Malware

The Travnet botnet uploads Microsoft Office files, PDFs and text files to remote servers run by attackers.

The Anti-Phishing Working Group found that 47 percent of all phishing attacks involve shared web hosting, like one might find on WordPress or Joomla.

In addition to the exploit, which leverages a recently patched bug, a researcher has discovered a fresh vulnerability in the newly minted version of Java SE.

Despite the arrests of Gozi ringleaders, the banking trojan still persists and is behind thousands of new infections in the United States.

Attackers wanting to compromise apps in Google's official store leveraged an advertising network to foist their malware to unsuspecting victims.

Spam campaigns are sending out spurious emails purported to be from Facebook, LinkedIn, American Airlines and financial institutions, McAfee researchers found.

Client-side, web-based threats are beginning to overtake malware mainstays such as Conficker, according to a Microsoft report.

A trojan that uses a "magical" authentication code to communicate with its command-and-control server has compromised thousands of organizations around the globe. So far, however, it has remained largely silent.