Virus Information News

[First]  [Previous] |    148     149     150     151     152     153     154     155     156     157    | [Next]  [Last] of 172 page(s)

Is Anonymous still a "hacktivist" collective?

F-Secure Weblog

by Sean

October 13, 2011

Members of the Internet collective known as "Anonymous" are often described as hacktivists. But are they really?

Or are they really just activists (is that what they've become)? We follow various Anonymous news accounts on Twitter and ever since the sub-collective, LulzSec, petered out, Anonymous has shifted away from talking about online attacks and hacks to real-world protests, e.g., Wall Street.

More Info on German State Backdoor: Case R2D2

F-Secure Weblog

by Sean

October 11, 2011

Last weekend, the German based Chaos Computer Club (CCC) published details on a backdoor trojan they claimed was being used by German authorities, in violation of German law.

And now, several German states have admitted to using Backdoor:W32/R2D2.A (aka "0zapftis"), though they say the backdoor falls within what's allowed. In one case, the trojan was installed on a suspect's laptop while he was passing customs & immigration at the Munich International airport. Here's some additional details about the backdoor itself...

Trends: From Phishing to "Man-in-the-Middle" Phishing

F-Secure Weblog

by Sean

September 30, 2011

Here's how phishing methods are evolving based on our recent investigations.

This message claims to be from Blizzard Entertainment. It attempts to phish the recipient by promising access to a game that's currently under development. The language and grammar usage is good but not perfect. Somewhat oddly - the e-mail address that's spoofed is noreply@blizzard.com

Hackers to Release iTunes Song Today

F-Secure Weblog

by Sean

September 26, 2011

TeaMp0ison (the hacker group responsible for defacing RIM's BlackBerry blog back on August 9th) and members of Anonymous are set to release a music track today at 4:12 PM, British time, and are daring the music industry to censor it.

Man-in-the-Middle Attacks on Multiple Finnish Banks

F-Secure Weblog

by Sean

September 12, 2011

Multiple man-in-the-middle attacks are currently underway against at least two Finnish banks: Nordea and Osuuspankki.

Both banks use one time passwords and verification codes, so run of the mill phishing yields little of value to an attacker other than the account number. But in this case, the attacks are connected to a server-side man-in-the-middle attack that attempts to complete a banking transaction.

Are you monitoring your business's Google Place?

F-Secure Weblog

by Sean

September 6, 2011

Running a small business can be a difficult job (particularly in today's economic climate). Competition can be very cut-throat...and dirty tricks are sometimes played by the unethical.

For example: In 2003, Saad Echouafni, owner of Orbit Communications (a satellite television reseller), paid for an Ohio botmaster (Richard Roby) to DDoS the websites of two competitors. In 2005, Roby, the botmaster, was convicted of computer crimes in US federal court. Investigation into Roby's crimes revealed a link to Echouafni and a co-conspirator (Paul Ashley) who also pleaded guilty to related crimes in 2005. Echouafni paid bail and fled US jurisdiction. Reportedly, at the height of the DDoS attacks, Rapid Satellite and WeaKnees were offline for two weeks. It's quite an interesting tale and you can read more here: Feds bust DDoS 'Mafia', by Kevin Poulsen.

DigiNotar and Facebook Post Updates

F-Secure Weblog

by Sean

September 5, 2011

We updated two of our recent posts today.

DigiNotar: It turns out that DigiNotar was hacked. A list of known domains for which the attacker managed to create fake certificates can be found at the end of this post. Facebook: We were far too optimistic about Facebook's "Info accessible through your friends" [to applications] setting.

Facebook to Prevent 3rd-party Apps From Seeing Your Information Via Your Friends

F-Secure Weblog

by Sean

August 25, 2011

On Tuesday of this week, Facebook announced significant changes to their profile controls and sharing options. The roll out of these changes begins today, August 25th.

Meanwhile, we've been busy digging into the details and reading between the lines. And there's lots of details to consider. If we are interpreting this correctly - Facebook will now prevent third-party applications from seeing your information via your friends. This is something that the American Civil Liberties Union (ACLU) took issue with already back in December 2009 (the last time that Facebook made similar changes).

edocinU edirrevO tfeL ot thgiR gnisU erawlaM

F-Secure Weblog

by Sean

August 19, 2011

According to our friends at Commtouch, malware using Right to Left Override (RLO) Unicode tricks have "resurfaced extensively in the past week".

Unicode character (U+202E) "reverses" text for languages that are traditionally read from right to left, and it's a feature that can be used to obfuscate file names. We examined a sample a few days ago. Here's the archive file viewed in Windows...

Anonymous Ops Britian and BART

F-Secure Weblog

by Sean

August 15, 2011

Here's a new maxim for politicians, policy makers and public administrators: curtail, censor or otherwise limit communications technology in the real-world - expect online reprisals.

Hacker collective Anonymous released a "press release" on Saturday announcing OpBritian, a reaction to UK Prime Minister David Cameron's suggestions that social media should be restricted in a time of crisis. And while Anonymous states that actions by rioters were "violent", they have no love for police authority, and so the enemy of my enemy is my friend.

[First]  [Previous] |    148     149     150     151     152     153     154     155     156     157    | [Next]  [Last] of 172 page(s)