Virus Information News

[First]  [Previous] |    142     143     144     145     146     147     148     149     150     151    | [Next]  [Last] of 172 page(s)

Recommended: An Insider's View of China and Sina Weibo

F-Secure Weblog

by Sean

August 14, 2012

Do you want to better understand Chinese hackers? If so, then you really need to better understand China.

Context matters. Rui Chenggang is the anchor of "BizChina", a business show on China's CCTV International. He's a man with a daily television audience of up to 300 million people, and he has nearly 5 million fans on Sina Weibo, China's version of Twitter. He's possibly the most well known guy you've never heard of before.

"There's never just one cockroach in the kitchen."

F-Secure Weblog

by Sean

July 12, 2012

There's a reaction to yesterday's post which suggests we find fault with Google for "not doing their job" by letting malware into Play. No. We didn't take Google to task on the matter of prevention. It's about its response.

It literally took less than 10 seconds for us to locate a second dummy account being used to push alternate versions of Dropdialer. Google's Android Security team had already removed the first two threats more than six hours earlier. Why was the "Vahtang Maliev" account still online? Does "Android Security" not know how to utilize Google Search?

Google Play Fails to Remove All Super Mario Malware

F-Secure Weblog

by Sean

July 11, 2012

Malware has been found once again on Google Play according to this post by Symantec's @Irfan_Asrar.

Android.Dropdialer poses as a "Wallpaper" app but it also happens to install an additional app which then sends a premium rate SMS. Asrar analyzed two versions found on Play that used video games as bait. Good news: Android Security removed the apps identified by Asrar. Bad news: there are more malware apps currently on Google Play. When something works once, bad guys will try it again. With that in mind we used Google Search and we found more examples (in less than 10 seconds).

iPhone "5"

F-Secure Weblog

by Sean

July 3, 2012

Apple's "world changing" iPhone celebrated its fifth birthday on Friday, June 29th.

Mikko: "iPhone is 5 years old today. After 5 years, not a single serious malware case. It's not just luck; we need to congratulate Apple on this."

Should the FBI be reauthorized to continue DNSChanger servers?

F-Secure Weblog

by Sean

July 2, 2012

The latest DNSChanger deadline is rapidly approaching: July 9th. (The previous deadline was March 8th.) Just one week to go!

What's DNSChanger? DNSChanger is an ad-fraud botnet that the F.B.I. and Estonian authorities busted late last year in Operation Ghost Click. Operation Ghost Click? "Click" as in click-fraud. Altering DNS server settings allowed the gang to do man-in-the-middle ad injections.

Die Zeit Uses Six Months of Mobile Data to Profile Green Politician

F-Secure Weblog

by Sean

June 29, 2012

Have you ever wondered just how much your phone reveals about you?

That's what German party politician Malte Spitz wanted to discover... A 2008 German law required all telecommunications providers with more than 10,000 customers to retain six months worth of data on all calls, messages and connections. Germany's Constitutional Court ruled the law unconstitutional in 2010.

Commoditization vs. Specialization

F-Secure Weblog

by Sean

June 21, 2012

Another rebuttal to Mikko's Flame related opinion column in Wired magazine, this time from Bruce Schneier.

A couple of points. First, regarding military malware's supposedly slow and stealthy spread. It's relative. Compared to something such as Conficker, most "non-military" malware is as quiet as a mouse. It's as stealthy as it needs to be. Second, actually... Flame didn't really "spread". It was used in targeted attacks. Think sniper bullet, not germ warfare. (Stuxnet is a different story. But it wasn't supposed to spread in-the-wild.)

It's Signed, therefore it's Clean, right?

F-Secure Weblog

by Sean

June 14, 2012

Here's a slide from a CARO 2010 presentation called: It's Signed, therefore it's Clean, right?

Redux: Are you sure SHA-1+salt is enough for passwords?

F-Secure Weblog

by Sean

June 7, 2012

Yesterday, LinkedIn confirmed reports that some member passwords have been compromised.

The anarchic Internet group called Anonymous recently hacked HBGary Federal and rootkit.com, an online forum dedicated to analyzing and developing rootkit technologies. All user passwords at rootkit.com have been compromised. Given this compromise, I'd like to point out one of my favorite topics in application security - password hashing...

Tool: DNS Check #DNSChanger

F-Secure Weblog

by Sean

June 1, 2012

An Estonian company called Rove Digital was busted last November. Why? Because it was a front for the ad-fraud DNSChanger botnet.

And ever since November, the USA's FBI has been responsible for the substitute DNS servers designed to keep compromised computers from being disconnected (and causing support call chaos). Back in March, we wrote about the looming expiration of the FBI's authority. Fortunately, that authorization was extended until July.

[First]  [Previous] |    142     143     144     145     146     147     148     149     150     151    | [Next]  [Last] of 172 page(s)