Tactical
Threats
News
About
 
3rd July 2009
INFOCON LEVEL
Internet Storm Center
green
Symantec ThreatCon:
Level 1: Normal
ISS AlertCon:
Level 1: Regular Vigilance
US-DHS Threat Advisory:
Level 3: Elevated
MALWARE THREATS
Spy-Agent.bw
W32/Checkout!91d0
Downloader-UA.h
Downloader-BKU
Rscan.gen
Rscan
W32/Autorun.worm.
generic pws.y!bad
FakeAlert-BF.dr
  Source: McAfee
 

Internet Storm Center Diary
BCP/DRP
Happy 4th of July!
FCKEditor advisory
Authorize.net down
Cold Fusion web sites getting compromised
source: ISC :: Sat, 04 Jul 2009 02:45:12 GMT
Current Threat Activity
Mozilla Foundation Releases Firefox 3.5
Spam, Phishing, and Malicious Code Related to Recent Celebrity Deaths
Adobe Releases Update for Shockwave Player
Foxit Reader Contains Multiple Vulnerabilities
Apple Releases iPhone OS 3.0
source: US-CERT :: Thu, 02 Jul 2009 18:30:08 GMT
Critical Vulnerabilities
Motorola Timbuktu Pro Buffer Overflow Vulnerability
HP OpenView Network Node Manager Buffer Overflow Vulnerability
Unisys Business Information Server Buffer Overflow Vulnerability
VLC Media Player Buffer Overflow Vulnerability
Baofeng Storm Buffer Overflow Vulnerability
source: SANS @Risk :: Thu, 02 Jul 2009 21:45:05 GMT

DShield Geographic Distribution of Attack Sources
Top 10 Attackers
 61.134.56.18  210.231.114.157
 125.211.198.13  89.35.201.92
 125.211.198.5  202.103.11.41
 219.138.39.9  61.132.223.14
 89.35.78.183  202.99.11.99
Top 5 Attacker Countries
  Romania (52)
  China (33)
  Russian Federation (3)
  Republic Of Moldova (2)
  Taiwan (2)
Top 6 Target Ports
445
microsoft-ds
49390
---
7929
---
23
telnet
27425
---
64035
---
Vulnerabilities:  
News Feed:  
Los Angeles
Chicago
Washington DC
Rio Janeiro
GMT/UTC
London / Lisbon
Europe
Baghdad
Tokyo
Sydney