Malware, Viruses, Trojans, and Other
Nastiness
|
| |
Today's internet is probably one of
the least safe places to be in regards to the health of your
computer and the safekeeping of your personal data. This page
will be continually updated with info on new threats as they
appear. If you have any questions please feel free to
contact us.
One of the most common questions we get asked is "I have
current, reputable anti virus software installed, why did my PC
still get infected?"
Antivirus vendors are having trouble keeping up with e-mail
viruses, according to a new security report.
The Commtouch Q2 2009 Internet Threats Trend
Report noted a spike in the number of e-mail viruses that
slipped past major antivirus engines between late May and June
2009.
The security vendor based its findings on the analysis of over 2
billion e-mail messages and Internet transactions daily in its
cloud-based global detection centers.
Read More >>
There is software you can install and services you can use to
try and help prevent the many infections floating around the
web. Nothing is a 100% guarantee that you'll be safe, common
sense plays a big role in your safety. |
| |
|
|
| |
| We recommend the following
products to help in your efforts to stay safe online |
| |
 |
Malwarebytes' Anti-Malware is an
anti-malware application that can thoroughly remove even the
most advanced malware. It includes a number of features,
including a built in protection monitor that blocks malicious
processes before they even start.
Malwarebytes is free to try (the free version does not include
realtime monitoring) and can be downloaded
here
You can purchase the full version
here |
|
 |
| |
SUPERAntiSpyware
Detects and Removes Spyware, Adware and Malware, Trojans,
Dialers, Worms, KeyLoggers, HiJackers, Parasites, Rootkits,
Rogue Security Products and many other types of threats.
It's Light on System Resources and won't slow down your computer
like many other anti-spyware products. Won't conflict with your
existing anti-spyware or anti-virus solution!
SuperAntiSpyware is free to try (the free version does not
include realtime monitoring or other features).
To purchase the full version please
contact us directly
or click the image above. |
|
 |
WOT
is a free Internet security addon for your browser. It will help
keep you safe from online scams, identity theft, spyware, spam,
viruses and unreliable shopping sites. WOT warns you before you
interact with a risky website. It's easy and it's free.
WOT can be downloaded
here |
|
 |
OpenDNS is designed to
help protect your children & computers from undesirable
web content. |
|
What is
OpenDNS?
OpenDNS is a free service that
works for networks of all sizes, from home networks to K-12
schools, SMBs and large enterprises. It provides protection
against known malware and phishing websites, along with parental
control, giving you complete customization of the websites
visited by any computer on your network, it can be set up
here
If you want to set it up on your network and need help, we can
assist in setting it up via remote support, just call us to set
up a remote session. |
| |
 |
Access to information and
entertainment, credit and financial services, products from
every corner of the world — even to your work — is greater than
ever. Thanks to the Internet, you can play a friendly game with
an opponent across the ocean; review and rate videos, songs, or
clothes; get expert advice in an instant; or collaborate with
far-flung co-workers in a "virtual" office. |
With awareness as your safety net, you can minimize the chance
of an Internet mishap. Being on guard online helps you protect
your information, your computer, and your money. To be safer and
more secure online, visit Onguard Online.
Read More >> |
| |
| The following article should be
required reading for ANYONE
with a computer connected to the internet. |
|
The Scrap Value of a Hacked PC |
| |
| |
| One of the most common infections today
is rogue or scareware applications, the following article is a
must read, even with current anti virus software installed you're
not immune to these infections. |
|
The ultimate guide to scareware protection |
| |
| |
| The following links
provide a continually updated source of info on the latest
threats, along with some general information, please visit them
for daily updates on the latest scams and threats. |
| |
Bill Mullins’ Weblog - Tech Thoughts
Brian
Krebs - Krebs on Security
Threat Post, Kaspersky Labs Security News Service
Tech
- for Everyone by Tech Paul |
|
|
|
|
|
Current Security News |
|
| 9-1-10 |
|
Crooks Who Stole $600,000 From Catholic Diocese Said Money Was
for Clergy Sex Abuse Victims Organized cyber thieves stole
more than $600,000 from the Catholic Diocese of Des Moines, Iowa
earlier this month. The funds were spirited away with the help
of dozens of unwitting co-conspirators hired through
work-at-home job scams, at least one of whom was told the money
was being distributed to victims of the Catholic Church sex
abuse scandals. |
| |
| 8-24-10 |
|
Zurich Insurance slammed with £2.28 million fine for losing
customer data The UK branch of Zurich Insurance has been
fined a whopping £2.28 million after losing details of 46,000
customers. |
| |
| 8-20-10 |
Trojan horse suspected of contributing to 2008 Madrid aircrash
Authorities investigating the 2008 Madrid air crash, which
resulted in the deaths of 154 people, have discovered that a
central computer system used to monitor technical problems in
aircraft was infected with Trojan horses.
