Skip to main content

Welcome

News, Announcements, Tech Discussions

44619 Topics
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
New iOS flaw allows malicious apps to record touch screen presses

Security researchers identified a vulnerability in iOS that allows apps to record all touch screen and button presses while running in the background on non-jailbroken devices. Since the touch screen is the primary input interface on an iOS device, this attack is the equivalent of keylogging. An attacker could use the captured touch data -- X and Y axes coordinates -- to determine what characters victims inputted using the on-screen keyboard. The vulnerability has been confirmed in iOS versions 7.0.6, 7.0.5, 7.0.4 and 6.1.x by researchers from security firm FireEye who identified the issue and reported it to Apple. The researchers also claim they found ways to bypass Apple's app review process which could allow uploading an app with such touch screen monitoring capabilities in the App Store.   "We have created a proof-of-concept 'monitoring' app on non-jailbroken iOS 7.0.x devices," the FireEye researchers said Monday in a [url=http://www.fireeye.com/blog/technical/2014/02/backg

30
Jasper_The_Rasper
Moderator
10 years ago
P
Pelican1623
posted in Community 101
Very frustrated renewed user

Don't like to complain but the Webroot tech support guy that I just spoke with suggested I post this complaint. Last year I bought the Webroot Secure Anywhere software from Best Buy.  I think version 8.  So this year I was prompted to renew my subscription.  I get an email after I had renewed thru Webroot and not Best Buy Assurance (which I didn't know I should have renewed thru Best Buy),  that I needed to uninstall the older version and reinstall.  I just spent WAY too much time trying to find out if I actually had to do this, WHICH I DID NOT, because this years version is the same as last years. Couldn't you add this question to the list of frequently asked questions so that someone else does not have to go thru what I just did. And by the way, not everyone is tech savvy.   I thought I should get the back up cd and was told by Webroot tech support that I didn't need to do this.  So I bought the back up cd for $10 and I didn't even need it.  So

201
RetiredTripleHelix
Gold VIP
10 years ago
Petrovic
Gold VIP
PetrovicGold VIP
posted in Security Industry News
First tor-based android malware spotted in the wild

We use our Smartphone devices to do almost everything, from Internet Banking to Sharing private files and at the same pace, the mobile malware sector is also growing. The number of variants of malicious software aimed at mobile devices has reportedly risen about 185% in less than a year. Security researchers have observed a growth in the numbers of computer malware families starting to use TOR-based communications, but recently the Security Researchers at anti-virus firm Kaspersky Lab have spotted the world's first Tor-Based Malware for Android Operating system. The Android Malware dubbed as 'Backdoor.AndroidOS.Torec.a', using Tor hidden service protocol for stealth communication with Command-and-Control servers. Researchers detected that the Trojan is running from .Onion Tor domain and working on the functionality of an open source Tor client for Android mobile devices, called 'Orbot', thus eliminating the threat of the botnet being detected and blocked by law enforcement authorities,

6720
Petrovic
Gold VIP
10 years ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Cybercriminals Use 'Pony' Botnet to Steal Bitcoins, Digital Currencies

Cybercriminals have infected hundreds of thousands of computers with a virus called "Pony" to steal bitcoins and other digital currencies, in the most ambitious cyberattack on virtual money uncovered so far, according to security firm Trustwave. Trustwave said on Monday that it has found evidence that the operators of a cybercrime ring known as the Pony botnet have stolen some 85 virtual "wallets" that contained bitcoins and other types of digital currencies. The firm said it did not know how much digital currency was contained in the wallets. "It is the first time we saw such a widespread presence of this type of malware. It was on hundreds of thousands of machines," said Ziv Mador, security research director with Chicago-based Trustwave. Trustwave said it believes the crime ring is still operating, though it does not know who is running the group. The company said it has disrupted the servers that were controlling machines infected with Pony, but expects the group to launch more a

6820
Jasper_The_Rasper
Moderator
10 years ago
F
frankly0515
posted in Security Industry News
FBI locked computer payment scam-am I protected?

