Spyware news: All about your privacy and IT security

DNSChanger Trojan, Impact and Solutions

Tue, 21 Feb 2012 17:28:24 +0200

What is DNSChanger?
It’s a trojan which changes the infected systems DNS servers in order to redirect you to fraudulent and illegal sites, which possibly has even more viruses in it. It is made to change ‘NameServer’ Registry Key value with an IP address, which is encrypted in the body of the trojan. DNSChanger firstly appeared in 2007, and since then, it infected about a half million U.S. computers, and stole around $14 million funds. However, FBI has taken out a network of rogue DNS servers and taken steps in disabling it. They’re also trying to notify victims about the damage done by DNSChanger.

Key logger from a fake Facebook email

Fri, 17 Feb 2012 16:03:58 +0200

Recently a lot of users were spammed with a fake Facebook notification about a change in users' account information. - Warns BarracudaLabs researchers.

This message may seem real, because the email address shows that it's from Facebook, but it's a spoofed address. However, the message itself shows only an image that the recipient needs to install Silverlight. This image is linked to a Malaysian IP address with a hosted Windows PIF file (executable file format). If you will install it to your PC you will activate a key logger Jorik Trojan, which will record every keystroke to a file in your disk, which will eventually be sent to C&C server, where cyber criminals will analyze it's data and probably will steal your private information.

This scheme just shows how users can be fooled by links to additional software, which is needed to view content. Usual windows warning about potentially harmful software is in place, but unfortunately user ignores it, because he thinks that he's installing just a plug-in for his browser.

Warning: Whitney Houston autopsy video links on Facebook aren’t what they seem

Thu, 16 Feb 2012 13:16:03 +0200

This weekend was full of the sad news about the death of Whitney Houston. Of course, scammers have also used this fact expecting to cash out some money. Be aware that all Facebook messages, offering to watch shocking secret video, explaining her death are fake. Though it pretends to be on YouTube, message additionally claims the video cannot be played until you get the latest Adobe Flash version. However, that's just another trick to let some trojans inside victim's computer.

Remove Security Scanner 2012

Wed, 15 Feb 2012 15:51:33 +0200

Don't fall for Security Scanner 2012 because it's a dangerous malware that pretends to be legitimate. In order to trick its victims into purchasing its license, this virus claims that there are numerous viruses detected on the victims PC and additionally offers its removal services. However, you should simply ignore its alerts and remove Security Scanner 2012 without any delay. Eliminating this threat may be complicated because it blocks legitimate security applications found, so follow special information on how to uninstall Security Scanner 2012 successfully.

Welcome to TechNewsWorld

Tue, 14 Feb 2012 18:24:07 +0200

According to a few recent exploits, Google Wallet funds are almost the same easy to steal as to steal somebody's actual wallet. Security researchers have discovered that Google Wallet could potentially expose PIN for computer hackers. As soon as you have somebody's PIN, you are able to access anything that Google Wallet app is able to do. Security Experts recommend taking proper steps to ensure security of their phones.

Security Scanner - how to remove

Mon, 13 Feb 2012 19:01:12 +0200

SecurityScanner is fresh version of WinWebSec rogues, replacing Security Shield. If you download it from fake scanner websites (the ones that claim your PC is heavily infected) it will start blocking your browsing and detecting various threats on PC. These threats are detected in files without any location provided and non-existant. You should remove Security Scanner rogue, as it will spam you with alerts and popups and stop you from using your PC.

Infected BlackHat SEO pages return « Bust Malware

Sat, 11 Feb 2012 19:34:49 +0200

Sophos researchers discovered large amount of websites, mostly wordpress sites that are infected with Blackhat SEO kits. The infected pages rank in search results for various popular terms, related to news and site content. After user visits the search results, they are redirected to pages promoting rogue antiviruses, for example notorious Security Shield. This might lead to PC infection.

Google Wallet Security Vulnerability Demonstrated

Thu, 09 Feb 2012 21:41:43 +0200

Google walet is google payment system using your mobile phones. However, several vulnerabilities were discovered. There was one that affected rooted devices. This vulnerability works with Google Walet on unrooted devices as well.This is quite serious, as it affects bigger user base.

More bogus ad-serving Android apps evade Google's Bouncer

Thu, 09 Feb 2012 14:43:48 +0200

Ad-pushing scammers keep on targeting Android Market. This time they are spreading bogus copies of popular iPhone games supposedly developed by developers of Angry Birds. They are using a well known and trusted name as this ensures that more people will be attempted to get it. The scammers have registered their company Rovio Mobile Ltd very easily. They changed a la lowercase letter “L” with a capital letter “I” so in order to see that Rovio Mobile Ltd and Rovio MobiIe Ltd differs you have to be really careful. Once you try to download some application from them the link will lead you to a website advertising diet pills.