It's important to note - malware didn't cause the plane to crash. |
| |
| 8-10-10 |
|
Fighting Today's Malware If malware were biological, the
world would be in the grip of the worst pandemic in history. In
2009, more than 25 million different unique malware programs
were identified, more than all the malware programs ever created
in all previous years. That's a pretty incredible statistic.
Malicious programs now outnumber legitimate ones by many orders
of magnitude. |
| |
| 8-5-10 |
|
Adobe confirms remote code-execution flaw in Reader (again)
A security researcher has uncovered yet another vulnerability in
Adobe Reader that allows hackers to execute malicious code on
computers by tricking their users into opening booby-trapped
files. |
|
Two Unpatched Flaws Show Up in Apple iOS The technique that
the Jailbreakme.com Web site is using to bypass the iPhone's
security mechanisms and enable users to run unapproved apps on
their phones involves exploiting two separate vulnerabilities. |
|
Microsoft's Not-So-Secret Plan to Cripple Windows XP If you
haven't installed service pack 3 on your Windows XP installation
you need to do it now, if not sooner. |
| |
| 7-29-10 |
|
Hacker Demos Remote Attacks Against ATMs Using home-brewed
software tools and exploiting a gaping security hole in the
authentication mechanism used to update the firmware on
automated teller machines (ATMs), a security researcher hacked
into ATMs made by Triton and Tranax and planted a rootkit that
dispensed cash on demand. |
|
Persistent, Covert Malware Causing Major Damage Security
technology and practice have advanced quite a bit in the past
few years, but one thing that has become clear is that whatever
gains have been made are just not keeping pace with the
innovation of attackers. The advances being made by malware
authors and crimeware gangs are keeping them well ahead of the
curve and will continue to do so for the foreseeable future,
researchers say. |
|
Russian gang uses botnets to automate check counterfeiting A
researcher has uncovered a sophisticated check counterfeiting
ring that uses compromised computers to steal and print millions
of dollars worth of bogus invoices and then recruit money mules
to cash them. |
|
Android malware steals info from one million phone owners A
developer of Android apps has been accused of using their apps
to steal information from more than one million smartphone
users. |
|
Details of 100 million Facebook users were *already* exposed on
the net At first glance these headlines might appear
frightening. But there's one thing you need to know. All of this
information was already available to anyone on the internet. |
| |
| 7-27-10 |
|
Rogue Antivirus Victims Seldom Fight Back |
|
Attacks Cost $3.8 Million on Average Per Year Organizations
are getting hit by at least one successful attack per week, and
the annualized cost to their bottom lines from the attacks
ranged from $1 million to $53 million per year, according to a
newly published benchmark study of 45 U.S. organizations hit by
data breaches. |
| |
| 7-23-10 |
More malware exploiting Windows shortcut vulnerability It
probably won't come as a surprise to anyone, but more evidence
has come to light that cybercriminals are actively exploiting
the Windows shortcut vulnerability (also known as
CVE-2010-2568).
Another article on the subject can be found
here. |
|
Investigation into Google's WiFi snooping now 38 states strong
A majority of U.S. states have joined the fight by Connecticut
Attorney General Richard Blumenthal against Google, demanding
answers about the accidental collection of data over unsecured
WiFi networks while Street View cars snapped outdoor photos. |
| |
| 7-22-10 |
|
Safari AutoFill Feature Exposes User Data A prominent
security researcher is urging users of Apple’s Safari browser to
immediately turn off the AutoFill feature to block hackers from
stealing sensitive information. According to Jeremiah Grossman,
founder and Chief Technology Officer of WhiteHat Security, the
AutoFill Web Forms feature can be hacked to steal data from the
computer’s address book. |
|
New Koobface Variant Installs Highly Invasive Rogueware
Security researchers warn that the latest Koobface variant drops
a scareware program, which severely impacts the victim's ability
to use the infected system. The application, which poses as an
antivirus, makes Web browsing impossible and prevents almost all
programs from running. |
|
Widespread Compromise Impacts Thousands of Legitimate Websites
The eSoft Threat Prevention Team has detected a new widespread
compromise, with tens of thousands of domains infected.
