It was suggested that we needed these all in one thread. So, I have created this thread for that use and hope that all will use this thread to post the security warnings on this forum.
Here is a link to the posting that prompted this thread.
If everyone placed the security warnings in here it wouldn’t need to be sticky as the activity would keep it high, as is seen with the >> Updates << topic.
I have an aversion for stickies, almost as severe as for toolbars ;D
Sticky isn’t needed since this will rise to the top each time an entry is posted which is the same criteria with many other frequent Threads.
( missed Davids post. )
A lot of malware lurks in google searches, some even have the brass neck to pay for search placement on specific search words/terms or have sponsored links. Google really need to be more proactive in rooting out the possibly malicious/fraudulent sponsored links or search placement.
+1.
I use a hosts file, and SpywareBlaster. (Yeah, belts and braces, I know…).
If I’m careless enough to click on any of those Google sponsored results that rise to the top like a pale yellow scum, about 9 times out of 10 my browser can not connect to the site.
Fine by me.
Well there is always the CustomizeGoogle add-on which I use and I never see sponsored ads anyway, my comment was one of caution for others considering the sponsored links.
yeah I got CustomizeGoogle as well with ads blocked wherever it’s possible. I never mention it because it’s set once for all, and I forget about it, while abp allows to block more than what’s on the EasyLists, on demand. It’s just that ABP has more visibility during the browsing. Sorry for the off topic
SSL-servers targeted by botherders
To-day by polonus
Comments and reactions:
Not only Windows desktops are targeted by botnet herders that want to enlarge their botnets, also more and more they will target FTP, SSL and webservers to be taken over. The hijacked or hacked servers will then often function as malcode database or are being used to forward spam. According to Finnish av vendor F-Secure FTP servers are the favorite hack target for cybercriminals. “We also saw that where SSL-servers were being abused. Sites with a valid SSL-certificate become hacked and then abused for drive-by downloads”, according to reasearcher Mikko Hypponen.
Through running a drive-by download via a HTTPS-connection some proxy and gateway scanners cannot scan for malware. “Then it is easier to break into servers”, says Hypponen. Then server botnets are being formed out of these hacked servers, functioning as a form of sub-botnets. “We now see server botnets. An interesting feature is that these interconnected server botnet is herded by one individual”, says Shadowserver Foundation’s DiMino. Servers are to facilitate botnet extension and expansion.