These are quick first looks and trend and threats


Read More >>
Written by the security and AV professionals from team K7, meant for the general audience
Read More >>
These are usually articles that go into internals of a virus or deal with security issues
Read More >>
Senior managers speak on areas of interest to them, inside and outside the industry
Read More >>

Posts Tagged ‘security research’

Pump-and-dump scamster pleads guilty

Thursday, October 21st, 2010

An Arizona man, James Bragg, recently pleaded guilty of conspriacy to commit securities fraud, and now faces a large fine and possible prison term for the pump-and-dump scams he perpetrated using botnets and spam.

Pump-and-dump scams involve hyping the value of a cheap/worthless stock by advertising it heavily over the internet using spam. Typically, the stock is bought by the attacker who then sends out the mails to hype the stock, which creates buying interest, and then the attacker sells all their stock, cashing in on the falsely inflated value.

In this case, the defendant had allegedly hired people to use botnets to distribute his messages. The botnets were also used to compromise private accounts so that these could be used to buy up large amounts of the stocks in question. He also faces charges from sending spam.

Full story is here http://www.theregister.co.uk/2010/10/21/pump_and_dump_botnet/

Andrew Lee
CTO, K7 Computing

Indian Security researcher freed on bail

Wednesday, September 1st, 2010

Some good news via the EFF (Electronic Frontier Foundation), an Indian security researcher accused of stealing an electronic voting machine has been released on bail. Prasad had used the machine, which was given to him by an anonymous source, to show how the systems can be tampered.

Report here:
https://www.eff.org/deeplinks/2010/08/security-researcher-released-bail

Andrew Lee
CTO K7 Computing