	3

New Exploit Bypasses DEP

Spam Quarantine Notification = Spam

New exploit technique nullifies major Windows defense

ARN, AU - Mar 5

"After Wever released his heap-spraying exploit codes in 2005, a lot of new exploits started using that technique," said Trend's Ria Rivera in an entry on the company's malware blog . "It would thus be not farfetched that the release of this new proof-of-concept could lead to the same scenario -- new exploits could start using 'return-to-libc' to achieve DEP bypass."

Google engineer reveals Windows exploit

TechWorld, US - Mar 5

Earlier today, another Trend Micro researcher also predicted that Wever's disclosure will likely lead to attacks that regularly shove aside DEP's defenses. "After Wever released his heap-spraying exploit codes in 2005, a lot of new exploits started using that technique," said Trend's Ria Rivera in an entry on the company's malware blog.

New exploit technique nullifies major Windows defense

NetworkWorld, US - Mar 4

Earlier today, another Trend Micro researcher also predicted that Wever's disclosure will likely lead to attacks that regularly shove aside DEP's defenses. "After Wever released his heap-spraying exploit codes in 2005, a lot of new exploits started using that technique," said Trend's Ria Rivera in an entry on the company's malware blog

New exploit technique nullifies major Windows defense

Computerworld, US - Mar 4

Earlier today, another Trend Micro researcher also predicted that Wever's disclosure will likely lead to attacks that regularly shove aside DEP's defenses. "After Wever released his heap-spraying exploit codes in 2005, a lot of new exploits started using that technique," said Trend's Ria Rivera in an entry on the company's malware blog.

Spam disguised as spam notification

Help Net Security, US - Mar 3

The spammers are obviously counting on the recipient's curiosity - the message says to ignore the message if the user thinks it's spam, or to click on the link to check out the message. According to TrendMicro, the site to where the link leads has been already taken down, but let this serve as a warning for next time.

.