RSA's principal technical consultant, Avi Rosen, discusses how trojans work in general and more specifically how these programs impact financial institutions' websites and infect clients or users.

A worm exploiting the Microsoft RPC flaw propagates automatically through networks and finds cached passwords.

New malware is targeting the Microsoft RPC flaw, Microsoft warns. Companies should deploy the emergency patch immediately to prevent hacker attacks.

RSA findings based on data collected on the Sinowal Trojan over 3 years – including information regarding its design and its infrastructure – indicate that this may be one of the most pervasive and advanced pieces of crimeware ever created by fraudsters.

CA researchers issue early warning of possible Waledec Trojan after finding e-card scam websites are updating with Valentine’s Day-themed content.

Microsoft patched critical vulnerabilities in the Windows kernel that could be remotely exploited by an attacker to gain control of a computer. In all three bulletins patching eight Windows flaws were released as part of Microsoft's monthly patching cycle.

The APWG, the global independent coalition combating electronic crime, reported that rates of crimeware-spreading sites and rogue anti-malware programs used for a number of electronic crimes exploded at year’s end, indicating that electronic crime gangs are investing deeply in automated systems to steal personal and enterprise data.

Is your computer due for a spring cleaning? F-Secure data shows that users’ computers often contain old versions of software which are not up to date or no longer being used. This out-of-date software can make computers vulnerable to malicious exploits.

IT security and control firm Sophos is warning computer users to be on their guard following the discovery of a new large scale malicious spam campaign posing as an email from courier firm DHL.

F-Secure said that the GhostNet spy network was built by infecting sensitive computers with backdoor/Remote Administration Tools (RAT). Most of these are modified and obfuscated versions of Poison Ivy or Gh0st RAT, a remote administration utility that bypasses normal security mechanisms to secretly control a program, computer or network.