Cybercriminals have used stolen credentials, placing specially
crafted pages into legitimate websites that lead visitors to
malicious payloads. |
|
In-store Fuji photo kiosks spread malware Earlier this month
reports began to come in from Australia that some Windows-based
Fuji photo kiosks were infected by malware, and spreading worms
to unsuspecting shoppers when they inserted their SD cards and
memory sticks to print out their digital snaps. |
|
South Shore Hospital warns 800,000 patient records may be
missing South Shore Hospital, in Weymouth, Massachusetts,
has found itself in the highly embarrassing situation this week
of admitting that the personal information of about 800,000
patients may have been lost in what can only be described as a
data destruction disaster. |
|
Apple Location Data Collection Policies: What You Need To Know
Your iPhone, iPad and Mac computers are helping Apple build a
location information database, according to a recent letter
Apple sent to two concerned congressmen. The letter was in
response to concerns raised over how the company collects
location data information from Apple devices, and what the
company is doing to safeguard user privacy. |
| |
| 7-20-10 |
|
Why anti-malware software doesn’t always work Everyone
should know by now that they need anti-malware protection and
that it needs to be kept up-to-date. But did you know that your
computer can still get infected with malware? |
|
Hacker arrested for spying on schoolgirls via their own webcams
A man has been arrested for spying on more than 150 girls in
their bedrooms by hacking into their computers and using their
webcams to watch them, provoking warnings that others will be
doing the same thing. |
|
ProfileSpy Facebook scam could cost you money There seems to
be an increasing amount of Facebook spam that spreads by social
engineering – which is tough to stop since it’s Facebook users
who are being tricked into “liking” the site. |
|
Skimmers Siphoning Card Data at the Pump Thieves recently
attached bank card skimmers to gas pumps at more than 30 service
stations along several major highways in and around Denver,
Colorado, the latest area to be hit by a scam that allows crooks
to siphon credit and debit card account information from
motorists filling up their tanks. |
| |
| 7-16-10 |
|
The Case for Cybersecurity Insurance, Part II When cyber
crooks stole nearly $35,000 this year from Brookeland Fresh
Water Supply District in East Texas, the theft nearly drained
the utility’s financial reserves. Fortunately for the 1,300
homes and businesses it serves, Brookeland had purchased cyber
security insurance, and now appears on track to recoup all of
the unrecovered funds in exchange for a $500 deductible. |
|
Experts Warn of New Windows Shortcut Flaw Researchers have
discovered a sophisticated new strain of malicious software that
piggybacks on USB storage devices and leverages what appears to
be a previously unknown security vulnerability in the way
Microsoft Windows processes shortcut files. |
|
Possible New Rootkit Has Drivers Signed by Realtek Security
researchers have identified a new suspicious program that is
copying itself to PCs via USB mass storage devices and is
digitally signed with the certificate of Realtek Semiconductor,
a major manufacturer of computer products based in Taiwan. |
|
Credit Card Hackers Visit Hotels All Too Often Here's
something that the struggling hotel sector prefers not to
spotlight: it is a favorite target of hackers. |
| |
| 7-7-10 |
|
UH computer breach may have compromised 53,000 people More
than 53,000 people, who did business with the University of
Hawaii at Manoa parking office's data base from 1998-2009, are
being notified by mail that they may be affected by a computer
security breach. |
|
iTunes App Store hit by developer and account fraud Apple's
iTunes Store users are increasingly being targeted in a number
of fraud cases, some of which appear to be orchestrated by iOS
app developers seeking to boost their sales rankings, and others
which appear to be a widespread hack of user accounts. |
|
New Trojan Disguised as Windows IME There's a new attack
technique in use right now that enables attackers to inject
Trojan code onto victims' machines by disguising it as a Windows
input method editor (IME). |
|
Flaw in Core IE 8 Component Could Enable Remote Attacks
There's an unpatched vulnerability affecting Internet Explorer 8
running on most current versions of Windows that could give
attackers the ability to run code on remote machines. The flaw
is a memory leak that gives attackers key information on the
location of a specific address in memory, even with memory
