29 Quotes by Ken Dunham

WMF exploitation has taken off in the past twelve hours. It's likely that WMF exploitation will be very successful in the near term.

There's no way for you to know whether a site is dangerous for a WMF exploit.

The threat level for this vulnerability may be dramatically increased if more automated methods of distribution are found to be successful, such as e-mail or IM or file shares. The impact of attacks may also increase, with more sinister codes being installed as new hackers attempt to leverage the vulnerability to their advantage.

Anti-virus companies when they get a sample need to act on that quickly. They don't have time in their competitive environment to be able to go out and coordinate and have a nice little talk about naming.

A new, upgraded WMF exploit was posted to the public today and is highly functional.

You should boot from a clean disk before removing a virus. Some viruses can't be cleaned any other way.

This is a social engineering worm written in Russian. It is interesting when you look at it. This is a Java-based type of threat and it has been proven to be successful. We need to look at this and see what is going to be the threat down the road.

This is not something I would expect to yield very high profits for criminals as compared to other types of financial fraud and extortion that might take place. Many people have backups of their files, and now the code has been cracked.

This is one of those big, under-the-radar threats that we've been concerned about. There has been a trend away from big-bang attacks to very targeted and sophisticated attacks that take place right under your nose. This is one of them.