The notorious Storm worm botnet, which has mounted phishing attacks on major banks and spawned several waves of holiday-themed messages in recent weeks, is generating spam that directs recipients to bogus medical sites, Websense has warned.
Spam emails, purporting to deliver a money-transfer notification from Western Union but containing an attachment with an executable trojan, have been spotted in the wild by researchers at Sunbelt Software.
Security vendor SecureWorks says a mass attack launched against Apache servers running Linux, which has now infected 10,000 websites, can be thwarted by disabling dynamic loading in the server configuration.
Fortinet researchers have discovered a new socially engineered Symbian OS worm they say is actively spreading on mobile networks as users unwittingly send the malware to their unit's entire address book.
For-profit attacks on Apple's Mac operating system could become more common in 2008 because of the platform's increasing market share, according to Sophos.
China appears to have won the first battle in a global cyberwar, gaining access to key U.S. databases through aggressive, non-stop phishing assaults. The U.S. response must include monitoring of all email traffic to critical government and private-sector networks, experts say.