protections such as ASLR enabled. |
|
Six Messy Database Breaches So Far In 2010 From a National
Guardsman's external hard drive faux pas to a financial services
firm's slack practice of password-sharing, this year has already
had its share of shocking database exposures. |
| |
| 7-6-10 |
|
Trojan attacks now almost solely from legitimate websites
According to reports, surfers are now almost always attacked
from the hacked web sites of legitimate providers. Previously
the general assumption was that malware was only found on sex
sites and other shady web sites, but these days all you need to
do is visit the site of your favorite newspaper to come under
attack. |
|
Newest Social Net Scam: Stranded Friend The FBI and its
Internet Crime Complaint Center (IC3) says they are seeing an
uptick in the complaints about online scammers trying to steal
your money posing as a good friend left stranded somewhere in
need of quick cash. |
|
Natural Disasters and Global Warming Fuel the Malware Flames |
|
Google issues fix for hacked YouTube Google has plugged a
hole hackers used Sunday morning to festoon YouTube videos with
off-color pop-ups and adult-site redirects, according to a news
outlet. |
|
Beware of cold call scammers pushing rogue antivirus
Malware-pushing scammers appear to be stepping up their use of
telephone-based pitches, resulting in an increase in reports
from the UK of high-pressure cold calls designed to trick people
into installing rogue antivirus products and other nasties. |
|
The Secret FarmVille Cow of Fail 31,769 have clicked the
“Like” button for this, and that doesn’t appear to be automated
– after jumping through hoops, my test account hasn’t given this
the “Thumbs up” so it seems like they’re just hitting “Like”
because they like being scammed. |
| |
| 7-2-10 |
|
Bank details at threat from undetected malware Criminals are
using virtually undetectable malware to steal personal and bank
information and commit fraud, security experts have warned. |
|
Regular domains beat smut sites at hosting malware 99 to 1,
study finds New research pours scorn on the comforting but
erroneous belief that Windows surfers who avoid smut and wares
on the web are likely to avoid exposure to malware. |
|
Top Apps Largely Forgo Windows Security Protections Many of
the most widely used third-party software applications for
Microsoft Windows do not take advantage of two major lines of
defense built into the operating system that can help block
attacks from hackers and viruses, according to research released
today. |
| |
| 7-1-10 |
|
Huge Increase Seen in Attacks on Windows Help Center Flaw
Attackers are ramping up their attempts to exploit the recently
disclosed vulnerability in the Windows Help and Support Center
in Windows XP. There have been targeted attacks against the flaw
for two weeks now, but experts have noticed a major increase in
the volume and spread of them in recent days. |
|
Apple Security: Vulnerability Inevitability |
| |
| 6-30-10 |
|
Notorious Kraken botnet rises from the ashes The Kraken
botnet, believed by many to be the single biggest zombie network
until it was dismantled last year, is staging a comeback that
has claimed almost 320,000 PCs, a security researcher said. |
|
Destination Hotels card-processing system hacked Hackers
have broken into the payment processing system of Destination
Hotels & Resorts, a high-end chain best known for its resort
hotels in destinations such as Vail, Colorado; Lake Tahoe,
California; and Maui, Hawaii. |
| |
| 6-29-10 |
|
e-Banking Bandits Stole $465,000 From Calif. Escrow Firm A
California escrow firm has been forced to take out a pricey loan
to pay back $465,000 that was stolen when hackers hijacked the
company’s online bank account earlier this year. |
| |
| 6-28-10 |
|
Anti-virus is a Poor Substitute for Common Sense A new study
about the (in)efficacy of anti-virus software in detecting the
latest malware threats is a much-needed reminder that staying
safe online is more about using your head than finding the right
mix or brand of security software. |
|
Gmail Suspension Notice Phishing Attempts Continue |
|
Facebook 'likejacking' spam scams continue |
|
Android Also Gives Google Remote App Installation Power The
remote-wipe capability that Google recently invoked to remove a
harmless application from some Android phones isn't the only
remote control feature that the company built into its mobile
OS. It turns out that Android also includes a feature that
enables Google to remotely install apps on users' phones as
well. |
| |
| 6-22-10 |
|
The Case for Cybersecurity Insurance |
|
New VPN Flaw Can Expose Users' IP Addresses Researchers have