(empty)

9062
RetiredTripleHelix
Gold VIP
10 years ago
nic
nicRetired Webrooter
posted in News & Announcements
Announcing BrightCloud Threat Intelligence Services

[img]https://d1qy7qyune0vt1.cloudfront.net/webroot-en/attachment/8257iEDEB06620B96F27D.png[/img]We're pretty excited about this one.  Check out the press release [url=http://www.webroot.com/us/en/company/press-room/releases/webroot-announces-brightcloud-threat-intelligence-services-and-endpoint-breach-protection]here[/url].  And here's the website where you can[url=http://brightcloud.com/] learn more[/url].  Look out Enterprise market, we're coming to help!   "Brightcloud® Security Services include Web Reputation, Web Classification, IP Reputation, File Reputation, Real-Time Anti-Phishing, Mobile App Reputation, Mobile Security SDK, and the SecureWeb™ Browser SDK. BrightCloud Security Services are delivered through Webroot’s OEM partners – including many leading network security providers – via a single API, enabling them to protect their customers at the moment of truth when advanced cyber-attacks appear both inside and outside of their networks."

191
RetiredTripleHelix
Gold VIP
10 years ago
Petrovic
Gold VIP
PetrovicGold VIP
posted in Security Industry News
RSAC: Your Bank May Be Secure, But Its Third-Party Vendors Aren't

With its thick walls, massive vaults, and in-house security detail, an old-fashioned bank building is the very picture of solidity. Online banks and financial institutions don't share this level of physical security. In fact, through connections with third-party partners the edges of such an institution can be tenuous indeed. At the RSA Conference in San Francisco, Lookingglasss Cyber Solutions released a study that reveals a shocking lack of security among those third-party vendors. This kind of problem has been in the news recently. The massive Black Friday data breach at Target, originally thought to be an "inside job," turned out to have a third-party origin. Specifically, the attack came through Target's provider of HVAC services. The company's owner described it as "a sophisticated cyber attack operation," but the data from Lookingglass suggests that sophistication isn't always needed. [url=http://securitywatch.pcmag.com/business-financial/320889-rsac-your-bank-may-be-secure-but-

6300
Petrovic
Gold VIP
10 years ago
Petrovic
Gold VIP
PetrovicGold VIP
posted in Security Industry News
Apple restores certificate validation checks mysteriously missed

Apple released a security update to iOS that restores some certificate-validation checks that had apparently been missing for an unspecified amount of time. Last week Apple released a security update to iOS (iOS 7.06) to fix a flaw for certificate-validation checks that could be abused by attackers to conduct a man-in-the-middle attack within the victim’s network to capture or modify data even if protected by SSL/TLS. In reality the checks were present in past versions, but they were not included in the recent version of the operating system for an unspecified amount of time. [url=http://securityaffairs.co/wordpress/22527/security/apple-ios_7_06_release-fix.html]Full Article[/url]

5580
Petrovic
Gold VIP
10 years ago
nic
nicRetired Webrooter
posted in Tech Talk
Harold Ramis passed away today

Sad day - thanks for all the laughs and you'll be missed! [url=http://www.chicagotribune.com/entertainment/chi-harold-ramis-dead-20140224,0,2259309.story]http://www.chicagotribune.com/entertainment/chi-harold-ramis-dead-20140224,0,2259309.story[/url]

121
Rakanisheu Retired
10 years ago
nic
nicRetired Webrooter
posted in Tech Talk
Netflix backed down

and agreed to pay Comcast direclty for the bandwidth to get rid of streaming problems.  On the plus side now your Netflix will be fast again, but on the downside it sets a bad precedent for net neutrality.  [url=http://www.latimes.com/entertainment/envelope/cotown/la-fi-ct-netflix-comcast-20140224,0,1476262.story#axzz2uG4pv9XG]Read more here[/url].

1430
nic
10 years ago
M
Fresh Face
MC1-1xpertFresh Face
posted in Community 101
Howdy All - Im a Newbie here so bare with me

Greetings to ya All...  I hope this finds everyone doing well, being happy and doing good things. 