NAC Network Access Control Intrusion Defense Intrusion Prevention BYOD Bring Your Own Device CVE Malware

Thu, 09 Feb 2012 08:54:56 +0200

Firewalls protect networks from the outside-in. However, over 80% of successful cybercrime and hacker attacks happen behind firewalls, on the inside of networks. NACwalls protects networks from the inside-out. Designed for SMBs to protect their internal, headquarters, branch and remote office networks with 25 network devices up to 100,000 included wired and wireless, NACwalls provide enterprise-class functions that are easy to deploy, cost effective and help SMBs secure their internal networks at a fraction of the cost of competition.

AV Security Essentials - how to remove and fix your PC

Wed, 08 Feb 2012 11:34:50 +0200

Guide on how to get rid of AV Security Essentials rogue parasite, which blocks majority of Antivirus programs. The blocking is done in registry, and some programs can still launch and scan your PC. The parasite itself is not too hard to remove, but fixing registry is more difficult automatically. You should not pay for AV Security Essentials, but get a decent Anti-Malware program instead.

Gold Coast Computer Repair

Tue, 07 Feb 2012 19:27:31 +0200

We are providing computer repairing service in Gold Coast.Techability provides mobile Gold Coast computer repair services same day. It provides computer, pc , Apple Mac & Laptop repairing services in your own home and small office with the help of computer technology experts with guarantee.

Smart Protection 2012 - how to remove

Tue, 07 Feb 2012 15:36:40 +0200

Smart Protection 2012 is a rogue antivirus program that uses misleading strategy in order to prove computer users that it's a legitimate program and make them pay for it. The program uses a fake scanner and pretends looking for infections. It also generates numerous pop up notifications which contain falsified information as well. Please remove Smart Protection 2012 from your system as soon as possible with a reputable antispyware program.

Remove Internet Defender, removal instructions

Tue, 07 Feb 2012 13:39:04 +0200

Internet Defender is a rogue anti-spyware that works on making users believe that they have numerous viruses, such as trojans, adware, malware and others, on their computers. In order to do that, this scamware displays fake alerts and system scanners showing faked information about nonexistent problems. Note that all these vruses are fabricated for the one and only reason – to push users into purchasing the licensed version of Internet Defender. However, licensed Internet Defender version is useless and should be removed from the system immediately after detection.

Simple steps to ensure online safety

Mon, 06 Feb 2012 17:02:23 +0200

According to the resent research by GFI Software, one in three parents do not know if Internet safety tips are being taught to their children, while nearly 25% of teens confirm they are not taught, or are not aware of being taught, about Internet safety at school. Here are some simple steps that will help you to ensure your kids will stay safe and secure online.

Security Monitor 2012 virus | Spyware Rid

Sun, 05 Feb 2012 20:17:58 +0200

Security Monitor 2012 belongs to WinWebSec fake antivirus family and is particularly nasty to remove. This malware blocks nearly everything, but there are tricks how to get rid of it. It is very important to have a decent antivirus program to avoid such infections. Security Monitor 2012 is much easier to avoid than to remove.

DNS Changer infrastructure shutdown is a good thing

Sun, 05 Feb 2012 19:23:50 +0200

Sophos blog authors argue, that DNSChanger servers, that are controlled by FBI, should be shut down. This will result at loss of internet function for milions of victims, however it will make them aware of the problem. DNS changer malware might come with payload, that is active without the main control servers. The sooner people will remove all the malware from their pc, the better.

System Check - how to remove

Sun, 05 Feb 2012 19:19:33 +0200

System Check is a fake disk optimizer that claims that your PC has multiple hardware errors that can be fixed with help of software. It hides some files and folders to make the point. System Check authors are trying to convince you to pay for its full version, but the fact is that it is a scam. You should remove System Check from your PC and unhide the files

A peek inside the Smoke Malware Loader « Webroot Threat Blog

Sat, 04 Feb 2012 22:29:52 +0200

There are many tools for wannabe scammers to lower the cost of entering cybercrime market. These tools, like Smoke Malware Loader, provide ready solutions for infecting user PCs and stealing their data. Many of these programs allow password stealing as well. Thus it is critical to have advanced antivirus program and limit password saving in the browser.

Riparazione Hard Disk

Sat, 04 Feb 2012 11:05:20 +0200

With Riparazione-disco data recovery is not an issue. Recupero Dati in company is performed by experts and with latest techniques. One can easily avail the services of company by approaching them on line.Riparazione Disco provides the best solution in Riparazione hard disk along with the recovery of information and safety from damage.

German gov't endorses Chrome as most secure browser - Computerworld

Fri, 03 Feb 2012 23:26:31 +0200

German government recommends using Google Chrome. Differently from US, IE is not automatically default browser in Europe, so the users have much more choice. Google chrome has decent sandboxing, which ensures that it is much harder to infect underlying operating system. Currently, Chrome has around 14% market share in Germany.

Internet Security - how to remove

Fri, 03 Feb 2012 14:51:35 +0200

Internet Security is a fake antivirus program that was designed by computer hackers in order to steal money from random computer users. The program imitates actions of a legitimate security tool but in fact it has nothing in common with solving security issues. Internet Security uses all possible methods to make you believe that your system is infected and make you purchase its so called full version in order to remove unwanted threats. Please do not fall for this scam application. Remove Internet Security as soon as you detect it on your system.