identified a bug in the way that some third-party VPN services
use the PPTP protocol over IPv6, a problem that enables
eavesdroppers to unmask the specific IP addresses of the VPN
service's users. |
|
French regulators: Google snagged passwords, e-mail Google
collected passwords and e-mail when the company intercepted and
stored data detected on open Wi-Fi hot spots in France,
according to the French National Commission on Computing and
Liberty. |
| |
| 6-21-10 |
|
A Spike in Phone Phishing Attacks? Readers have written in
to say they recently received automated telephone calls warning
them about fraud on their credit card accounts and directing
them to call a phone number to “verify” their credit card
numbers. These voice phishing attacks, sometimes called “vishing,”
are a good reminder that today’s scam artists often abuse a
range of modern technologies to perpetrate old-fashioned fraud. |
|
Malicious code on Lenovo driver download page The driver
download portal of hardware manufacturer Lenovo temporarily
deployed malicious code. Various virus scanners issued alerts
about a Java-based Trojan downloader or dropper. The iframe
injected by attackers points to the volgo-marun.cn server and
can still be found on several pages of the download.lenovo.com
server. |
|
Mobile malware is a reality says Kaspersky Mobile malware
has been bubbling along in the background of the security world
for the last few years but, according to Denis Maslennikov,
Kaspersky Lab's mobile research group manager, the rise in
smartphone sales is triggering a surge in mobile malware amongst
cybercriminals. |
|
Understanding Man-in-the-Browser Attacks Targeting Online Banks
Malware integrating itself into a victim's Web browser is
nothing new. Increasingly however, these man-in-the-browser
attacks are being used to successfully bypass authentication
mechanisms used by online banking sites, according to a security
researcher. |
| |
| 6-18-10 |
|
HP partners with Yahoo for targeted ads Considering one of
HP's web-connected printers? You may soon be actually paying for
advertisements out of your own pocket (printer ink isn't free). |
|
First, China. Next: the Great Firewall of... Australia? The
concept of government-backed web censorship is usually
associated with nations where human rights and freedom of speech
are routinely curtailed. But if Canberra's plans for a mandatory
Internet filter go ahead, Australia may soon become the first
Western democracy to join the ranks of Iran, China and a handful
of other nations where access to the Internet is restricted by
the state. |
|
Sophisticated ATM Skimmer Transmits Stolen Data Via Text Message
Operating and planting an ATM skimmer — cleverly disguised
technology that thieves attach to cash machines to intercept
credit and debit card data — can be a risky venture, because the
crooks have to return to the scene of the crime to retrieve
their skimmers along with the purloined data. Increasingly,
however, criminals are using ATM skimmers that eliminate much of
that risk by relaying the information via text message. |
|
Eastern European banks under attack by next-gen crime app
Banks in Russia and Ukraine are under continued siege by
criminal gangs wielding a sophisticated, next-generation
exploitation kit that hacks the financial institutions'
authentication system and then hits it with a denial-of-service
attack. |
| |
| 6-17-10 |
|
WebKit Security Flaws Haunt Apple iTunes Apple has shipped a
critical security patch for its iTunes media player to fix
several gaping security holes that expose Windows users to
hacker attacks. |
|
Researchers Find Government Site Hosting Phishing Data
Phishing gangs have been getting bolder of late, and there's no
clearer evidence than the cache of phishing data that
researchers at Sunbelt found on a site owned by the Paraguayan
government. |
|
AT&T Show How Not to Handle a Data Breach Instead of issuing
a mea cupla and pledging to do better, AT&T essentially
deflected all the blame to the attackers. |
| |
| 6-16-10 |
|
Police arrest 178 in global credit card scam Police have
arrested 178 people in Europe and the United States suspected of
cloning credit cards in an international scam worth over 20
million euros, Spanish police said on Tuesday. |
|
AT&T-iPad security breach may be worse than first thought
Researchers looking into the security of GSM phone networks are
suggesting that the recent breach, which saw tens of thousands
of e-mail addresses and ICC-IDs inadvertently disclosed by AT&T,
could have far more significant implications than a bit of extra
spam: attackers can use the information to learn the names and
