Nastiest Malware 2023
News, Announcements, Tech Discussions
[url=http://www.pcworld.com/article/2361040/many-servers-expose-insecure-outofband-management-interfaces-to-the-internet.html#lucianconstantin]Lucian Constantin [/url]Jun 6, 2014 Many servers expose insecure management interfaces to the Internet through microcontrollers embedded into the motherboard that run independently of the main OS and provide monitoring and administration functions. These Baseboard Management Controllers (BMCs) are part of the Intelligent Platform Management Interface (IPMI), a standardized interface made up of a variety of sensors and controllers that allow administrators to manage servers remotely when they’re shut down or unresponsive, but are still connected to the power supply. BMCs are embedded systems that run inside servers and have their own firmware—usually based on Linux. They provide IPMI access through a network service accessible over UDP port 623. [url=http://www.pcworld.com/article/2361040/many-servers-expose-insecure-outofband-managem
[H2]Cisco said the attacks can be traced to advertisements on Disney, Facebook and The Guardian newspaper[/H2]By Jeremy Kirk June 6, 2014 Malicious advertisements on domains belonging to Disney, Facebook, The Guardian newspaper and others are leading people to malware that encrypts a computer's files until a ransom is paid, Cisco Systems has found.The finding comes shortly after technology companies and U.S. law enforcement banded together in a large operation to [url=http://www.pcworld.com/article/2357820/law-enforcement-agencies-disrupt-gamover-zeus-botnet.html]shut down[/url] a botnet that distributed online banking malware and so-called "ransomware," a highly profitable scam that has surged over the last year. Cisco's investigation unraveled a technically complex and highly effective way for infecting large number of computers with ransomware, which it [url=https://blogs.cisco.com/security/rig-exploit-kit-strikes-oil.]described in detail[/url] on its blog. "It really is insidi
Hello! I'm Phil and I noticed that the links on various web sites lead to "jobs AOL.com" or other sites. I'd like to remove them. Any ideas on what I can do? Thanks! Phil
"Quote" OS X Yosemite and iOS 8's enticements could also entrap By Caroline Craig | InfoWorld / Posted on June 06, 2014 Summary/ Apple's seamless cross-device experience will appeal to business users, but security experts warn integration poses new risks. InfoWorld/ Full Read Here: [url=http://www.infoworld.com/t/mac-os-x/os-x-yosemite-and-ios-8s-enticements-could-also-entrap-243845]http://www.infoworld.com/t/mac-os-x/os-x-yosemite-and-ios-8s-enticements-could-also-entrap-243845[/url]
"Quote" There are no secrets: What Edward Snowden taught us about privacy By Galen Gruman, InfoWorld, Posted on June 6, 2014 Summary/ A year ago, Snowden provided shocking revelations about the depth and scope of NSA electronic spying on citizens and noncitizens alike. Those revelations split the country between those who saw him as a heroic whistleblower and those who saw him as abetting America's enemies. In an NBC interview, Snowden made a compelling case for his actions. InfoWorld/ Full Read Here: [url=http://www.infoworld.com/slideshow/155647/there-are-no-secrets-what-edward-snowden-taught-us-about-privacy-243873#slide1]http://www.infoworld.com/slideshow/155647/there-are-no-secrets-what-edward-snowden-taught-us-about-privacy-243873#slide1[/url]
"Quote" UAE ranks third in GameOver ZeUS hitlist By Stephen McBride Published June 4, 2014 Summary/ Symantec shared the breakdown of the top six nations hit by the financially motivated botnet following an FBI shutdown of the network earlier this week. Symantec and Australian Federal Police were both reportedly instrumental in the operation, but the shutdown was said to be temporary and users were warned they had two weeks to protect their computers before the GOZ command-and-control system would be restored. itp.net / Full Read Here: [url=http://www.itp.net/598462-uae-ranks-third-in-gameover-zeus-hitlist]http://www.itp.net/598462-uae-ranks-third-in-gameover-zeus-hitlist[/url]
