http://www.secuobs.com Observatoire de la securite Internet fr webmaster@secuobs.com 2012-09-06 23:30:08 - mwtracker : RT @xanda: This is how you can disable the Java support in your browsers http://tco/dkbKgnfEhttp://www.secuobs.com/twitter/news/341686.shtmlhttp://www.secuobs.com/twitter/news/341686.shtml Secuobs.com : 2012-09-06 23:30:08 - mwtracker - Spike in new compressed plus encrypted Flash payload in MS Office docs looks like patched #CVE-2012-0754, low AV ratehttp://www.secuobs.com/twitter/news/341685.shtmlhttp://www.secuobs.com/twitter/news/341685.shtml Secuobs.com : 2012-08-18 06:10:04 - mwtracker - RT @dougburks: @johullrich @sans_isc @taosecurity I've modified the DNS anomaly script for those running @Bro_IDS on #SecurityOnion: htt http://www.secuobs.com/twitter/news/340370.shtmlhttp://www.secuobs.com/twitter/news/340370.shtml Secuobs.com : 2012-08-08 12:44:51 - mwtracker - RT @diocyde: @mikko https://tco/Nvlle04k payload is not encrypted, which weirdly enough is common in binary xls attackshttp://www.secuobs.com/twitter/news/338988.shtmlhttp://www.secuobs.com/twitter/news/338988.shtml Secuobs.com : 2012-08-07 16:14:26 - mwtracker - RT @wired: For security, Amazon shows only the last 4 digits of a credit card Guess what Apple asks for to reset iCloud passwords http: http://www.secuobs.com/twitter/news/338699.shtmlhttp://www.secuobs.com/twitter/news/338699.shtml Secuobs.com : 2012-08-07 16:14:26 - mwtracker - RT @sk3tchymoos3: NEW Blog Post on old stuff #cryptam extracts files from PDF/Docs http://tco/uFTXkhSG #DFIR @mwtrackerhttp://www.secuobs.com/twitter/news/338698.shtmlhttp://www.secuobs.com/twitter/news/338698.shtml Secuobs.com : 2012-08-02 13:42:17 - mwtracker - CCITTFaxDecode PDF malware https://tco/XT02trMRhttp://www.secuobs.com/twitter/news/337646.shtmlhttp://www.secuobs.com/twitter/news/337646.shtml Secuobs.com : 2012-08-02 13:42:17 - mwtracker - #CCITTFaxDecode javascript a/v fail 5/42 https://tco/GcbYb5NThttp://www.secuobs.com/twitter/news/337645.shtmlhttp://www.secuobs.com/twitter/news/337645.shtml Secuobs.com : 2012-07-01 05:41:45 - mwtracker - Definitely more MS office RTF malware the past couple weeks vs PDFs http://tco/ufDrhTmN #CVE-2012-0158 Adobe is doing something right :http://www.secuobs.com/twitter/news/331363.shtmlhttp://www.secuobs.com/twitter/news/331363.shtml Secuobs.com : 2012-06-24 19:37:00 - mwtracker - vacation over, added PDF in XML xdp format handling to #PDFExaminer https://tco/ocZqZaFy PDF Malware XDP; thanks to @9bplushttp://www.secuobs.com/twitter/news/329931.shtmlhttp://www.secuobs.com/twitter/news/329931.shtml Secuobs.com : 2012-05-24 16:10:22 - mwtracker - CVE-2012-0754 exploitability in PDF http://tco/NyEiTuSg - Reader patch April 10 removed built-in Flash with 951http://www.secuobs.com/twitter/news/322898.shtmlhttp://www.secuobs.com/twitter/news/322898.shtml Secuobs.com : 2012-05-23 11:27:10 - mwtracker - RT @9bplus: Observing the Enemy : CVE-2012-0754 PDF Interactions http://tco/hBSjw6Pmhttp://www.secuobs.com/twitter/news/322553.shtmlhttp://www.secuobs.com/twitter/news/322553.shtml