5557
nic
10 years ago
Petrovic
Gold VIP
PetrovicGold VIP
posted in Security Industry News
Hackers deface ethical hacking website, with image of Edward Snowden’s passport

The EC-Council, which offers training for the Certified Ethical Hacker (CEH) program, has had its website defaced by a hacker who claims to have access to thousands of passports belonging to law enforcement and military officials. And, as if to prove their point, the hacker responsible for the attack has replaced the home page of the EC-Council’s website ([url=http://www.eccouncil.org]http://www.eccouncil.org)[/url] with an image of a passport belonging to famous NSA whistleblower Edward Snowden. [url=http://grahamcluley.com/2014/02/ethical-hacking-website-edward-snowden-passport/]Full Article[/url]

5820
Petrovic
Gold VIP
10 years ago
Petrovic
Gold VIP
PetrovicGold VIP
posted in Security Industry News
YouTube Ads spreading Banking Malware, via Java Exploit

Security researchers at Bromium have discovered that hackers were spreading malware onto computers while unsuspecting users were watching YouTube videos. The drive-by-download attack was distributed via adverts shown on the YouTube website, and used an exploit kit to infect Windows PCs with a version of the Caphaw banking Trojan. According to a [url=http://labs.bromium.com/2014/02/21/the-wild-wild-web-youtube-ads-serving-malware/]blog post[/url][url=http://labs.bromium.com/2014/02/21/the-wild-wild-web-youtube-ads-serving-malware/] [/url]by Bromium, the attack relied upon the exploitation of a Java vulnerability (CVE-2013-2460, patched by Oracle in mid-2013). [url=http://grahamcluley.com/2014/02/youtube-malware/]Full Article[/url]

6120
Petrovic
Gold VIP
10 years ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Asus patches security hole in router firmware, password now needed by default

Asus has released updated firmware for a number of its router models following widespread reports of a security vulnerability that allowed remote attackers to access files on any hard drive plugged into the routers. A feature designed to allow users to access their own files from anywhere in the world instead allowed anyone to access them because the company decided not to prompt users to create passwords. The AiCloud feature allows users to connect to their home PCs or external hard drives via a smartphone app or any other PC. Asus [url=http://gadgets.ndtv.com/internet/news/asus-router-flaw-leaves-users-entire-hard-drives-open-to-anyone-on-the-internet-470999]did not require users to set passwords[/url] at all, in an effort to make remote file sharing easy for end users to set up. The routers also broadcast their model numbers by default, making it even easier for malicious attackers to target them. Now, Asus has published a [url=http://rog.asus.com/forum/showthread.php?44076-ASUS-R

11540
Jasper_The_Rasper
Moderator
10 years ago
Petrovic
Gold VIP
PetrovicGold VIP
posted in Security Industry News
Why you need to stop using WhatsApp?

If you haven’t heard by now, Facebook just made its biggest move ever, buying the messaging service WhatsApp in a deal worth some $19 billion. That’s 19 times what Facebook paid for Instagram two years ago. The WhatsApp Service run by the team of just 32 engineers, handles more than 50 Billion messages daily, and approx 385 million active users. WhatsApp acquisition has also brought out fresh criticism over security for the billions of messages delivered on the platform. Security Researcher at Praetorian Labs identified several SSL-related security issues in WhatsApp application using Project Neptune, a mobile application security testing platform. "WhatsApp communication between your phone and our server is fully encrypted. We do not store your chat history on our servers. Once delivered successfully to your phone, chat messages are removed from our system." Company said in a blog post. But researchers found that WhatsApp is vulnerable to Man-in-theMiddle attack because the app has no

5361
Rakanisheu Retired
10 years ago
Petrovic
Gold VIP
PetrovicGold VIP
posted in Security Industry News
South Korea is developing a cyber weapon to hit North Korean nuclear

The South Korea government is working to the development of a cyber weapon to hit North Korean nuclear facilities. It’s Information warfare. The tension between North Korea and South Korea is always high, both governments are spending a great effort to improve their cyber capabilities and to try to silently attack the neighbors. North Korea has the highest percentage of military personnel in relation to population, it has approximately 40 enlisted soldiers per 1000 people with a considerable impact on the budge of the country. Last year a defector has declared that North Korea has increased its cyber warfare unit to staff 3,000 people and it is massive training its young prodigies to become professional hackers. [url=http://securityaffairs.co/wordpress/22514/cyber-warfare-2/south-korea-cyber-weapon.html]Full Article[/url]

