The holidays are coming — expect security alerts to go up, and the frequency of attacks to increase. We publish the most news worthy regardless of platform because no matter which platform you use, malware, virus, trojans, botnets and the evils spawned on the computer world effects us all. . . .
* IRS warns about fake web page for tax preparers almost identical to the real one
* Xerox, McAfee join hands to protect devices, data from malware in 2013
* 23 of the top 500 Google Play Apps considered to be malware
* Windows 8 features make account passwords easier to steal
* Delta-themed spam run delivers deficient malware
and more . . .
23 of the top 500 Google Play Apps considered to be malware
Getting a virus on one’s machine is always cause for concern. They can do some nasty stuff such as crashing computers, stealing personal info, and just being an all around nuisance. People often go to great strides to avoid getting one.
In the Android world, Malware has been on the increase in recent years as the platform has gotten more powerful and more apps have been released. How much has it increased exactly? According to TrustGo, 23 of the top 500 Google Play apps are considered high risk. Malware over all is up 580%.
Full story : Android Authority
IRS warns about fake web page for tax preparers almost identical to the real one
The Internal Revenue Service is issuing a warning about a new tax scam that uses a website that mimics the IRS e-Services online registration page. The actual IRS e-Services page offers web-based products for tax preparers, not the general public. The phony web page looks almost identical to the real one.
Full story : Kansas City infoZine
Windows 8 ramps up early malware detection
The latest version of the OS, officially launched Thursday in a splashy event in New York, includes two key features to detect malware that tries to run while Windows is booting up. Hackers typically like to get their software running before the OS is fully loaded in order to remain hidden from antivirus applications.
Rootkits are a class of stealthy malware that opens a backdoor, so cybercriminals can control a PC. To avoid detection, the malware will replace the code used to start a computer with itself and disable antivirus software.
Full story : PCWorld
Windows 8 features make account passwords easier to steal
The features, which allow people to sign in with a picture-based password and four-digit personal identification number, are intended to provide a less-cumbersome alternative to entering a password each time users want to access their account. Once people have set up a password for an account, they can use pictures or PINs to log in from then on.
But the added convenience comes at a cost. According to security experts who have tested the features in developer pre-releases of the upcoming Microsoft operating system, the features cause Windows 8 to store passwords using encryption that can be reversed. Attackers who gain physical control of a computer as well as administrator access can extract the key that recovers the plaintext password of each account that uses the log-on alternatives. The latest version of Windows Password Recovery, a password-cracking package sold by Russia-based Passcape Software, claims to do just that.
Full story : arstechnica.com
Why mobile malware is big in China and Russia
According to Lookout’s State of Mobile Security Report 2012, ‘Toll Fraud’ malware has become the most prevalent type of malware within the past year due to the global ubiquity as a phone payment mechanism.
Mobile malware has become a profitable industry but, naturally, there are places on this globe of ours where it’s more profitable than in others – namely China, Russia and Iran. There are several reasons behind the malware writers’ obvious preference for these countries.
Full story : Help Net Security
Xerox, McAfee join hands to protect devices, data from malware in 2013
Xerox, a NYSE-listed, $23-billion enterprise for business process and document management, and McAfee, a fully-owned subsidiary of Intel Corporation, have demonstrated at the McAfee Focus 12 conference in Las Vegas, a new security solution that protects printed devices and data from malware.
“When a multifunction device receives data and processes it for printing, copying, scanning or faxing, it becomes susceptible to malware attacks, a risk that often is overlooked,” Tom Moore, vice-president (security) at McAfee, said
Full story : Business Standard
Fast Flux Botnet Nets Fraudsters $78 Million
Security report offers new details on financial hackers, warns that automated clearing house payment channels could be next target of increasingly sophisticated attacks.
What does it take to build a cutting-edge, highly automated series of attacks against banking systems, powered by financial malware and bulletproof hosting services? For starters, it helps to have extensive experience using the Zeus and SpyEye financial malware toolkits.
Full story : InformationWeek
Delta-themed spam run delivers deficient malware
What ever you do, DO NOT open attachments claiming to be from Delta Airlines — unless you want to be victim of the latest malicious spam campaign to hit email inboxes
The email claims that the ticked for the flight booked by the recipient is attached to the email, and that it should be downloaded and printed out. But the attached Delta_A_Ticket_Print_Document_3477.zip is actually a variant of the infamous Bredolab Trojan, whose main goal is to download more malware on to the compromised computer, and this particular variant is currently detected by only 3 of the 43 AV solutions used by VirusTotal.
Full story : Help Net Security
If you think you’re a victim, file a complaint with the
FBI Internet Crime Complaint Center : IC3.