Tag: worm

Gmail flaw shows value of strong passwords

August 06, 2009 by Jason

The disclosure of a back door allowing bad guys to repeatedly guess Gmail passwords should remind us all to protect our accounts with long and strong character strings.

There’s a straightforward way to protect your online accounts  use signin phrases that are easy for you to remember but hard for others to guess.

The latest vulnerability affecting Gmail accounts was recently revealed by security researcher Vicente Aguilera DĂ­az in a posting on the Full Disclosure security list. (Aguilera previously revealed a Gmail flaw known as session-riding, which Google subsequently fixed, as reported by WS contributing editor Scott Spanbauer)

According to Aguilera’s new security alert, Google allows anyone with a Gmail account to guess another Gmail user’s password 100 times every two hours, or 1,200 times per day. No “captcha” keeps hacker bots from guessing passwords in this way. Worst of all: If a hacker controls, say, 100 Gmail accounts, 120,000 guesses can be made per day. Because Gmail accounts are free, many hackers control far more than 100 accounts, of course. Read More»

Vista SP1 and XP SP3 Vulnerability Hit by Malware

November 06, 2008 by Jason

Microsoft issued a warning related to the detection of new examples of malicious code in attacks attempting to exploit a vulnerability affecting various Windows client and server releases. In October, the Redmond giant put out an out-of-band security patch designed to plug a vulnerability residing in the Server Service on Windows systems. According to the company, a successful exploit of the security flaw would lead to remote code execution. The patch was released on October 23, 2008, and will render attacks useless.

“We have seen some new pieces of malware attempting to exploit this vulnerability this week. And while so far, none of these attacks are the broad, fast-moving, self-replicating attacks people usually think of when they hear the word ‘worm,’ they do underscore the importance of deploying this update if you haven’t already,” revealed Security Response Communications Lead, Christopher Budd.

Budd indicated that Microsoft was seeing consistent deployments of the MS08-067 patch, and urged customers that had failed to update so far to do so as soon as possible. At the same time, Microsoft provided a list of malware built to exploit the Server Service vulnerability, including: Read More»

Updates and Task Manager Disabled by New Windows XP Worm

February 03, 2008 by Jason

The Windows functions are always under attack because disabling a vital function of the operating system automatically means an open door for the hacker, who would be able to infiltrate into the computer and conduct his malicious activities. Today, a new worm has been spotted in the wild and, according to security company Trend Micro, it affects most flavors of the operating system produced by Microsoft, including Windows 98, ME, NT, 2000, XP and Server 2003.

But what’s worse is that WORM_SILLYFDC.CY has a high damage potential and a high distribution potential, two elements that underline the worm’s capability to reach your computer and harm the data stored on it. In case you’re curios about how can you get infected, the process is pretty simple: all you need to do is to visit an infected page. However, the worm may also be dropped by another piece of malware, Trend Micro explains. Read More»

Is That a Worm in Your Windows Live Messenger ?

January 29, 2008 by Jason

Windows Live Messenger accounts for the largest community for any IM client worldwide. At the end of 2007, in November, as Microsoft was unveiling Windows Live 2.0, the next generation of its suite of software and services in the cloud, the company estimated that Windows Live Messenger had an install base of approximately 300 million users. In this context, it failed to come as a surprise the fact that Windows Live messenger was the most attacked instant messaging platform in 2007, according to statistics provided by FaceTime Communications. And with such a high profile, it is bound that the trend will continue into 2008. Read More»

Windows XP Infections Coming by Email

December 28, 2007 by Jason

Spammers are always willing to do anything it’s possible to create huge lists of valid email addresses in order to be able to launch new attacks. They are even selling huge lists of emails to other spammers who intend to send unsolicited messages to all the contacts. The latest trend seems to be infecting people’s computers with a worm and steal their email addresses. WORM_ZHELATI.AIR was discovered by security vendor Trend Micro, which wrote that it affected most Windows flavors including 98, ME, NT, 2000, XP and Server 2003. Although it has a low damage potential and a low distribution potential, the worm can reach your computer by email or straight from a malicious website visited by the user. Read More»

Windows Media Player Infection Sends Users to QuickTime

December 23, 2007 by Jason

WORM_VB.ZAA is a new kind of worm that attempts to infect the Windows computers, being executed once the user starts Windows Media Player. Security company Trend Micro wrote that the worm affected most versions of the operating system powered by Microsoft, including Windows 98, ME, NT, 2000, XP and Server 2003. But, what’s more important is that it has a high distribution potential bundled with a medium damage potential, so extra-caution is recommended, if you want to keep your computer protected. Now, let’s see more details about the infection. Read More»

Different types of Spyware

February 01, 2007 by Jason

ParasiteWare
ParasiteWare is the term for any Adware that by default overwrites certain affiliate tracking links. These tracking links are used by webmasters to sell products and to help fund websites. The controversy is centered on companies like WhenU, eBates, and Top Moxie, a popular maker of Adware applications. These companies have release their software to assist users in getting credit for rebates, cash back shopping, or contributions to funds. To the end user ParasiteWare represents little in the way of a security threat.

Adware
Adware, also known as an Adbot, can do a number of things from profile your online surfing and spending habits to popping up annoying ad windows as you surf. In some cases Adware has been bundled (i.e. peer-to-peer file swapping products) with other software without the user’s knowledge or slipped in the fine print of a EULA (End User License Agreement). Not all Adware is bad, but often users are annoyed by adware’s intrusive behavior. Keep in mind that by removing Adware sometimes the program it came bundled with for free may stop functioning. Some Adware, dubbed a “BackDoor Santa” may not perform any activity other then profile a user’s surfing activity for study.
Read More»