Remove Smart Anti-Malware Protection, removal instructions

Fri, 03 Feb 2012 11:07:21 +0200

Smart Anti-Malware Protection is a rogue anti-spyware released by scammers to generate some money. In order to get them, this malware pretends to be legitimate virus remover which licensed version will help you to remove viruses from your computer. However, this scareware simply uses the same old tactics and only pretends to have capabilities to detect or remove any virus. Please, never fall for Smart Anti-Malware Protection and ignore its alerts and scanners that start appreaing as soon as it manages to get inside the system. Read how you can remove Smart Anti-Malware Protection from your computer.

Let us come to you and repair your iPhone

Thu, 02 Feb 2012 22:42:51 +0200

iFixPhone, London (UK) is a great new iPhone LCD screen and glass repair service available to owners of the iPhone 3G, iPhone 3GS and the new iPhone 4.

"A young friendly chap came to my office and fixed my iPhone at a very reasonable price I think it would of cost me twice as much if I had gone to the apple store and I would of been waiting for hours no doubt for someone to attend to me."

Lucy Johnson, Quintessentially Escape Ltd

Omid's TechBlog!: Yet another Facebook Hoax: 'New Way Gangs Steal, Rape and Kidnap Girls'

Thu, 02 Feb 2012 14:58:03 +0200

Have your friends on Facebook been actively posting an advice about how women can avoid being kidnapped and raped? No matter how trustworthy it may seem for you, this message is a hoax used by attackers. It typically includes an image of a young woman who tied up in the trunk of a car and claims that sharing can help to save the girls. However, it has been confirmed that this is a hoax so please, stop sharing this message.

Kelihos Botnet is not gone after all « Bust Malware

Wed, 01 Feb 2012 17:52:17 +0200

Recently, Kaspersky and Microsoft claimed success at disbanding Kelihos botnet. This was done by taking control of their CC servers and pushing special instructions to change these servers to controlled by Kaspersky ones. However, this was not enough, as Malware researchers notice fresh versions of Kelihos that have a bit different structure in the wild. Apparently, there were more people with access to code and ability to launch and maintain botnet.

Five ways to secure your office email - Techworld.com

Wed, 01 Feb 2012 16:35:42 +0200

When choosing a program for messaging, most of us still rely on email and ignore real time communications like instant messaging through Twitter or Facebook. However, email attachments contain more and more viruses and include phishing links helping scammers to get your login information. In order to avoid losing your personal information, read the following tips provided on Techworld.com.

Android Trojans Highlight Basic Problem With A Non Curated Market

Tue, 31 Jan 2012 17:12:36 +0200

Android Market is a new place where scammers tend to spread their malware. According to security experts that's a natural thing because most of the new smart phone users simply don't even realize what they are doing and download apps like the maniacs.

Bogus "browser update" pages deliver malware

Tue, 31 Jan 2012 16:41:00 +0200

Fake "browser update" websites keep delivering infections to new systems. The most common warnings are: "browser being out of date" or some fake scanner being run on the machine. Fake update warning often leads to downloading a malicious file named update.exe. Safari actually downloads this file automatically and Firefox asks users to download it. Be careful if you have been presented with similar problems.

Cybercriminals generate malicious Java applets using DIY tools « Webroot Threat Blog

Tue, 31 Jan 2012 14:24:15 +0200

Cybercriminals infect PCs both using exploits or vulnerabilities and social engineering attacks that disguise programs as trusted. Dancho Danchev describes generators for malicious JAVA applications to disguise them as legitimate applications from big brands. Quite often Facebook, Microsoft, Google are used as these companies are well known and use some tools for various tasks. It is extremely important to check if real publisher signed particular application.

What do I do if my Twitter account is hacked?

Mon, 30 Jan 2012 16:51:39 +0200

There are two main ways to hack you Twitter account: hackers can guess your password or they can connect to your account using some malicious application. For those reason, you have to choose a strong password and make sure that it is different on each website. Make sure its long enough or mix numbers, letters, punctuation marks and so on. Review which applications have access to your Twitter account.

Infosecurity - Up to five million Androids infected with Counterclank

Mon, 30 Jan 2012 15:43:53 +0200

Symantec discovered new Andoid trojan, that is attached to some of games in Android market. This trojan can be installed if users are not careful with application permissions and confirm them during install process. Security researchers estimate that up to 5 mil. phones and tablets got infected. The list of detected infected applications is available in Symantecs website.

Internet Security 2012 - how to remove

Mon, 30 Jan 2012 14:14:42 +0200

Internet Security 2012 is rogue anti-spyware that presents itself as legitimate and trustworthy application needed on every PC. However, all users should keep in mind that this program is just a dangerous virus that uses trojans for its distribution. After getting inside the system, it starts displaying faked alerts and scanners pushing its victim to buy the commercial its version. Please, don't fall for these tricks and remove Internet Security 2012 from your computer.