




Outbreak Alert
Most Active New Threats
| Name | Type | Discovered |
| Trojan.Zeroaccess!g43 | Trojan | 05/14/2013 |
| Trojan.Modred | Trojan | 05/14/2013 |
| Trojan.Ransomlock.Q!g4 | Trojan | 05/14/2013 |
| Trojan.Febipos | Trojan | 05/13/2013 |
| Trojan.Ransomlock!g52 | Trojan | 05/12/2013 |
| W32.Pilleuz!gen38 | Worm | 05/10/2013 |
| W32.Phopifas!gen2 | Worm | 05/10/2013 |
| Packed.Generic.410 | Trojan | 05/10/2013 |
| Trojan.Ransomlock!g51 | Trojan | 05/09/2013 |
| W32.Changeup!gen41 | Worm | 05/09/2013 |

Email
LOW RISK:
Use Basic Caution
Although no widespread attacks are currently targeting web users, take normal precautions while viewing sites because of ongoing threats such as script-based attacks and phishing attacks that use fake sites.
Web Activities
LOW RISK:
Use Basic Caution
Although no widespread attacks are currently targeting web users, take normal precautions while viewing sites because of ongoing threats such as script-based attacks and phishing attacks that use fake sites.
Instant Messaging
LOW RISK:
Use Basic Caution
Currently there are no widespread outbreaks of malicious code circulating via instant messaging. In the past, however, some malicious code did take advantage of IM. Always use normal security precautions whenever you use IM.
File Sharing
LOW RISK:
Use Basic Caution
Although attackers often use this medium to distribute trojan applications and malicious code, no high-profile threats are currently affecting the medium. Always use caution when downloading files, especially from sources you don’t know or trust.
Security Response Blog
Why Email is a Key to Your Castle
Candid Wueest @ Tue, 21 May 2013 13:19:28Having control over an email account can be a lot of power, even though most people ...
Spammers Make Memorial Day Memorable
Anand Muralidharan @ Mon, 20 May 2013 12:02:16Memorial Day is celebrated on May 27 and it is a day for memorializing the men ...
Operation Hangover: Q&A on Attacks
Symantec Security Response @ Mon, 20 May 2013 06:39:02Today Norman and the Shadowserver Foundation released a joint detailed report dubbed Operation Hangover, which relates ...
Symantec Protection for Trojan.FakeSafe
Symantec Security Response @ Fri, 17 May 2013 04:30:57Today, Trend Micro published a report about a targeted attack campaign they’re calling SafeNet (the campaign’s ...
Symantec Protection for Targeted Attacks in South Asia
Symantec Security Response @ Thu, 16 May 2013 19:22:31ESET recently blogged about a targeted cyber/espionage attack that appears to be originating from India. Multiple ...
Spam Campaigns Take to Tumblr
Ben Nahorney @ Thu, 16 May 2013 06:15:01As the urban legend goes, the bank robber Willie Sutton was asked why he robbed banks. ...
Twitter Feed





Threat Spotlight: Trojan.Ransomlock
Trojan.Ransomlock is a detection for Trojan horse programs that lock the desktop of a compromised computer making it unusable.
The threat may arrive on the compromised computer by various means, such as visiting malicious sites, by opening untrusted links or advertisement banners, or by installing software from untrusted sources.
These programs attempt to convince the user to pay money in order to have their computer unlocked and use a variety of different techniques in order to encourage the user to pay the ransom.
More information on Trojan.Ransomlock is available in the Trojan.Ransomlock writeup.
