The File Transfer Protocol (FTP) has attracted renewed interest lately, but not in a good way: The bad guys are now using the ‘70s disco-era file transfer technology to serve up bot malware, and even as a backdoor into some enterprises that neglect to lock down their FTP servers.
Researchers at F-Secure have spotted a new wave of exploits that use FTP — rather than a malicious URL, or the conspicuous email attachment — to deliver their malware payloads. “As SMTP and HTTP are much better filtered for malware, FTP might be the best transport protocol for a virus writer,” says Mikko Hypponen, chief research officer for F-Secure. “We’ve just started to observe this phenomenon — it’s not widespread yet, but likely to increase.” FTP Hacking on the Rise - Desktop Security News Analysis - Dark Reading
From around the Web
- Free Honeypot Client Could Sting Malware
- What Firewalls Do & Donot Do
- Opera Continues to Lead the Pack
- Zonebak Trojan Removal
- PCAntiSpyware Removal
- SpyMaxx Removal
- Qvdntlmw Toolbar Removal
- The ultimate identity theft: house stealing
- Fake Google Calender meeting invitations used in new spam attack
- Spam Goes More and More Mobile
- They Told You Not To Reply
- Should Microsoft Throw Away Vista?
- Angry Vista users vent over SP1 driver issues
- Safari 3.1 Crashes On Windows XP, Users Complain
- The New Browser War is Good for Microsoft
- Block spam, phishing attempts in Outlook
- Symantec fingers D Link for bot attacks
- WhiteHat: 90% of Sites Still Vulnerable
- Red Hat releases free security code
- ValueClick to pay $2.9 million to settle spam complaint
- Securitypills.com Removal
- Want Vista SP1? Here is what to expect
- 99 Windows Vista Performance Tips and Tweaks
- Set Internet Explorer and Firefox to maximize your security
- Has Vista lost all credibility?
- How to Remove SpyGuardPro (SpyGuardPro removal)
- How to Remove AntispywareDeluxe (AntispywareDeluxe removal)
- How to Remove Winfix Master (Winfix Master removal)
- How to Remove AntivirusPCSuite (AntivirusPCSuite removal)
- How to Remove AntivirusForAll (AntivirusForAll removal)
- Security lapse exposes Facebook photos
- Top Tips to Mobile Data Security
- iPhone DoS vulnerability
- Kaspersky launches Mobile Security 7.0 protection for smartphones
- Mobile subscribers showered with spam
- HOW TO: Synchronize Folders Between Computers Fri, 28 Mar 2008 06:20:06
- HOW TO: Set Up Dynamic DNS Fri, 28 Mar 2008 06:17:33
- HOW TO: Install Safari on Ubuntu with Flash and Shockwave! Fri, 28 Mar 2008 06:15:06
- HOW TO: Read The Wall Street Journal’s Web site for free Fri, 28 Mar 2008 06:11:19
- HOW TO: Secure Your EMail and IM Communications Fri, 28 Mar 2008 06:06:06