3400
Petrovic
Gold VIP
10 years ago
Petrovic
Gold VIP
PetrovicGold VIP
posted in Security Industry News
iBanking Mobile Bot Source Code available for sale in the underground

iBanking is a new mobile banking Trojan available for sale in the underground for $5,000 according the RSA’s FraudAction Group. The source code for iBanking banking trojan has been leaked online through an underground forum, this kind of news reports a serious threat from the cybercrime ecosystem. Like happened for other trojan, including Zeus and Carberp, the availability on line for their source code is a driving force for many criminal activities, many players begin to customize their own versions or to offer development services to other criminals in the model that we have identified as malware-as-a-service. [url=http://securityaffairs.co/wordpress/22486/cyber-crime/ibanking-source-code-leaked.html]Full Article[/url]  

10
Petrovic
Gold VIP
10 years ago
Baldrick
Gold VIP
BaldrickGold VIP
posted in Security Industry News
Introducing HackBusters

[H2][url=http://techtalk.pcpitstop.com/2014/02/19/introducing-hackbusters/]Introducing HackBusters[/url][/H2]February 19, 2014 by [url=http://techtalk.pcpitstop.com/author/knowbe4-com/]knowbe4.com[/url] [i]in [url=http://techtalk.pcpitstop.com/knowbe4-com/]knowbe4.com[/url][/i][i] [/i]Introducing HackBusters[i]Our good friends at KnowBe4.com have introduced a top notch security related news site: HackBusters.com.–PC Pitstop[/i] [i] [/i] By Stu Sjouwerman, for KnowBe4.com Security Awareness Training   Feb 14, 2014 – You miss important security news because you aren’t subscribed to the right sources, or your relevant security news is snowed under simply because of the incredible volume. So KnowBe4 brings you relevant, trending and most popular IT security content with [url=http://www.hackbusters.com/]HackBusters[/url], a website released today that delivers human and algorithm-curated articles specifically for IT Security professionals.   [url=http

6432
Baldrick
Gold VIP
10 years ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Visitors to Sochi Olympics should expect to be hacked (video)

There's little question at this point that the logistics in Sochi, from hotel rooms to public infrastructure, [url=http://sports.yahoo.com/news/no-light-bulbs-no-shower-202446023.html]are a mess[/url], but one of the greatest threats to visitors is one they can't even see. According to NBC, it's a near-guarantee that connected devices are being watched by hackers within Russia, who use malware downloaded on smartphones and laptops to steal personal information. It can be assumed that visiting dignitaries, athletes and journalists face a particular risk when it comes to unauthorized access. NBC's Richard Engel came to Russia with brand-new gear littered with fake accounts, testing the waters while limiting exposure to his legitimate data and contacts. The "honeypot" [url=http://www.nbcnews.com/watch/nbc-news-web-extra/honeypot-tests-likelihood-of-hackings-in-russia-137595971642]was a success[/url], with Engel's Galaxy S 4, Mac and Windows laptop all compromised within a day of arrival.

159
Dermot7
Gold VIP
10 years ago
LoopyLinda
Community Leader
LoopyLindaCommunity Leader
asked in Tech Talk
UTube Website Security Scan?

Hi, I'm wondering if the Webroot Antivirus scans all of the links/sites that are sometimes listed under UTube videos to check if they're OK to use.  I've been searching for a movie but have come across lots of links to other sites that stream the full film on-line, are these sites also checked by Webroot?

13958
Baldrick
Gold VIP
10 years ago
Petrovic
Gold VIP
PetrovicGold VIP
posted in Security Industry News
Banking trojan hit a large number of Islamic Mobile Banking Customers

Security researchers at InterCrawler discovered a Banking trojan which infected a large number of devices the Middle East belonging to Islamic Banks. IntelCrawler cyber intelligence firm discovered a large fraud campaign against major Islamic banking institutions. The attackers have used a sizable mobile botnet, more than 27 000 intercepted SMS-messages were detected between April 2013 and Feb 2014, which puts many smart phone banking customers at risk. [url=http://securityaffairs.co/wordpress/22465/cyber-crime/banking-trojan-hit-islamic-mobile.html]Full Article[/url]