Secuobs.com : 2012-05-23 11:27:10 - mwtracker - PDFExaminer has additional CVE-2012-0754 Flash/MP4 in PDF exploit signatures https://tco/ocZqZaFyhttp://www.secuobs.com/twitter/news/322552.shtmlhttp://www.secuobs.com/twitter/news/322552.shtml Secuobs.com : 2012-05-11 02:08:00 - mwtracker - CVE-2011-0611 Flash in PDF continues to be the top exploit in PDF targeted attacks week after week a year after being patchedhttp://www.secuobs.com/twitter/news/319625.shtmlhttp://www.secuobs.com/twitter/news/319625.shtml Secuobs.com : 2012-04-23 12:21:24 - mwtracker - “@bbaskin: I went back to my recent PDF/JavaScript post and tried to do some analysisanyone help http://tco/O3uhyq18” - CVE-2010-0188http://www.secuobs.com/twitter/news/314752.shtmlhttp://www.secuobs.com/twitter/news/314752.shtml Secuobs.com : 2012-04-18 15:08:26 - mwtracker - fixed a PDFExaminer parsing issue with some PDFs with some good obfuscation, update is livehttp://www.secuobs.com/twitter/news/313512.shtmlhttp://www.secuobs.com/twitter/news/313512.shtml Secuobs.com : 2012-04-13 05:28:10 - mwtracker - RT @teamcymru: Cryptam #Malware for Office, PDF, others with free online checker http://tco/bze5KiUShttp://www.secuobs.com/twitter/news/312091.shtmlhttp://www.secuobs.com/twitter/news/312091.shtml Secuobs.com : 2012-04-12 04:50:31 - mwtracker - Mac mail tip: stop automatic preview of PDF and attachments defaults write comapplemail DisableInlineAttachmentViewing -bool yeshttp://www.secuobs.com/twitter/news/311601.shtmlhttp://www.secuobs.com/twitter/news/311601.shtml Secuobs.com : 2012-04-07 09:56:14 - mwtracker - malware tracker blog: CCITTFaxDecode support added to PDFExaminer http://tco/1eiV1y4t and the Sophos reported file is from 2010 6/43 VThttp://www.secuobs.com/twitter/news/310291.shtmlhttp://www.secuobs.com/twitter/news/310291.shtml Secuobs.com : 2012-03-28 13:05:08 - mwtracker - “@jaimeblascob: MS Office exploit that targets MacOS X seen in the wild http://tco/kvKBzU7t @AlienvaultLabs”we detect these #cryptamhttp://www.secuobs.com/twitter/news/307299.shtmlhttp://www.secuobs.com/twitter/news/307299.shtml Secuobs.com : 2012-03-28 13:05:08 - mwtracker - And they've been around for a long time, Captain doesn't bother with obfuscationhttp://www.secuobs.com/twitter/news/307298.shtmlhttp://www.secuobs.com/twitter/news/307298.shtml Secuobs.com : 2012-03-22 04:52:34 - mwtracker - PDFExaminer: http://tco/XOp8XlDfhttp://www.secuobs.com/twitter/news/305534.shtmlhttp://www.secuobs.com/twitter/news/305534.shtml Secuobs.com : 2012-03-20 03:07:36 - mwtracker - malware tracker blog: new Cryptam Multi tool - automatic extraction of encrypted exe/doc/pdf from docs and pdfs http://tco/rv1Q1dtchttp://www.secuobs.com/twitter/news/304906.shtmlhttp://www.secuobs.com/twitter/news/304906.shtml Secuobs.com : 2012-03-12 18:38:24 - mwtracker - RT @c_APT_ure: @cbentle2 just found the online PDF examiner site again I was looking for:http://tco/wY76k3mC - it's online, but has http://www.secuobs.com/twitter/news/302622.shtmlhttp://www.secuobs.com/twitter/news/302622.shtml Secuobs.com : 2012-03-10 15:05:08 - mwtracker - Doing OS updates on http://tco/5BafWJx4, let me know if PDFExaminer or Cryptam doc scanner have any problemshttp://www.secuobs.com/twitter/news/302147.shtmlhttp://www.secuobs.com/twitter/news/302147.shtml Secuobs.com : 2012-02-22 07:24:00 - mwtracker - experimenting with @openioc reports out of PDFExaminer - https://tco/QEaZA1cGhttp://www.secuobs.com/twitter/news/296222.shtmlhttp://www.secuobs.com/twitter/news/296222.shtml Secuobs.com : 2012-02-21 07:14:38 - mwtracker - malware tracker blog: Obfuscation and detection of embedded executables http://tco/Kmwd3xMYhttp://www.secuobs.com/twitter/news/295990.shtmlhttp://www.secuobs.com/twitter/news/295990.shtml Secuobs.com : 2012-02-17 05:16:12 - mwtracker - RT @suffert: Updated: online security tools Just added @moxie's Cloudcracker and @mwtracker doc analyzer: http://tco/Lx4VCOl5http://www.secuobs.com/twitter/news/295033.shtmlhttp://www.secuobs.com/twitter/news/295033.shtml Secuobs.com : 2012-02-16 01:21:14 - mwtracker - fixed pdf object content not showing on the online version of pdfexaminer the last few days http://tco/CPztFN3ohttp://www.secuobs.com/twitter/news/294471.shtmlhttp://www.secuobs.com/twitter/news/294471.shtml Secuobs.com : 2012-01-28 14:51:50 - mwtracker - rolled out some speed enhancements to the free online malware PDF Examiner http://tco/5FXwmCNx #pdfexaminerhttp://www.secuobs.com/twitter/news/288577.shtmlhttp://www.secuobs.com/twitter/news/288577.shtml Secuobs.com : 2012-01-26 19:54:55 - mwtracker - working on adding #MAEC xml output to PDFExaminer http://tco/7CWTosbUhttp://www.secuobs.com/twitter/news/287966.shtmlhttp://www.secuobs.com/twitter/news/287966.shtml Secuobs.com : 2012-01-11 06:16:43 - mwtracker - experimenting with @openioc reports out of PDFExaminer - https://tco/QEaZA1cGhttp://www.secuobs.com/twitter/news/282569.shtmlhttp://www.secuobs.com/twitter/news/282569.shtml Secuobs.com : 2011-12-18 04:15:50 - mwtracker - “@aumasson: AESV3 RT @ malware tracker: PDF Malware bypasses AV with 256bit AES encryption http://tco/MBoLSu07” = yep V3http://www.secuobs.com/twitter/news/276218.shtmlhttp://www.secuobs.com/twitter/news/276218.shtml Secuobs.com : 2011-12-16 10:17:43 - mwtracker - RT @teamcymru: chart of the most common current PDF exploit threats http://tco/2j6ihvQVhttp://www.secuobs.com/twitter/news/275777.shtmlhttp://www.secuobs.com/twitter/news/275777.shtml Secuobs.com : 2011-12-16 10:17:43 - mwtracker - malware tracker: PDF Malware bypasses AV with 256bit AES encryption http://tco/MBoLSu07http://www.secuobs.com/twitter/news/275776.shtmlhttp://www.secuobs.com/twitter/news/275776.shtml Secuobs.com : 2011-12-16 06:02:00 - mwtracker - malware tracker: PDF Malware bypasses AV with 256bit AES encryption http://tco/MBoLSu07http://www.secuobs.com/twitter/news/275729.shtmlhttp://www.secuobs.com/twitter/news/275729.shtml Secuobs.com : 2011-12-16 06:02:00 - mwtracker - deployed PDF 256 bit AES AESV3 decryption in PDFExaminer for those pesky Revision 5 CVE-2011-2462http://www.secuobs.com/twitter/news/275728.shtmlhttp://www.secuobs.com/twitter/news/275728.shtml Secuobs.com : 2011-12-14 08:18:21 - mwtracker - rolled out some speed enhancements to the free online malware PDF Examiner http://tco/5FXwmCNx #pdfexaminerhttp://www.secuobs.com/twitter/news/274973.shtmlhttp://www.secuobs.com/twitter/news/274973.shtml Secuobs.com : 2011-12-14 08:18:21 - mwtracker - PDF threat is high - Still no patch for CVE-2011-2462 and new batch of attacks on the rise http://tco/tz9mKusjhttp://www.secuobs.com/twitter/news/274972.shtmlhttp://www.secuobs.com/twitter/news/274972.shtml Secuobs.com : 2011-12-10 22:06:45 - mwtracker - New batch of PDF zero day CVE-2011-2462 attacks now going to PRC dissident group membershttp://www.secuobs.com/twitter/news/273947.shtmlhttp://www.secuobs.com/twitter/news/273947.shtml Secuobs.com : 2011-12-08 10:15:44 - mwtracker - And I should say all CVE-2011-2462 samples were previously detected as generic JavaScript heap spray http://tco/CPztFN3o #pdfexaminerhttp://www.secuobs.com/twitter/news/273164.shtmlhttp://www.secuobs.com/twitter/news/273164.shtml Secuobs.com : 2011-12-07 05:01:59 - mwtracker - another PDF zero day in the wild http://tco/fDhygCk1http://www.secuobs.com/twitter/news/272554.shtmlhttp://www.secuobs.com/twitter/news/272554.shtml Secuobs.com : 2011-12-07 05:01:59 - mwtracker - malware tracker: 30 APT PDFs - rapid analysis with PDFExaminer http://tco/KR3xJ49Uhttp://www.secuobs.com/twitter/news/272553.shtmlhttp://www.secuobs.com/twitter/news/272553.shtml Secuobs.com : 2011-11-22 05:43:11 - mwtracker - @kylemaxwell @diocyde yup it's making the rounds as a PDF, Reader has its own separate built in Flash engine: Rdr 946 or 1011 are goodhttp://www.secuobs.com/twitter/news/268061.shtmlhttp://www.secuobs.com/twitter/news/268061.shtml Secuobs.com : 2011-11-21 21:27:51 - mwtracker - APT PDF flavor of the week is CVE-2011-2140, watch out for those emailed PDFs and patch your Adobehttp://www.secuobs.com/twitter/news/267922.shtmlhttp://www.secuobs.com/twitter/news/267922.shtml Secuobs.com : 2011-10-28 20:18:49 - mwtracker - malware tracker: Malware PDF Obfuscation Using PNG Filters and AV # http://tco/tloI2Imnhttp://www.secuobs.com/twitter/news/260975.shtmlhttp://www.secuobs.com/twitter/news/260975.shtml Secuobs.com : 2011-10-20 12:54:28 - mwtracker - RT @DeepEndResearch: Introducing DeepEnd Research http://tco/cja6N5Yd - Dirt Jumper DDoS Bothttp://www.secuobs.com/twitter/news/258511.shtmlhttp://www.secuobs.com/twitter/news/258511.shtml Secuobs.com : 2011-10-17 02:13:45 - mwtracker - malware tracker: PDFExaminer command line scanner http://tco/wnX230wlhttp://www.secuobs.com/twitter/news/257433.shtmlhttp://www.secuobs.com/twitter/news/257433.shtml Secuobs.com : 2011-10-09 00:16:03 - mwtracker - FSecure should probably have just checked @snowfl0w blog for the RSA 0day file http://tco/VnTAshH way back in March http://tco/opICPFdhttp://www.secuobs.com/twitter/news/255605.shtmlhttp://www.secuobs.com/twitter/news/255605.shtml Secuobs.com : 2011-09-24 07:29:40 - mwtracker - malware tracker: PDFExaminer command line scanner http://tco/wnX230wlhttp://www.secuobs.com/twitter/news/250784.shtmlhttp://www.secuobs.com/twitter/news/250784.shtml