Archive for March, 2009

ATLAS 2.0: Observing A Rapidly Changing Internet

March 10, 2009 by Danny McPherson

It’s already been over 2 years ago since we first introduced our Active Threat Level Analysis System – ATLAS, a multiphase project that’s been evolving pretty much constantly ever since.  The first phase of ATLAS focused on capturing data via a globally scoped network of sensors running a number of data capture and analysis tools [...]

Read More

Has Conficker Growth Slowed?

March 3, 2009 by Jose Nazario

Or is it too early to tell? I suspect that things like this are always best determined long after they’ve happened. The bottom of a recession or the top of the bubble, the end or even just the beginning. But we’ve seen Conficker numbers host steady at ~3 million unique IPs a day for the [...]

Read More

Mime Sniffing and Phishing

March 2, 2009 by Jose Nazario

Friday and today I got a very interesting URL highlighted by our spam traps. The URL looks like a JPG, and so I went to see what it was. I figured it’d be stock spam or pill spam or something. What I didn’t expect was what I got. hxxp://widutr67e8ds63e7dsz3edsx.land.ru/ViewItehewgast627ewaduj23ew7sd.jpg So, it turns out that the [...]

Read More