Devil Mountain Software a product to avoid

NOT the real VirusTotal.com

Julio Canto (of VirusTotal fame) has noticed that somebody decided to cash in on the good name of the site with the following domain:

virus-total(dot)in

here

nmb

Microsoft has warned Windows users to be on their guard against a piece of rogue antivirus software passing itself off as Microsoft Security Essentials.

Security essentials 2010 is a piece of software Microsoft said installs a fake virus scanner on your machine and]monitors and blocks processes it doesn’t like.

http://www.theregister.co.uk/2010/02/26/microsoft_security_essentials_rogue/
http://blogs.technet.com/mmpc/archive/2010/02/24/if-it-calls-itself-security-essentials-2010-then-it-s-possibly-fake-innit.aspx

Microsoft investigating new IE browser vulnerability

The company warned that an attacker could host a maliciously crafted web page and run arbitrary code if they could convince a user to visit the web page and then get them to press the F1 key in response to a pop up dialog box.

http://blogs.zdnet.com/security/?p=5560

IE users, thou be warned.

Dont know whether this is posted any where, but according to me, its brand new :wink:

New IE security issue exposed in Windows XP

A new security issue in Internet Explorer has been exposed by a Polish technical research group.

http://www.pcpro.co.uk/news/security/355945/new-ie-security-issue-exposed-in-windows-xp

Please read the previous post. :wink:


Warning of a DOS vulnerability :

http://forum.avast.com/index.php?topic=56422.msg476097#msg476097


Spam disguised as spam notification

In their constant battle against anti-spam filters, spammers have recently started to camouflage their messages as spam quarantine notifications

http://www.net-security.org/secworld.php?id=8947

nmb

That is hardly a new method, they have been doing this and similar for ages, usually disguised as undeliverable email. The user wants to know what and why and opens stupidly it to find out.

I can’t believe this is any real benefit as using ant means of deception should turn the recipient off rather than encourage them to read it. I guess there is more than one born every minute.

Hi malware fighters,

Recent zero-days in the framework of the recent zero day initiative (because software vendors and developers do not take the reported leaks not seriously enough): http://www.zerodayinitiative.com/advisories/upcoming/

So keep an eye on this list,

polonus

Hi malware fighters,

Using the monoculture Google search-engine becomes more and more dangerous, because the potential of the Google market-share attracts cyber-criminals (malicious search-results, Fake-av etc. etc.) according to F-Secure’s Sean Sullivan. Bing has far less potential malicious search results.
Use Fx with No-Script to be secure, and use another search-engine (Ixquick for instance),
Link: http://www.f-secure.com/weblog/

polonus

Spain busts global “botnet” masterminds
http://uk.reuters.com/article/idUKTRE6214ST20100303?pageNumber=1&virtualBrandChannel=11700

3 arrested with takedown of huge ‘botnet’ infecting millions of PCs
http://www.mercurynews.com/business/ci_14498591?source=rss&nclick_check=1

very good news :wink:

Yes :slight_smile: That easy huh? Incredible

That is the same as saying don’t use Windows, use Linux because it’s safer.
The actual truth is that Google Search is used far more widely than Bing and therefor is the ideal target for attacks.
Google search itself certainly isn’t any less safe than Bing or any other search engine.

I will exceptionally agree with Bob, sticking to Google search engine here. Why? it’s the best search engine - and by far - and it’s rarely (?) mentioned, because it’s too obvious ;D As to security, associated with Firefox, you get security alerts for bad sites (from Google).

Cant help but feel that google is just carrying too much now. And what they carry has become too diverse. An enormous pile of garbage in many ways, but saved always by the standout brilliance of the search box (okay and the engine that powers it). For how much longer can we expect google search to bear the haphazard weight of the sprawling behemoth? Sergey is often not happy, Schmidt is withdrawing from other responsibilities so he can attend better to the flagship, and where is the other guy got to nowdays? I’m kidding really, but just cos to be too real would be to look at the scale of the damage could arise if the search engine became compromised. Even just a little bit. And regardless of what anyone says, the team has fallen off the tracks just that bit. I think so anyway. But has to be said, nothing is unsurmountable to the genius that is the google team. I hope that still stands.

Confessions of a Windows 7 pirate

Really good read :

In the interest of research, I’ve been digging into message boards and forums run by unabashed Windows enthusiasts who are intent on breaking Microsoft’s activation technology. I’ve had these forums bookmarked for years and stop in every once in a while just to see what’s new. This time I decided to drop by and actually try some of tools and utilities to see if I could become a pirate, too.

here : http://blogs.zdnet.com/Bott/?p=1817

nmb

How FBI, police busted massive botnet
http://www.theregister.co.uk/2010/03/03/mariposa_botnet_bust_analysis/

Mariposa botnet
http://pandalabs.pandasecurity.com/mariposa-botnet/

Here is moore

Monster botnet held 800,000 people’s details
Fourth zombie admin could be in South America
http://www.theregister.co.uk/2010/03/04/mariposa_police_hunt_more_botherders/

New exploit technique nullifies major Windows defense
Google engineer posts sample code to show how to bypass DEP in Windows
http://www.computerworld.com/s/article/9165378/New_exploit_technique_nullifies_major_Windows_defense?taxonomyId=17&pageNumber=1