Secuobs.com : 2011-09-21 17:42:11 - mwtracker - Let's see if we get a reader/acrobat patch too Seen one PDF with flash that might be something newhttp://www.secuobs.com/twitter/news/249795.shtmlhttp://www.secuobs.com/twitter/news/249795.shtml Secuobs.com : 2011-08-27 13:32:39 - mwtracker - FSecure should probably have just checked @snowfl0w blog for the RSA 0day file http://tco/VnTAshH way back in March http://tco/opICPFdhttp://www.secuobs.com/twitter/news/242079.shtmlhttp://www.secuobs.com/twitter/news/242079.shtml Secuobs.com : 2011-08-19 16:02:48 - mwtracker - @e_kaspersky doesn't know the difference between cyber crime and cyber espionage, or what a botnet is, this is why AV doesn't detect apt mwhttp://www.secuobs.com/twitter/news/239870.shtmlhttp://www.secuobs.com/twitter/news/239870.shtml Secuobs.com : 2011-08-19 16:02:48 - mwtracker - RT @taosecurity: Alarm bells start ringing for me if I hear the words botnet or crime associated w/APT It's neither, even though thos http://www.secuobs.com/twitter/news/239869.shtmlhttp://www.secuobs.com/twitter/news/239869.shtml Secuobs.com : 2011-06-24 06:06:34 - mwtracker - Flash in PDF targeted attacks affect reader 94, upgrade to Reader X to mitigatehttp://www.secuobs.com/twitter/news/220919.shtmlhttp://www.secuobs.com/twitter/news/220919.shtml Secuobs.com : 2011-06-19 09:10:39 - mwtracker - New Flash in PDF with CMYK references, anyone have a CVE # or is this new Getting quite a few this weekhttp://www.secuobs.com/twitter/news/218930.shtmlhttp://www.secuobs.com/twitter/news/218930.shtml Secuobs.com : 2011-05-18 02:55:47 - mwtracker - RT @lennyzeltser: 4 free online tools for analyzing malicious PDF files: http://googl/hdJuJhttp://www.secuobs.com/twitter/news/207498.shtmlhttp://www.secuobs.com/twitter/news/207498.shtml Secuobs.com : 2011-05-15 22:21:55 - mwtracker - PDFExaminer API released - submit PDFs and download reports from the command line http://tco/1bZ7XnBhttp://www.secuobs.com/twitter/news/206790.shtmlhttp://www.secuobs.com/twitter/news/206790.shtml Secuobs.com : 2011-05-10 22:20:13 - mwtracker - @lennyzeltser and don't forget the PDFExaminer online tool at http://malwaretrackercom/pdfphphttp://www.secuobs.com/twitter/news/204557.shtmlhttp://www.secuobs.com/twitter/news/204557.shtml Secuobs.com : 2011-05-10 04:31:50 - mwtracker - RT @eternaltodo: Slides of my talk Obfuscation and non-detection of malicious PDF files in Prague http://bitly/jmdUPE #caro2011http://www.secuobs.com/twitter/news/204023.shtmlhttp://www.secuobs.com/twitter/news/204023.shtml Secuobs.com : 2011-05-03 05:18:09 - mwtracker - PDFExaminer: enhanced ObjStm handling http://tco/HjvGNwnhttp://www.secuobs.com/twitter/news/201711.shtmlhttp://www.secuobs.com/twitter/news/201711.shtml Secuobs.com : 2011-04-22 04:42:17 - mwtracker - malware tracker: PDFExaminer Flash Handling - decompresses and scans CWS http://tco/vgJUGAthttp://www.secuobs.com/twitter/news/198021.shtmlhttp://www.secuobs.com/twitter/news/198021.shtml Secuobs.com : 2011-04-15 08:37:45 - mwtracker - CVE-2011-0611: Flash