Author Archives: Alex Eckelberry
Moving On
After 9 years of building Sunbelt Software, and then working for GFI, I have decided to move on. It’s been a great adventure. I joined Stu Sjouwerman, who had built a distribution company, to start the “Software” part of Sunbelt …
Interview with Rob Westervelt at Search Security
On a recent press tour in Boston, I sat with Rob and chatted about security for small to medium businesses. Audio interview link here. Alex Eckelberry
Everyone Loves VIPRE, Even Those You Wouldn’t Expect
We know people love VIPRE. But sometimes, we’re suprised that our own competitors love it too! Symantec loves VIPRE so much, they’ve used the VIPRE snake! Webroot loves VIPRE so much, they are giving out a VIPER scooter. We like …
Seen in the Wild: Slick New Google Adwords Phish
This new phishing campaign is trying to get Google credentials and it’s quite well executed. Alex Eckelberry
Seen in the Wild: 419 Scammers Now Using Calendar Invites
Desperate to purloin money out of stupid and desparate people, 419 scammers are now trying Google Calendar invites. The pain of it is that if you’re using Outlook, the calendar invite is automatically accepted and you get a reminder popping …
DeepSafe
I keep getting asked for comments on McAfee/Intel’s new Deepsafe. So what the heck, here goes. This is a great marketing pitch. But remember that the platform that the technology is based upon, Intel VTx, is an open archictecture that …
Here’s another thing that’s scary about Shady RAT
A lot of chatter and breathless reporting about Shady RAT. All the makings of an epically awesome story — the US is being taken down by Chinese interlopers to the nastiest degree, installing keyloggers and other badness on US government …
Flickr continues to be a haven for porn/malware redirects
A few weeks ago, I blogged about porn/malware redirects being hosted on Flickr. After a brief respite, it’s back and strong. Just a quick and trivial search shows over hundreds of porn redirect links, pushing “lolita porn” and redirecting to …
The state of Typepad security
There are over 3,000 malicious sites on Typepad serving malware. I’ve put the list of malicious domains here. I’ve also notified Typepad. Typepad — get a clear abuse or security contact on your site, and do some work to police your …
Spammers and compromised accounts
Our friends at Commtouch have blogged about something that is no surprise — spammers using compromised accounts vs. bots (their latest threat report is quite good and worth reading btw). While compromised email accounts (hotmail, yahoo, gmail, etc.) are not …