phone numbers of the leaked users, and can even track their
position. |
|
Unpatched Windows XP Flaw Being Exploited A security
vulnerability in Microsoft Windows XP systems that was first
disclosed a week ago is now being actively exploited by
malicious Web sites to foist malware on vulnerable PCs,
according to reports. |
| |
| 6-14-10 |
|
Hacker charged with threatening US VP using neighbor's PC A
hacker tried to frame his neighbour by tapping into his Wi-Fi
and sending threatening emails to US vice president Joe Biden,
according to search warrant affidavits unsealed last week. |
| |
| 6-10-10 |
|
ZeuS Trojan Attack Spoofs IRS, Twitter, Youtube Criminals
have launched an major e-mail campaign to deploy the infamous
ZeuS Trojan, blasting out spam messages variously disguised as
fraud alerts from the Internal Revenue Service, Twitter account
hijack warnings, and salacious Youtube.com videos. |
|
Thousands Of High-Ranked Webpages Infected With Malware,
Including Intljobs.org, WSJ.com, tomtom.com.tw More than
100,000 webpages, some belonging to newspapers, police
departments, and other large organizations, have been hit by an
attack over the past few days that redirected visitors to a
website that attempted to install malware on their machines. |
|
WordPress-based, GoDaddy-hosted websites hacked WordPress
users whose websites are hosted on GoDaddy servers have been
targeted by fake AV peddlers - again. |
|
iPad 3G owners' e-mail addresses hacked Prominent users of
Apple's new iPad 3G, including military and government officials
as well as media personalities and celebrities, had their e-mail
addresses hacked by a group that shared its findings with online
publication Valleywag to point out security flaws in AT&T's Web
servers. |
| |
| 6-9-10 |
|
Olympus Stylus Tough camera carries malware infection
Olympus Japan has issued a warning to customers who have bought
its Stylus Tough 6010 digital compact camera that it comes with
an unexpected extra - a virus on its internal memory card. |
|
Bank of America call center worker pleads guilty to data theft
A Bank of America call center employee has pleaded guilty to
charges that he stole sensitive client information and then
tried to sell it for cash. |
| |
| 6-8-10 |
|
Smartphone Malware Multiplies More than twice the number of
malware and spyware hitting BlackBerry, Windows Mobile, and
Android phones than six months ago. |
|
Understanding The Porn + Malware Connections For a minimal
investment of about $160, a single porn site operator can infect
more than 20,000 computers with malware for use in cybercrime,
according to an academic study presented at the Workshop on the
Economics of Information Security. |
| |
| 6-2-10 |
|
As promised: FBI going after money mules You'd better take a
long hard look at that work-at-home job, it could land you in
jail. |
|
'Clickjacking' worm hits hundreds of thousands on Facebook A
vulnerability on Facebook forced hundreds of thousands of users
to endorse a series of webpages over the holiday weekend, making
the social networking site the latest venue for an attack known
as clickjacking. |
|
Mac spyware infiltrates popular download sites A spyware
application that surreptitiously scans chat logs and hard drives
of unsuspecting Mac users has found its way onto three of the
more popular download sites, security researchers said Tuesday. |
|
SMS Blockers: The New Face of Ransomware
The scareware and rogue anti-virus
epidemic that has been earning attackers millions of dollars for
the last few years has spawned a devious new offspring: SMS
blockers. |
|
Facebook: The Money Mule Farm Scammers and phishers are
continuing to adapt their recruitment tactics, now going so far
as to create special Facebook groups for their work-at-home
scams. |
|
419 scammers kidnap US woman This gets filed under "How
gullible can you be?" |
| |
| 5-27-10 |
Cyber Thieves Rob Treasury Credit Union Organized cyber
thieves stole more than $100,000 from a small credit union in
Salt Lake City last week, in a brazen online robbery that
involved dozens of
co-conspirators. |
| |
| 5-26-10 |
|
Vulnerability in iPhone data encryption A lost iPhone is a
bigger problem than previously thought. Despite encryption the
finder can gain easy access to data including photos and audio
recordings, even if the owner has set up their iPhone to require
a pass code. |
| |
| 5-25-10 |
|
Devious New Phishing Tactic Targets Tabs Most Internet users
know to watch for the telltale signs of a traditional phishing
attack: An e-mail that asks you to click on a link and enter
your e-mail or banking credentials at the resulting Web site.