will be patched Friday, anticipate it's use in PDF with Reader's April 25th patch date, CVE-2011-0609 already went PDFhttp://www.secuobs.com/twitter/news/195961.shtmlhttp://www.secuobs.com/twitter/news/195961.shtml Secuobs.com : 2011-04-14 02:10:56 - mwtracker - Hmm a PDF file with an embedded ~CVE-2011-0609swf that's not good, not just for XLS files anymorehttp://www.secuobs.com/twitter/news/195338.shtmlhttp://www.secuobs.com/twitter/news/195338.shtml Secuobs.com : 2011-04-14 02:10:56 - mwtracker - malware tracker: CVE-2011-0609 attacks via PDF file http://tco/gZCTUi5http://www.secuobs.com/twitter/news/195337.shtmlhttp://www.secuobs.com/twitter/news/195337.shtml Secuobs.com : 2011-04-11 23:06:29 - mwtracker - malware tracker: Flash in Word zero-day CVE-2011-0611 http://tco/3iZVFCNhttp://www.secuobs.com/twitter/news/194317.shtmlhttp://www.secuobs.com/twitter/news/194317.shtml Secuobs.com : 2011-04-01 23:25:25 - mwtracker - RT @HaifeiLi: Upcoming 0day: Adobe PDF Document AVM2 Bytecode Description Verification Errorhttp://www.secuobs.com/twitter/news/191526.shtmlhttp://www.secuobs.com/twitter/news/191526.shtml Secuobs.com : 2011-03-18 01:19:45 - mwtracker - PDF malware using VMWare detection - http://shpata0xffwordpresscom/2011/03/17/msupdate-exe-favorites-dat-analysis/http://www.secuobs.com/twitter/news/185937.shtmlhttp://www.secuobs.com/twitter/news/185937.shtml Secuobs.com : 2011-03-17 03:59:04 - mwtracker - RT @MalwareScene: Adobe Flash 0-day, China CNE Operators LoVeZ ‘em http://conanthedestroyernet/2011/03/16/adobe-flash-0-day-china-c http://www.secuobs.com/twitter/news/185548.shtmlhttp://www.secuobs.com/twitter/news/185548.shtml Secuobs.com : 2011-03-15 01:29:07 - mwtracker - new Adobe 0day - flash in XLS file http://wwwadobecom/support/security/advisories/apsa11-01htmlhttp://www.secuobs.com/twitter/news/184623.shtmlhttp://www.secuobs.com/twitter/news/184623.shtml Secuobs.com : 2011-03-12 00:54:14 - mwtracker - “@eternaltodo: Slides of my talk @rootedcon http://tco/4421yHF #rooted2011 - hey PDFExaminer does so decode objects+decrypt+some js deobshttp://www.secuobs.com/twitter/news/183773.shtmlhttp://www.secuobs.com/twitter/news/183773.shtml Secuobs.com : 2011-03-12 00:54:14 - mwtracker - @9bplus @eternaltodo yah it will do nested PDF in a PDFhttp://www.secuobs.com/twitter/news/183772.shtmlhttp://www.secuobs.com/twitter/news/183772.shtml Secuobs.com : 2011-03-10 11:27:04 - mwtracker - RT @ryanaraine: pwn2own 2011: VUPEN pwns Safari/Macbook my story here http://zdnet/gGMFWchttp://www.secuobs.com/twitter/news/182974.shtmlhttp://www.secuobs.com/twitter/news/182974.shtml Secuobs.com : 2011-03-01 04:53:06 - mwtracker - RT @yuange1975: ready new flash 0day is on the wayhttp://www.secuobs.com/twitter/news/179250.shtmlhttp://www.secuobs.com/twitter/news/179250.shtml Secuobs.com : 2011-02-22 06:12:27 - mwtracker - PDF attacks this week mostly CVE-2010-0188, while patched, still evades 70 pourcents+ of A/V detectionhttp://www.secuobs.com/twitter/news/176699.shtmlhttp://www.secuobs.com/twitter/news/176699.shtml Secuobs.com : 2010-12-26 20:28:35 - mwtracker - Malware PDF Examiner pricing drops for #BoxingDay http://wwwmalwaretrackercom/pdfexaminerphp get that license you wanted for Christmashttp://www.secuobs.com/twitter/news/157444.shtmlhttp://www.secuobs.com/twitter/news/157444.shtml Secuobs.com : 2010-12-21 02:16:19 - mwtracker - analyze a malware PDF from the web directly with PDF Examiner http://wwwmalwaretrackercom/pdfwebphphttp://www.secuobs.com/twitter/news/155758.shtmlhttp://www.secuobs.com/twitter/news/155758.shtml Secuobs.com : 2010-11-17 08:43:11 - mwtracker - Adobe releases Acrobat 941 to counter PDF exploits CVE-2010-3654 and CVE-2010-4091http://www.secuobs.com/twitter/news/143195.shtmlhttp://www.secuobs.com/twitter/news/143195.shtml Secuobs.com : 2010-11-17 08:43:11 - mwtracker - anyone catch a copy of the cve-2010-2884 PDF used in the Hong Kong amnesty website seeding attackhttp://www.secuobs.com/twitter/news/143194.shtmlhttp://www.secuobs.com/twitter/news/143194.shtml Secuobs.com : 2010-11-11 07:16:40 - mwtracker - @snowfl0w have you got a md5http://www.secuobs.com/twitter/news/141115.shtmlhttp://www.secuobs.com/twitter/news/141115.shtml Secuobs.com : 2010-11-11 07:16:40 - mwtracker - @snowfl0w haven't seen that one on PDF Examiner http://bitly/9sLqBH weird that VT has hits on 2883 and 3654 for that md5http://www.secuobs.com/twitter/news/141114.shtmlhttp://www.secuobs.com/twitter/news/141114.shtml Secuobs.com : 2010-11-10 04:15:16 - mwtracker - PDF malware with js in CCITTFaxDecode, any decent libs to handle decodinghttp://www.secuobs.com/twitter/news/140651.shtmlhttp://www.secuobs.com/twitter/news/140651.shtml Secuobs.com : 2010-11-09 03:07:09 - mwtracker - Adobe PDF DocprintSeps zero day now confirmed as CVE-2010-4091, patch expected Nov 15 2010 http://tco/7zh2Llxhttp://www.secuobs.com/twitter/news/140248.shtmlhttp://www.secuobs.com/twitter/news/140248.shtml Secuobs.com : 2010-11-04 21:33:43 - mwtracker - malware tracker: Unconfirmed Adobe PDF zeroday with thisprintSeps http://tco/7zh2Llxhttp://www.secuobs.com/twitter/news/138987.shtmlhttp://www.secuobs.com/twitter/news/138987.shtml Secuobs.com : 2010-10-29 14:28:27 - mwtracker - Updated PDF examiner with CVE-2010-3654 flash exploit unpatched until nov 15 http://malwaretrackercom/pdfphphttp://www.secuobs.com/twitter/news/136650.shtmlhttp://www.secuobs.com/twitter/news/136650.shtml Secuobs.com : 2010-10-29 14:28:27 - mwtracker - CVE-2010-3654 Flash exploit added to PDF malware tracker list of current threats http://wwwmalwaretrackercom/pdfthreatphphttp://www.secuobs.com/twitter/news/136649.shtmlhttp://www.secuobs.com/twitter/news/136649.shtml Secuobs.com : 2010-10-03 09:27:19 - mwtracker - CVE-2010-2883 PDF exploit+Flash ROP heapspray = not even safe by disabling JavaScript Adobe #failhttp://www.secuobs.com/twitter/news/127972.shtmlhttp://www.secuobs.com/twitter/news/127972.shtml Secuobs.com : 2010-10-03 09:27:19 - mwtracker - new blog article hiding/finding PDF Exploits by embedding PDF files in streams plus using Flash to do ROP heapspray http://tco/StiSZfnhttp://www.secuobs.com/twitter/news/127971.shtmlhttp://www.secuobs.com/twitter/news/127971.shtml