ProSecure™ UTM9S
UTM9S Wins 4/5 Stars & Features NAS Integration
Posted By Pete at 4:01 PM, October 21, 2010
Zeus (a.k.a Zbot, Kneber amongst other names) has been a menace to financial institutions over the past couple of years. All it does is make its way onto PCs and log key strokes - the ones that are used to login to banking and other large corporate websites such as Bank of America, Oracle, Cisco, and Amazon.
Zeus itself is a malware toolkit that has become the gold standard for financial cybercrime.
What makes Trojan component of Zeus dangerous is that it hacks into the browser session itself and logs keystrokes. This also gives it the capability to inject additional forms into Web pages asking for more information from the victim - while still looking 100% innocent.
Zeus botnets now consist of millions of PCs worldwide (it's harder to detect than your average malware) and are widely utilized by cyber criminals for various purposes (steal, steal, and steal some more).
According to Zeus Tracker there exists a few hundred Zeus Command & Control servers in the world today.
As you can see most are in Eastern Europe, but surprisingly there quite a few in the states. Although there have been a few recent busts on cyber gangs that control various Zeus botnets, don't expect Zeus to go away anytime soon.
Posted by: Pete at 4:01 PM
Categories: General
Posted By Netgear Threat Lab at 5:35 PM, October 14, 2010
Yesterday, Microsoft released its security updates for October. This update includes a record 16 security patches-which fixes 49 vulnerabilities.
This update contains 4 patches of the highest level of risk, 10 patches of the level important, and 2 medium-level patches. Of the most notable are MS10-071 and MS10-076.
The MS10-071 patch fixes 12 security vulnerabilities within IE. Most of the vulnerabilities can cause the user when using IE, be vulnerable to attack by a Web page that contains a specially crafted viruses resulting in disclosure of data, unwanted remote access to the machine, and other serious consequences.
The MS10-076 patch fixes some of the unusual embedded EOT fonts vulnerability within the OS. An attacker could exploit this vulnerability to launch remote code execution attacks.
We recall back in August, Microsoft had to release at that time the largest update yet, which included patches for 34 security vulnerabilities. That record was short lived however - lasting only two months.
Posted by: Netgear Threat Lab at 5:35 PM
Categories: Netgear Threat Lab
Posted By Pete at 3:35 PM, October 12, 2010
I think they may have been onto something when it was reported last year that Firefox was the browser with the most vulnerabilities. We've commented that the open source nature of Firefox could make it a bit more susceptible to exploits. Well, here's one that will make you think twice before logging into your online bank account with Firefox.
The folks at Webroot have discovered (it's a really nice read btw, which will give you good insight on how malware such as this operates) a new Trojan (Trojan-PWS-Nslog) that conveniences the user by making Firefox "skip" the step where it prompts the user whether or not they'd like to save their password. The user-entered password is then automatically saved and stolen. After that, the hacker makes off with the user's login and sells it to anyone willing to pay or uses it to do who-knows-what.
If you feel you've been a victim of said Trojan, run a scan with your updated AV software and reinstall Firefox. That said, in this particular instance it is very easy for users to unwittingly expose their passwords. It just shows again how important it is to protect your network/PCs with layers of defense (and even more importantly how more robust software code is needed throughout the industry but more on that in the future).
Posted by: Pete at 3:35 PM
Categories: General , Malware
Posted By Pete at 12:46 AM, October 7, 2010
The Register is reporting that an Internet voting system in Washington DC was hacked merely 36 hours into initial beta testing. The online voting system was intended to be used for elections next month in Washington DC. It was however, promptly hacked by scientists from the University of Michigan. Needless to say, the system was taken down and will not be used in the upcoming elections.
The scientists used the hack to point out the weaknesses in such an online balloting system and that today's security technology in general is still insufficient to secure such critical applications. The last thing we need is for hackers to stuff the ballot (and perhaps put the wrong people in office). Given how fundamentally important voting is in this country, it will probably be a while before we can cast our presidential ballots online. For now, we'll just have to stick with doing our taxes online.
Posted by: Pete at 12:46 AM
Categories: General