But a new phishing concept that exploits user inattention and
trust in browser tabs is likely to fool even the most
security-conscious Web surfers. |
|
Two years later, Apple Safari still open to 'carpet-bombing'
After more than two years, Apple's Safari browser for Macs
remains vulnerable to attacks that allow websites to litter a
user's hard drive with thousands of malicious files. |
| |
| 5-24-10 |
|
Microsoft smacks patch-blocking rootkit a second time For
the second month in a row, Microsoft has tried to eradicate a
mutating rootkit that has blocked some Windows users from
installing security updates. |
| |
| 5-21-10 Today is
Facebook awareness day |
|
Facebook caught sharing secret data with advertisers The
privacy issues that have been hounding Facebook may be coming to
a head. A report in the Wall Street Journal indicates that the
Facebook, along with MySpace, Digg, and a handful of other
social-networking sites, have been sharing users' personal data
with advertisers without users' knowledge or consent. |
|
60% of Facebook users consider quitting over privacy Over
the last few days we've been running an online poll asking
Facebook users if privacy concerns might make them consider
quitting the service. The votes have now been counted, and
reveal the extent of members' concerns regarding the popular
social network's privacy settings. |
|
ReclaimPrivacy.org: Facebook Privacy 101 If you’ve been
watching the slow motion train wreck that is Facebook.com’s
recent effort to revamp its privacy promises, you may be
wondering where to start making sense of the dizzying array of
privacy options offered by the world’s largest online social
network. |
|
Fake joke worm wriggles through Facebook The malware, for
now at least, does nothing more malicious than posting a message
on an infected user's Facebook wall that point to a site called
fbhole.com. Nonetheless, the speed of its spread on the social
networking site has net security experts worried. |
|
IBM Distributes Malware on USB Sticks For the second year in
a row, attendees at the AusCERT conference in Australia got an
ugly surprise from USB keys handed out at a vendor booth. |
| |
| 5-19-10 |
|
LifeLock CEO’s Identity Stolen 13 Times Apparently, when you
publish your Social Security number prominently on your website
and billboards, people take it as an invitation to steal your
identity. LifeLock CEO Todd Davis, whose number is displayed in
the company’s ubiquitous advertisements, has by now learned that
lesson. He’s been a victim of identity theft at least 13 times,
according to the Phoenix New Times. That’s 12 more times than
has previously been known. |
| |
| 5-17-10 |
|
Google Street View Cams Collected Private Content From WiFi
Networks Google’s roaming Street View cameras have been
doing more than snap pics of your neighborhood; they’ve also
been collecting packets of information sent over private WiFi
networks, the company acknowledged Friday. |
| |
| 5-14-10 |
|
Thieves Flood Victim’s Phone With Calls to Loot Bank Accounts
Bank thieves have rolled out a new weapon in their arsenal of
tactics — telephony denial-of-service attacks that flood a
victim’s phone with diversionary calls while the thieves drain
the victim’s account of money. |
|
"Kill Your Facebook Page" Backlash Gains Speed Calls for
people to delete their Facebook accounts are gathering momentum.
Critics cite privacy concerns and plummeting trust in the
company and its leader, Mark Zuckerberg. |
|
Facebook's Eroding Privacy Policy: A Timeline Since its
incorporation just over five years ago, Facebook has undergone a
remarkable transformation. When it started, it was a private
space for communication with a group of your choice. Soon, it
transformed into a platform where much of your information is
public by default. Today, it has become a platform where you
have no choice but to make certain information public, and this
public information may be shared by Facebook with its partner
websites and used to target ads. |
| |
| 5-13-10 |
|
Stolen Laptop Exposes Personal Data on 207,000 Army Reservists
A laptop stolen from a government contractor last month
contained names, addresses and Social Security numbers of more
than 207,000 U.S. Army reservists. |
| |
| 5-11-10 |
|
FBI Promises Action Against Money Mules Accepting one
of those tax or finance job offers you got via email? Are you
receiving large deposits and transferring money overseas? This
will hopefully land
you in jail soon if all goes well. |
|
Say “Yes” on the Internet and Malware’s Gotcha! Virtually
every computer user, at both the home user level (my friends),
and at the corporate level, whom I come into contact with, tends
to downplay personal responsibility for a malware infection. |
| |
| 5-10-10 |
|
Javascript code "likes this" on Facebook We’re seeing a lot