Secuobs.com : 2010-09-30 21:59:50 - mwtracker - Tricks for finding embedded executables in PDF malware http://tco/Y4nbAZihttp://www.secuobs.com/twitter/news/127317.shtmlhttp://www.secuobs.com/twitter/news/127317.shtml Secuobs.com : 2010-09-25 03:29:12 - mwtracker - malware tracker: PDF Malware Threat Overview - list of common vulne http://tco/XQvP9dZhttp://www.secuobs.com/twitter/news/125540.shtmlhttp://www.secuobs.com/twitter/news/125540.shtml Secuobs.com : 2010-09-24 15:09:02 - mwtracker - PDF malware CVE-2010-2883 seems to be dropping off, and still 2 weeks away from a patch from Adobehttp://www.secuobs.com/twitter/news/125349.shtmlhttp://www.secuobs.com/twitter/news/125349.shtml Secuobs.com : 2010-09-21 06:53:38 - mwtracker - online pdf dissector will be coming out probably over the weekendhttp://www.secuobs.com/twitter/news/123724.shtmlhttp://www.secuobs.com/twitter/news/123724.shtml Secuobs.com : 2010-09-21 06:53:38 - mwtracker - PDF dissector beta is online http://wwwmalwaretrackercom/pdfphp happy slicing, detect common CVE's and obfuscation in PDF #malwarehttp://www.secuobs.com/twitter/news/123723.shtmlhttp://www.secuobs.com/twitter/news/123723.shtml Secuobs.com : 2010-09-21 06:53:38 - mwtracker - PDF malware with AESV2 crypto blog post part 2 http://blogmalwaretrackercom/2010/08/encrypted-pdf-part-2-with-online-pdfhtmlhttp://www.secuobs.com/twitter/news/123722.shtmlhttp://www.secuobs.com/twitter/news/123722.shtml Secuobs.com : 2010-09-21 06:53:38 - mwtracker - PDF Examiner 10 http://bitly/9sLqBH #pdf #malwarehttp://www.secuobs.com/twitter/news/123721.shtmlhttp://www.secuobs.com/twitter/news/123721.shtml Secuobs.com : 2010-09-21 06:53:38 - mwtracker - PDF's mysterious unpublished revision 3 encryption algorithym http://bitly/9IMgjY #pdfencryptionhttp://www.secuobs.com/twitter/news/123720.shtmlhttp://www.secuobs.com/twitter/news/123720.shtml Secuobs.com : 2010-09-21 06:53:38 - mwtracker - PDF Examiner 10 added 40 bit RC4 PDF Rev 1 decryption http://bitly/9sLqBH #pdf #malwarehttp://www.secuobs.com/twitter/news/123719.shtmlhttp://www.secuobs.com/twitter/news/123719.shtml Secuobs.com : 2010-09-21 06:53:38 - mwtracker - added detection for adobe pdf CVE-2010-2883 to pdf examiner http://malwaretrackercom/pdfphphttp://www.secuobs.com/twitter/news/123718.shtmlhttp://www.secuobs.com/twitter/news/123718.shtml Secuobs.com : 2010-09-21 06:53:38 - mwtracker - new adobe zeroday pro-tip - disable javascript in acrobat :http://www.secuobs.com/twitter/news/123717.shtmlhttp://www.secuobs.com/twitter/news/123717.shtml Secuobs.com : 2010-09-21 06:53:38 - mwtracker - added support for duplicate generation numbers and more javascript detection to the online PDF Examiner http://bitly/9sLqBHhttp://www.secuobs.com/twitter/news/123716.shtmlhttp://www.secuobs.com/twitter/news/123716.shtml Secuobs.com : 2010-09-21 06:53:38 - mwtracker - seeing many adobe PDF #malware targeting CVE-2010-2883 http://wwwmalwaretrackercom/pdfphphttp://www.secuobs.com/twitter/news/123715.shtmlhttp://www.secuobs.com/twitter/news/123715.shtml