Spyware news, cheats, and updates


  • Tag Archives Spyware
  • Security problems sparkle plan to test Software designers

    Sans Institute security group was recently quoted as saying: To right the wrongs in PC security, write the right code. The security group claims to have detected that three common programming errors are the cause of over 85 per cent of serious software vulnerabilities, which open the door to worms and spyware. With the aim of getting to the origin of the problem, quite a few tech companies are giving a push to a Sans attempt to test how firmly designers put in writing their code. In an interview to IBD, Alan Paller, Sans research director maintained that they are making an attempt to get up the nose of the problem at the core, instead of being knee-jerk always. Her further added that the people who are supposed to put code in writing could do with thoroughly reducing the digits of errors. Programmers frequently are shaken to detect their code is in-cluded with security-compromising mistakes. That is to say, usually they are not told about how to put secure code in writing a few instruction manuals followed by them are full of vulnerabilities.


  • Websense’ new software boasts of protecting minors from web-borne malicious content

    Websense Wireless recently announced the launch of a novel software, which is claimed to allow the wireless operators and service suppliers to make available best-of-the-breed security features to give protection to both end-users and the network from pernicious internet-borne content and to stick on to regulatory, industry and government regulations developed to defend minors from inapt and unwanted Internet content. The latest software – the Websense Wireless URL Categorisation Engine – claims to enable operators to raise revenue streams by installing value-added services like first-class content offerings for subscribers, customised parental controls, updated wireless security identification offerings, plus mobile advertising and marketing capabilities. The Websense Wireless URL Categorisation Engine makes use of Websense technology that gathers URLs from Internet sites and categorizes them. Founding upon the content filters deployed with the individual wireless service supplier, right to use Internet sites can be permitted, stopped, or made available just subsequent to a ‘continue’ option is provided to the subscriber. Wireless operators, or their subscribers, are enabled to set filtering policies for over 90 categories of Web sites, starting from adult content to spyware.


  • Kerio Technologies releases latest version of Kerio WinRoute Firewall

    Kerio Technologies recently announced the launch of a new version of Kerio WinRoute Firewall, which is claimed to sprint on 64-bit versions of the Windows OS and is included with a new Statistics and Reporting module to supply a complete overview of network and user activity. Besides, the latest version 6.3 also makes available StaR (Statistics and Reporting module) that automatically scrutinizes network data and brings forth the essential network traffic and usage patterns in a simple-to-read graphical format. The latest version of Kerio WinRoute Firewall also gives report on personal user traffic, with links to websites visited by the users, or goes kaput browsing by category while integrated with the elective IBM Proventia Web Filter. John Jones, Sales Engineer at Kerio was quoted as saying, There are many great log analysers that work with Kerio WinRoute Firewall, however those tools are developed for IT administrators. With StaR, detailed network usage diagrams can be yield to a surfer so that even the least technical business manager could be capable of getting how users are making access to the Internet and where bottlenecks are occurring. Kerio WinRoute Firewall is a network security software package that brags of making available gateway anti-virus scanning, web content filtering, VPN services and access policy management. Its feature-packed Administration Console lets system administrators distantly control with much better efficacy than the easy web features discovered in most firewall applications. Incorporation with Active Directory makes system simpler for current Windows networks


  • Sophos warns of worm masquerading as Internet Explorer beta download

    Sophos has warned email users of a prevalent nasty attack, which is claimed to be disguised as an invitation from Microsoft to make a download of a beta version of Internet Explorer 7.0. The emails, purporting to have been sent by admin@microsoft.com, is read as "Internet Explorer 7 Downloads", and show an image, which encourages users to make a download of beta 2 of Internet Explorer 7. But in actual fact when the image is clicked by the users a malicious file named as ie7.0.exe, is downloaded that is infested by the Grum-A worm. The Grum-A worm is an appender virus, which contaminates executable files referenced by Run keys in the Windows Registry. When run, it copies itself to \winlogon.exe and makes changes to the Registry. It also edits the HOSTS file, injecting a thread into system.dll, and attempts to patch the system files ntdll.dll and kernel32.dll. Experts at Sophos say that this isn’t the first time that any malware has masqueraded as a download from Microsoft. They maintain that en-number of times earlier; virus designers have coded attacks posing themselves as communications from Microsoft. For example, in 2003 the Gibe-F worm, also called Swen, masked as a dangerous security update from Redmond based software giant, plus two years back hackers landed web users to a false website disguising as Microsoft’s update page.


  • Ministry spyware enrages GPs

    The patients, already plagued by some or other kind of diseases, now seem to have been victimized by spyware that is claimed to have been brought about due to the software installed on GPs’s computers by the Labour Government. GPs claims that the software installed on its practices is capable of extracting personal data but for the prior knowledge of the practice or the GP, and even but for getting patients’ permission GPs are outraged District Health Boards and the Ministry of Health have installed software on their computer systems which the GPs claim breaches patient confidentiality. The software installed on computers in GPs’ practices can extract personal data without the practice or the GP being aware, and without patients’ permission. National Party Health spokesman Tony Ryall says, It’s outrageous that the Ministry of Health has been downloading personally-identifiable information without the permission of patients or doctors. This could set health information management back by years, because it shows that the ministry can’t be trusted. Thank goodness that the GPs picked this up, or what else would Big Brother be data-mining from patients’ personal medical records?