of reports in relation to dubious Facebook pages using
Javascript to try and spam anybody who happens to be on your
friends list. |
| |
| 5-7-10 |
|
Consumer groups hammer Facebook privacy violations in federal
complaint On Wednesday, the Electronic Privacy Information
Center filed a 38-page complaint against the company with the
Federal Trade Commission, demanding that Facebook cancel new
features introduced in mid-April that compel users to share more
information than before. |
| |
| 5-6-10 |
|
Phishers want your Apple gift card |
|
Stealth installs and adware come to Facebook Already under
fire for taking liberties with users' privacy, Facebook was
outted on Thursday as a distributor of unwanted applications,
some of which install adware or are added to user profiles
without permission. |
| |
| |
| 5-3-10 |
|
Trojan disguised as a toolbar for Facebook |
|
Hacked US Treasury websites serve visitors malware Websites
operated by the US Treasury Department are redirecting visitors
to websites that attempt to install malware on their PCs, a
security researcher warned on Monday. |
|
New IM Worm Spreading Fast Aggressive new variant of an
older worm circulating around Yahoo Messenger lets attacker take
over a victim's machine. |
| |
| 4-29-10 |
|
Fake Twitter email continues to plague inboxes, leads to malware |
| |
| 4-28-10 |
|
Closeted lesbian sues Netflix for privacy invasion An
in-the-closet lesbian mother has sued Netflix for publishing
data that she believes could be used to out her. |
|
Users' passwords exposed by Splunk
Splunk, a kind of Google for business
technology that boasts it can help reinforce your security, has
exposed the details of major customers to hackers following a
web site slip up. |
|
Changes in new ZeuS variants |
|
Infamous Storm Worm Stages a Comeback The “Storm Worm,” a
strain of malicious software once responsible for blasting out
20 percent of spam sent worldwide before it died an ignominious
death roughly 18 months ago, was resurrected this week. |
|
Adobe Vulnerabilities Continue to Rise
It's no secret to anyone who has been
paying attention that Adobe Reader and Acrobat have become prime
targets for attackers in the last year or so. |
|
PDF Malware Using New Attack Technique
A fresh batch of malicious PDFs is
making the rounds via email, with the attackers trying to trick
users into opening the files by making them look like
instructions for an update to their email accounts. |
| |
| 4-27-10 |
|
Fake Anti-virus Peddlers Outmaneuvering Legitimate AV
Purveyors of fake anti-virus or
“scareware” programs have aggressively stepped up their game to
evade detection by legitimate anti-virus programs, according to
new data from Google. |
|
iPad users with PCs threatened by backdoor malware
A malicious spam email campaign has
been targeting iPad users who own PCs, says Bitdefender. |
|
Spammers Pay Others to Answer Security Tests |
| |
| 4-26-10 |
|
Massachusetts Eye and Ear Infirmary patient Data Exposed After
Laptop Theft |
|
Website shares user credit cards with world+dog |
| |
| 4-23-10 |
|
UK's NHS computers hit by voracious, data-stealing worm |
|
1.5M stolen Facebook IDs up for sale |
| |
| 4-22-10 |
|
New Zeus version targeting Firefox users for bank fraud |
|
Fire Alarm Company Burned by e-Banking Fraud |
|
McAfee False Detection Locks Up Windows XP |
|
Rogue Antivirus Gangs Seize on McAfee Snafu |
|
Social Engineering Attacks Prove Failure of User Education |
|
Health Insurer Notifies More Than 409,000 Of Potential Breach |
| |
| 4-21-10 |
|
Drug-dealing spammers hit Gmail accounts |
|
Researchers Hijack Cell Phone Data, GSM Locations |
|
Call Centers for Computer Criminals busted |
| |
| 4-20-10 |
|
How Safe Are Trusted Web Sites? Not Very! |
|
Network Solutions Again Under Siege |
| |
| 4-19-10 |
|
Trojan poses as Google Chrome extension |
|
Zeus botnet exploits unpatched PDF flaw |
| |
| 4-16-10 |
|
Walmart web site hacked and hosting spam |
| |
| 4-15-10 |
|
New P2P Botnet Forming |
|
Microsoft acts to avoid Windows blue screen repeat |
|
Brokerage coughs up $375,000 for website breach |
|
Attackers Using Malicious PAC Files in Phishing Attacks |
|
Java Zero-Day Attacks In The Wild |
|
DNS Trojan poses as iPhone unlocking utility |
| |
| 4-13-10 |
|
The Subscription Trap |
|
Copyright violation alert ransomware in the wild |
| |
| 4-9-10 |
|
How To Beat Online Shopping Scams |
|
Serious New Java Flaw Affects All Current Versions of Windows |
|
Identity Thieves Filed For $4 Million in Tax Refunds Using Names
of Living and Dead |
| |
|
4-8-10 |
|
Police cuff 70 eBay fraud suspects |
|
Health IT data security crude in some companies, says CMS CIO |
|
Bank of America insider to plead guilty to hacking ATMs |
|
Customers Sue Countrywide Financial Over Theft And Sale Of
Personal Data |
|
Inside a Banker Trojan |
|
|