<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>The Day Before Zero</title>
	<atom:link href="http://blog.damballa.com/?feed=rss2" rel="self" type="application/rss+xml" />
	<link>http://blog.damballa.com</link>
	<description>An Ongoing Conversation About Targeted Attacks</description>
	<lastBuildDate>Mon, 26 Jul 2010 21:28:30 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>Presenting @ BlackHat USA 2010</title>
		<link>http://blog.damballa.com/?p=747</link>
		<comments>http://blog.damballa.com/?p=747#comments</comments>
		<pubDate>Mon, 26 Jul 2010 21:28:30 +0000</pubDate>
		<dc:creator>gunter@damballa.com</dc:creator>
				<category><![CDATA[Threat Research]]></category>
		<category><![CDATA[blackhat]]></category>
		<category><![CDATA[presentation]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://blog.damballa.com/?p=747</guid>
		<description><![CDATA[This week Damballa will be represented at the 2010 BlackHat USA event in Las Vegas with me presenting on Thursday (29th July) at 11:15am. I&#8217;ll be covering the topic &#8220;Becoming the six-million-dollar man&#8221; &#8211; a closer look at some of the more sophisticated ways in which criminal botmasters are monetizing their botnets and laundering the [...]]]></description>
		<wfw:commentRss>http://blog.damballa.com/?feed=rss2&amp;p=747</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>The AMTSO Melee</title>
		<link>http://blog.damballa.com/?p=742</link>
		<comments>http://blog.damballa.com/?p=742#comments</comments>
		<pubDate>Thu, 15 Jul 2010 15:57:11 +0000</pubDate>
		<dc:creator>gunter@damballa.com</dc:creator>
				<category><![CDATA[Threat Research]]></category>

		<guid isPermaLink="false">http://blog.damballa.com/?p=742</guid>
		<description><![CDATA[As many will have already observed, there&#8217;s been a public falling out between the Anti-Malware Testing Standards Organization (AMTSO) and a number of established independent testing organizations (and advocates of independent testing). While the melee between the protagonists has been continuous over the last few months, there&#8217;s been considerable entrenchment in July. When I read [...]]]></description>
		<wfw:commentRss>http://blog.damballa.com/?feed=rss2&amp;p=742</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Cellular Botnets</title>
		<link>http://blog.damballa.com/?p=739</link>
		<comments>http://blog.damballa.com/?p=739#comments</comments>
		<pubDate>Mon, 12 Jul 2010 15:23:48 +0000</pubDate>
		<dc:creator>gunter@damballa.com</dc:creator>
				<category><![CDATA[Threat Research]]></category>

		<guid isPermaLink="false">http://blog.damballa.com/?p=739</guid>
		<description><![CDATA[Last month I gave a couple of presentations covering the current state of cellular mobile botnets &#8211; i.e. malware installed on mobile phone, smartphone and cellular devices designed to provide remote access to the handset and everything on it. While malware attacks against dumb and smart phones are nothing new, the last 3 years of [...]]]></description>
		<wfw:commentRss>http://blog.damballa.com/?feed=rss2&amp;p=739</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>It&#8217;s Safer to Write Your Password Down</title>
		<link>http://blog.damballa.com/?p=729</link>
		<comments>http://blog.damballa.com/?p=729#comments</comments>
		<pubDate>Tue, 06 Jul 2010 13:00:30 +0000</pubDate>
		<dc:creator>gunter@damballa.com</dc:creator>
				<category><![CDATA[Threat Research]]></category>
		<category><![CDATA[access control]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[modern malware]]></category>
		<category><![CDATA[passwords]]></category>
		<category><![CDATA[policy]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://blog.damballa.com/?p=729</guid>
		<description><![CDATA[Common wisdom over the last couple of decades has been to never write down the passwords you use for accessing networked services. But is now the time to begin writing them down? Threats are constantly evolving and perhaps it&#8217;s time to revisit one of the longest standing idioms of security &#8211; &#8220;never write a password down&#8221;. Back in [...]]]></description>
		<wfw:commentRss>http://blog.damballa.com/?feed=rss2&amp;p=729</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>The FTC Wake-up Slap</title>
		<link>http://blog.damballa.com/?p=724</link>
		<comments>http://blog.damballa.com/?p=724#comments</comments>
		<pubDate>Fri, 25 Jun 2010 15:24:03 +0000</pubDate>
		<dc:creator>gunter@damballa.com</dc:creator>
				<category><![CDATA[Threat Research]]></category>
		<category><![CDATA[FTC]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[Twitter]]></category>

		<guid isPermaLink="false">http://blog.damballa.com/?p=724</guid>
		<description><![CDATA[When do your corporate security practices warrant FTC monitoring? When you fail to maintain the minimum levels of system protection and customer&#8217;s private data happens to drip from your porous applications. “When a company promises consumers that their personal information is secure, it must live up to that promise,” says David Vladeck, head of the [...]]]></description>
		<wfw:commentRss>http://blog.damballa.com/?feed=rss2&amp;p=724</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Hooked on Malware Counting</title>
		<link>http://blog.damballa.com/?p=720</link>
		<comments>http://blog.damballa.com/?p=720#comments</comments>
		<pubDate>Wed, 09 Jun 2010 09:08:11 +0000</pubDate>
		<dc:creator>gunter@damballa.com</dc:creator>
				<category><![CDATA[Threat Research]]></category>
		<category><![CDATA[counting]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[serial variants]]></category>

