Virus Information News

[First]  [Previous] |    13     14     15     16     17     18     19     20     21     22    | [Next]  [Last] of 172 page(s)

Facebook's Graph Search: Clear Your Searches

F-Secure Weblog

by Sean

January 30, 2013

I'm testing out Facebook's new Graph Search today.

Graph Search: Friends of my friends who are women and live near Helsinki, Finland. Result: More Than 1,000 People (actually 799). Conclusion? Facebook privacy settings aren't all that mysterious for the average user. However... what about my own Search history in my Activity Log?

Universal Plug and Pray

F-Secure Weblog

by Sean

January 29, 2013

From the files of things that really shouldn't surprise us: Rapid 7 released a white paper today on its research of the global exposure of Universal Plug and Play (UPnP) enabled network devices.

The results are impressive. "Over 80 million unique IPs were identified that responded to UPnP discovery requests from the internet. Somewhere between 40 and 50 million IPs are vulnerable to at least one of three attacks [...]. The two most commonly used UPnP software libraries both contained remotely exploitable vulnerabilities."

Versions of Internet Explorer Still Vulnerable

F-Secure Weblog

by Sean

January 9, 2013

One week ago, it wasn't yet clear if Microsoft would be able to quickly patch Internet Explorer's latest vulnerability.

Microsoft Security Advisory (2794220) We now know it isn't part of January's Security Updates. This raises the possibility of an out-of-cycle patch. But then, we have yet to see more than limited exploitation. (We are currently investigating reports of targeted attacks.)

Cool Exploit Kit is Related to Blackhole

F-Secure Weblog

by Sean

January 8, 2013

Two months ago, Karmina and Timo wrote about clear similarities between the Cool and Blackhole exploit kits.

Blackhole seemed to be copying (or perhaps replicating is a better word) techniques and exploits used by Cool. Yesterday, Brian Krebs exposed that relationship. Cool is a premium exploit kit from the authors of Blackhole which uses custom exploits (as in zero-day) and costs $10,000 a month!

On Using Fake Data to Generate Alerts

F-Secure Weblog

by Sean

January 3, 2013

Tip: Insert unique fake users and customers into your production databases, then set up a Google Alert to notify you if they get leaked.

And here's a Washington Post article from today by Ellen Nakashima: "To thwart hackers, firms salting their servers with fake data" Not a bad idea, eh? We've also known people that make intentional spelling errors when providing personal data to companies, so that they can track how the information is used and sold. Fake data: welcome to the future.

Australian Medical Records Encrypted, Held Ransom

F-Secure Weblog

by Sean

December 10, 2012

According to the Australian Broadcasting Corporation (ABC), a server belonging to a small medical business located in Australia's Gold Coast has been hacked, had its patient records encrypted, and held ransom for $4000.

The Australian edition of SC Magazine reported on similar hacks earlier this year. This strikes us as an interesting development as most of the ransomware we've seen during 2012 has been focused on locking out individuals from their desktops.

New Mac Malware Found on Dalai Lama Related Website

F-Secure Weblog

by Sean

December 3, 2012

Acting on a tip, a member of our Threat Research team (Brod) has discovered a Dalai Lama related website is compromised and is pushing new Mac malware, called Dockster, using a Java-based exploit.

Free Weev. Free Weev?

F-Secure Weblog

by Sean

November 21, 2012

Once upon a time there was an Internet troll...

I've been following the case of Mr. Andrew "Weev" Auernheimer for nearly two and a half years. And yesterday, he was found guilty of violating the USA's Computer Fraud and Abuse Act (CFAA). Caution: you may be in violation of the CFAA at this very moment! But more on that below. So, just what did Andrew do?

A New Linux Rootkit

F-Secure Weblog

by Sean

November 20, 2012

Details of a new Linux rootkit turned up on SecLists.Org's Full Disclosure Mailing List last week: linux rootkit in combination with nginx.

Berlin Police: Beware Android Banking Trojans

F-Secure Weblog

by Sean

November 15, 2012

The Berlin Police Department issued a press release this past Tuesday about criminal complaints of fraudulent cash withdrawals. All of the cases involved SMS mTans and Android smartphones.

It sounds to us like a case of ZeuS in the Mobile (Zitmo), sometimes also called ZeuS Man in the Mobile (ZeuS Mitmo). We first wrote about Zitmo back in September 2010. An important thing to realize about Zitmo is that it isn't "mobile" malware as such. Rather, Zitmo is a companion/complement component to a Windows based ZeuS bot. Zitmo works with its Windows based ZeuS when the bank customer has SMS mTans as an additonal layer of authentication.

[First]  [Previous] |    13     14     15     16     17     18     19     20     21     22    | [Next]  [Last] of 172 page(s)