"Quote" UK government proposes life sentences for hackers Author/ Zeljka Zorz/ HNS Managing Editor/ Posted on 06 June 2014. Summary/ Hackers in the UK could be in for a world of problems, as the UK government is looking to hand out life-long prison sentences to those who are found guilty of organizing and executing devastating cyberattacks, reported The Guardian. Help Net Security/ Full Read Here/ [url=http://www.net-security.org/secworld.php?id=16972]http://www.net-security.org/secworld.php?id=16972[/url]
"Quote" Are you prepared to manage a security incident? by Garry Sidaway - Global Director of Security Strategy, NTT Com Security - Posted on Friday, 6 June 2014. Summary/ t’s the year of the breach. Adobe Target and eBay fell victim to cyber-attacks and 2014 has already seen the Heartbleed bug impact the majority of organizations across the globe. With attacks getting more advanced and hackers getting smarter, businesses across all sectors are potential targets. It’s a case of when, not if, your company will be hit.t Help Net Security/ Full Read Here/ [url=http://www.net-security.org/article.php?id=2036]http://www.net-security.org/article.php?id=2036[/url]
Quote: Identify stolen credentials to improve security intelligence by Nir Polak - CEO of Exabeam - Posted on Friday, 6 June 2014. Summary/ Data is the heart of an organization, and IT security teams are its protectors. Businesses spend billions of dollars per year setting up fortresses to safeguard data from anyone who dare try to take it. The latest forecast from analyst firm Canalys has IT security spending increasing to $30.1 billion by 2017. Despite this investment, data breaches are on the rise Help Net Security/ Full Read Here/ [url=http://www.net-security.org/article.php?id=2035]http://www.net-security.org/article.php?id=2035[/url]
:D Hello [user=20798][/user] , I'm not sure if I ever welcomed you to the WSA Community but would like to now! Great to have you onboard and hope to see you posting away with all of us here! [b]EDIT.. Since I'm at it I'd like to welocme [user=24660][/user] , [user=24734][/user] , [user=24370][/user] ,and [user=24612][/user] ...the more the merrier I say![/b] Salute!!:D
Hi folks.....I’ve been using McAfee Total Protection for ten years and for many reasons I want to make a change so I just downloaded a trial version of WSA Security Complete and have a few questions. 1. Does WSA have a ‘lockdown’ feature similar to McAfee’s? 80% of our PC use is off-line. No need for an internet connection. With McAfee I click ‘firewall’, the page has options and I click ‘lockdown’, I use ‘stealth mode’ for browsing. I’ve looked around in WSA and do not see any options to do this. 2. Our PC’s and laptops are older running XP with 1 GB of memory so I use the “Quick Clean” feature in McAfee all the time. Does WSA have anything similar? 3. Using McAfee a full scan takes over an hour for about 150K files. The first WSA scan upon installation took 13 minutes. I ran a second that took 3 minutes or so for about 27K files. Wow. Why is there such a difference in the number of files scanned? I’m looking forward to using WSA and
Just wanted to say hello to all the members, I'm new to the forum. Wanted also to say a big thanks to Webroot Support team for quickly handling a issue I had they came through like champs!!!!! Its much appreciated.....:D
[H2]Thwarting the NSA as a startup business model[/H2]By [url=http://www.theregister.co.uk/Author/2823]Darren Pauli[/url], 5 Jun 2014 The beer steins were certainly being filled and drained when a bunch of Germans potentially got the upper hand over the NSA in a bid to stop the snooping. Good on them. [img]http://regmedia.co.uk/2014/06/05/protonetwin.jpg?x=419&y=278&crop=1[/img] [i]"Cheers and laughter could be heard late last night through the walls of a small Hamburg office as staff celebrated an unlikely win; their punt to build a NSA-subverting server that encrypts everything a small business might do in the office had made bank with a record-breaking $US1 million in crowdfunding sourced in 89 mins.[/i] [i]The [url=http://www.deutsche-startups.de/2013/12/20/protonet-startup-des-jahres/]German startup darling[/url] Protonet is no beginner at the crowd funding game. In 2012, it scored funding to build wh