		<guid isPermaLink="false">http://blog.damballa.com/?p=720</guid>
		<description><![CDATA[It&#8217;s more than a little disappointing that the anti-malware industry is still fixated upon measuring a threat by the quantity of malware being distributed. Despite the fact that you could learn within an hour or two&#8217;s study (e.g. watching YouTube) how to generate a million brand spanking new, unique and &#8220;undetectable&#8221; malware by the end [...]]]></description>
		<wfw:commentRss>http://blog.damballa.com/?feed=rss2&amp;p=720</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Revisiting the Advanced Persistent Threat</title>
		<link>http://blog.damballa.com/?p=711</link>
		<comments>http://blog.damballa.com/?p=711#comments</comments>
		<pubDate>Fri, 14 May 2010 19:19:58 +0000</pubDate>
		<dc:creator>gunter@damballa.com</dc:creator>
				<category><![CDATA[Threat Research]]></category>
		<category><![CDATA[advanced malware]]></category>
		<category><![CDATA[Advanced Persistent Threat]]></category>
		<category><![CDATA[APT]]></category>
		<category><![CDATA[China]]></category>
		<category><![CDATA[Google APT]]></category>
		<category><![CDATA[Hacker]]></category>

		<guid isPermaLink="false">http://blog.damballa.com/?p=711</guid>
		<description><![CDATA[Ever since the Google hack disclosures back in January this year, the term &#8220;Advanced Persistent Threat&#8221; (or &#8220;APT&#8221; if you prefer to use TLA&#8216;s) has been tossed about in various forums and associated with security, hacking, terrorism, state sponsored attacks, botnets, advanced malware, next generation malware, etc. &#8211; the net result is that the term [...]]]></description>
		<wfw:commentRss>http://blog.damballa.com/?feed=rss2&amp;p=711</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>A Treasury of Dumps</title>
		<link>http://blog.damballa.com/?p=695</link>
		<comments>http://blog.damballa.com/?p=695#comments</comments>
		<pubDate>Wed, 05 May 2010 19:37:52 +0000</pubDate>
		<dc:creator>gunter@damballa.com</dc:creator>
				<category><![CDATA[Threat Research]]></category>
		<category><![CDATA[botnets]]></category>
		<category><![CDATA[crime]]></category>
		<category><![CDATA[identity theft]]></category>
		<category><![CDATA[paste bin]]></category>

		<guid isPermaLink="false">http://blog.damballa.com/?p=695</guid>
		<description><![CDATA[Most of the &#8220;popular&#8221; Internet botnets are quite adept at identity and credential theft. Granted, this is usually just the first phase of a successful botnet breach and the lowest hanging (digital) fruit, but it remains one of the more profitable data streams for the botnet&#8217;s criminal operators. However there&#8217;s a big gap between criminals [...]]]></description>
		<wfw:commentRss>http://blog.damballa.com/?feed=rss2&amp;p=695</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Botnet Building Campaigns</title>
		<link>http://blog.damballa.com/?p=690</link>
		<comments>http://blog.damballa.com/?p=690#comments</comments>
		<pubDate>Tue, 04 May 2010 16:47:07 +0000</pubDate>
		<dc:creator>gunter@damballa.com</dc:creator>
				<category><![CDATA[Threat Research]]></category>
		<category><![CDATA[botnet]]></category>
		<category><![CDATA[building]]></category>
		<category><![CDATA[campaigns]]></category>

		<guid isPermaLink="false">http://blog.damballa.com/?p=690</guid>
		<description><![CDATA[The business of botnet building is precisely that &#8211; a business. When organizations look to the threat from a compromised asset perspective they too often fail to appreciate whats really happening. A typical reaction is thus &#8220;why are they targeting me?&#8221; If you step back a little &#8211; somewhere between the proverbial 10,000ft and the [...]]]></description>
		<wfw:commentRss>http://blog.damballa.com/?feed=rss2&amp;p=690</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Storm Worm 2: A view of its C&amp;C</title>
		<link>http://blog.damballa.com/?p=683</link>
		<comments>http://blog.damballa.com/?p=683#comments</comments>
		<pubDate>Mon, 03 May 2010 17:40:12 +0000</pubDate>
		<dc:creator>gunter@damballa.com</dc:creator>
				<category><![CDATA[Threat Research]]></category>

		<guid isPermaLink="false">http://blog.damballa.com/?p=683</guid>
		<description><![CDATA[News broke recently that there&#8217;s a new Storm Worm doing the rounds.  Late last week a detailed analysis of the new Storm Worm malware variant has been posted by The Honeynet Project at their website. Based on the analysis I conducted over the weekend, this particular threat is indeed very similar to the old Storm [...]]]></description>
		<wfw:commentRss>http://blog.damballa.com/?feed=rss2&amp;p=683</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