  • Tool turns any JavaScript-based browser into a nasty drone

    At recent ShmooCon hacker convention, Billy Hoffman recently claimed to have stumbled upon a new tool that is too risky to give away and is capable of turning any computer, be it Windows, Mac, Linux or any device with a browser, into a site invader. Know as Jikto, the tool is a Web application scanner that looks for cross-site scripting flaws. Written in JavaScript, Jikto is also told to be capable of clandestinely latching onto a browser that is consisted with JavaScript enabled. Hoffman told eWEEK in an interview that subsequent to surreptitiously installing itself to sprint inside any browser-be it that of a computer, a mobile phone-Jikto thereafter is able to hunt sites for cross-site scripting fl-aws and report its detections to an intermediary but for the user of the grimy browser being conscious. Besides Jikto is also capable of duplicating itself onto sites that are included with cross-site scripting flaws and after that increase through latching onto visiting browsers. This is somewhat that JavaScript should not have been capable of doing, but unluckily, Hoffman maintained that it is able to. JavaScript was initially Netscape’s version of the ECMAScript standard, a scripting language founded on the concept of prototype-enabled programming. Currently managed by the Mozilla Foundation, JavaScript is well-known for its client-side exercise in Web sites.


  • Spammers hacking legal sites to mint money from online pharmacies

    Following the detection of spammers hacking into legal sites to sell their goods, Sophos has forewarned Web users to tighten their belts against the malicious Spam campaigns, which advertise drug-peddling Internet pharmacies but in fact land users to webpages hosted on hacked innocent websites. While the surfers come in touch of these pages, they are redirected to the bogus online store. The hacked websites in toto make use of PHP, a scripting language, which are utilized by loads of Internet sites, which has gone through critical security flaws previously. Graham Cluley, senior technology consultant for Sophos, To the naked eye it looks like a bog standard Spam message advertising medications. But it is actually pointing to a website that is owned by someone who is probably completely unaware that spammers have hacked into their site, and are using it to redirect visitors to an online pharmacy. Website owners have a duty to properly patch their sites against the latest vulnerabilities, or face being exploited by spammers. What’s more, since the web address is genuine, it’s possible more people will be tricked into clicking on the link, giving the spammers more incentive to keep plugging their pills. For the reason that the Spam messages inform on an innocent website instead straightforwardly to the online pharmacy, sites ignorant of the Spam campaign threat getting their repute flawed. Additionally, as the majority of anti-Spam products make use of info regarding the web page informed on as an pointer of whether the message is Spam or not, emails connecting to these hacked legal sites would not generally be spotted as Spam or blocked by web filters.


  • TJX claims hacking of 45 million credit cards

    TJX has now owned up to the conciliation of almost 50 million debit and credit cards. As maintained by The Boston Globe, as a minimum 45.7 million credit and debit card numbers were pilfered by online criminals who made access to the PCs at the TJX Cos. at its H.Q. in Framingham and in the U K for a period of many years, claiming it the biggest and largest breach of private data ever reported. The violation, deemed to have come to pass for some years with the help of monitoring software, picked no less than 100 data files from the system. Almost a half-million customers’ data too got their driver’s license or state-issued ID attached to their account. As per the Globe, TJX is going to disburse for credit monitoring for its customers whose driver’s license or state-issued ID info is the similar as their Social Security number.


  • Microsoft to patch up ANI vulnerabilities

    Microsoft recently announced to come up with the launch of an out-of-band patch to fix susceptibility in Windows Animated Cursor Handling (ANI) that is claimed to be one of the most major vulnerability in years by some security specialists. The ANI bug that renders vulnerable to assault any webpage email or content that is able to download an animated cursor, enabling online hackers to sprint arbitrary code on the systems of users. Throughout the weekend ANI misuses snowballed, spoiling the weekend for several security experts acting in response to attacks. Last Friday, Secunia claimed that the flaw is awfully dangerous and eEye Digital announced a third-party fix to service those worried about giving protection to their systems ahead of Microsoft makes release of its sanctioned patch. As maintained by Ken Dunham of iDefense Labs, researchers have detected more than 150 malware samples making use of the flaw in the wild as of in the early hours of Sunday morning. He also told that a creepy-crawly, a Spam sprint and generation kits making use of the vulnerability now live in the wild.


  • PandaLabs warns of speedy spread of Spamta.VK worm & Spamtaload.DT Trojan

    PandaLabs recently warned against the speedy dissemination of two novel members of the Spamta family: the Spamta.VK worm and the Spamtaload.DT Trojan. Both the mem-bers of Spamta family are claimed to disseminate together and reported to have brought about almost 80% of malware findings to PandaLabs per hour. The Spamta family is also said to have been spreading enormously for the past few months. PandaLabs reports that while Spamta.VK infests a PC, it links to numerous servers to emit huge amounts of emails. These emails are comprised with a copy of Spamtaload.DT, which is normally buried in an executable file. Spamtaload.DT, in order, make a download of a copy of Spamta.VK to each PC infected by it, initializing the infectivity sequence yet again. Luis Corrons, Technical Director of PandaLabs said, This is a clear example of a combined attack. The worm’s propagation features are used to distribute the Trojan, which, in turn, ensures proliferation by infecting each computer with a new copy of the worm. This technique explains the large number of infections reported to PandaLabs.



  • dinamic_sidebar 4 none

©2012 Spyware Hunter Entries (RSS) and Comments (RSS)  Raindrops Theme