10
Petrovic
Gold VIP
10 years ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Crypto weaknesses in WhatsApp “the kind of stuff the NSA would love”

WhatsApp, the mobile messaging app developer that [url=http://arstechnica.com/business/2014/02/facebook-buys-whatsapp-for-16-billion/]Facebook is acquiring for $19 billion[/url], may be an attractive addition to the social network, thanks to WhatsApp's 450 million active users and en vogue status. It may also be attractive to government spies and criminal hackers, thanks to several weaknesses in the encryption WhatsApp uses to protect messages from eavesdropping, researchers say. Among the most serious problems with WhatsApp's implementation of secure sockets layer (SSL) encryption is its support of version 2 of the protocol, according to a [url=http://www.praetorian.com/blog/whats-up-with-whatsapps-security-facebook-ssl-vulnerabilities]blog post published Thursday[/url] by a researcher from security consultancy Praetorian. That version is susceptible to several well-known attacks that allow people monitoring a connection between the two end points to decipher and in some cases manipu

9971
BlazeTen
Popular Voice
10 years ago
Baldrick
Gold VIP
BaldrickGold VIP
asked in Security Industry News
Beware Greeks bearing lists: Bank-raiding nasty Zeus smuggles attack orders in JPEGs

[H2]Trojan stashes config files in photos in mythology mash-up[/H2]By [url=http://www.theregister.co.uk/Author/2395]Iain Thomson[/url], 20th February 2014 A new variant of the bank-account-raiding Zeus malware apparently uses the ancient technique of steganography to update its list of websites to subvert. Dubbed ZeusVM, the crafty strain is just like its cousins in that it intercepts activity in a victim's web browser, siphons off passwords and other sensitive personal information to crooks, and can meddle with financial transactions to direct cash to crims' pockets.  But French security researcher [url=https://twitter.com/xylit0l]Xylitol[/url], who spotted the ZeusVM variant, was intrigued to discover a.jpg photo of a sunrise was being downloaded by the software nasty and hidden among the malware's files.   ZeusVM stays dormant much of the time to avoid detection, but when the user visits a website that's on the malware's list of targets – such as a part

23
BlazeTen
Popular Voice
10 years ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Repeated attacks hijack huge chunks of Internet traffic, researchers warn

Huge chunks of Internet traffic belonging to financial institutions, government agencies, and network service providers have repeatedly been diverted to distant locations under unexplained circumstances that are stoking suspicions the traffic may be surreptitiously monitored or modified before being passed along to its final destination. Researchers from network intelligence firm Renesys made that sobering assessment in a blog post published Tuesday. Since February, they have observed 38 distinct events in which large blocks of traffic have been improperly redirected to routers at Belarusian or Icelandic service providers. The hacks, which exploit implicit trust placed in the border gateway protocol used to exchange data between large service providers, affected "major financial institutions, governments, and network service providers" in the US, South Korea, Germany, the Czech Republic, Lithuania, Libya, and Iran. The ease of altering or deleting authorized BGP routes, or of creatin

20232
RetiredTripleHelix
Gold VIP
10 years ago
Baldrick
Gold VIP
BaldrickGold VIP
posted in Security Industry News
Aargh! Bamboozled by security licensing - what works for my family?

[H2]Guide this reader through the vendor maze[/H2]By [url=http://www.theregister.co.uk/Author/2473]Drew Cullen[/url], 19th February 2014 [b]Readers' corner[/b] And so to [url=http://forums.theregister.co.uk/][i]El Reg Forums[/i][/url] and Edwin, a commentard since 2007, who is having a bit of trouble in choosing IT security software for his family. He writes:   I'm rapidly losing my mind in the minefield that is security software, particularly when it comes to licensing many devices... The internet has become useless for this sort of research, I find: 90% of search result hits are resellers trying to sell me software rather than a comprehensive comparative review.  Let me sketch it out:   I'm looking for a software solution to manage security on the family digital devices (me, wife, kids of 9 and 12). Between the four of us, we have three Windows 7 PCs, three Android tablets and four Lumia phones. The software in question must: [quote][list]

20
Baldrick
Gold VIP
10 years ago

Badges

Show all badges

Join the Conversation

Terms & Conditions