[H2]Code obfuscation: a difficult problem apparently cracked[/H2]By [url=http://www.theregister.co.uk/Author/2242]Richard Chirgwin[/url], 5 Jun 2014 A very interesting area that does not get very much exposure but certainly has a lot of mileage in it in terms of what it can do to assist in protect systems. [img]http://regmedia.co.uk/2014/05/29/random_string.png?x=419&y=278&crop=1[/img] [i]"Better code obfuscation has attracted the attention of the prestigious Association of Computing Machinery, which has anointed an Indian-born developer working at IBM's TJ Watson Research Centre with an award for his work.[/i] [i]Protecting code, even as a binary, from being reverse-engineered is difficult: any solution that encrypts the code has to keep its functionality in place, and decrypting the code for execution has to be fast.[/i] [i] [/i][i]Sanjam Garg, an alumni of the Institute of Technology of Delhi, claims to have cracked th
v7 will install on Windows XP but for newer OS's I recommend Java v8 [url=http://www.oracle.com/technetwork/java/javase/downloads/jre8-downloads-2133155.html]http://www.oracle.com/technetwork/java/javase/downloads/jre8-downloads-2133155.html[/url] Download Java 7 Update 60: [url=http://www.oracle.com/technetwork/java/javase/downloads/jre7-downloads-1880261.html]http://www.oracle.com/technetwork/java/javase/downloads/jre7-downloads-1880261.html[/url] Daniel ;)
[b]E-mails surface looking for credit card, banking details[/b] [b] [/b] [b][img]https://d1qy7qyune0vt1.cloudfront.net/webroot-en/attachment/10838iE6043DF5EFF419C1.gif[/img] [/b] [b] [/b] [b] [/b] [b] [/b] Netflix users in Ireland are been warned about the threat of a major phishing scam. Identified by IT security company Smarttech.ie, the scam comes in the form of a fake message on the users screen asking the customer to click on a link and update their credit card details or have their cancelled. [url=http://www.techcentral.ie/phishing-scam-targets-netflix-subscribers/]Full Article[/url]
by paganinip on June 5th, 2014 Just when we think we have removed a threat like Cryptolocker for a little while another comes along, although not as bad it is still ransomware. In 2013 ransomware attacks rocketed by 500% and not just that, with Cryptolocker they turned just plain bad. [img]https://d1qy7qyune0vt1.cloudfront.net/webroot-en/attachment/10836iDA1326DB640E7C16.gif[/img]
[H2]Navajo was one of the few languages that Japanese code breakers failed to crack.[/H2]by [url=http://arstechnica.com/author/megan-geuss/]Megan Geuss[/url] - June 5 2014 [img]https://d1qy7qyune0vt1.cloudfront.net/webroot-en/attachment/10832i19A2F19B5765BAE2.gif[/img] [i]U.S. Marine Corps Cpl. Chester Nez recieves an American flag from Pfc. Tiffany Boyd, at Code Talker Hall, Marine Corps Base Quantico, Va., April 4, 2014. The flag was flown over the Marine Corps War Memorial, on the first day of spring in honor of Cpl. Nez's attendace at the Platoon 382 Hall rededication. Cpl. Nez is the last of the original 29 Navajo Code Talkers of World War II.[/i] On Wednesday Chester Nez, one of the 29 original Navajo code talkers who worked for the US during WWII sending secret messages in their native language, died in his home in Alburquerque, NM. Nez was 93 and his death was confirmed by Judy Avila, who helped him write his memoirs, [url=http://www.latimes.com/natio
Hackers have likely stolen data from at least some of the 16,000-plus South Koreans who have worked for America’s fighting forces, the U.S. military confirmed Thursday. [url=http://www.washingtontimes.com/news/2014/jun/5/us-says-hackers-stole-data-on-16k-south-koreans-wo/]Full article here.[/url] [img]https://d1qy7qyune0vt1.cloudfront.net/webroot-en/attachment/10834iC3752C8584B4B2B6.jpg[/img]
OpenSSL released seven new security fixes to prevent MITM attacks and other vulnerabilities. See the details [url=http://www.openssl.org/news/secadv_20140605.txt]here[/url].
We have a new Sr. Community Guide! Way to go CommanderShran!! :D
