Malware | Thats Bad Ass! Tech News and Reviews

Posts Tagged ‘malware’

BlackBerry says TIFF vulnerability exposes enterprise servers to malware

|

Fast payday loans For Every One

BlackBerry has constantly prided itself on its top-notch security attributes, so it’s a little worrying to see the company release a “high seriousness” advisory today warning of a possible make use of. According to the Waterloo-based operation:

Vulnerabilities exist in exactly how the BlackBerry MDS Hookup Service and the BlackBerry Messaging Broker procedure TIFF images for rendering on the BlackBerry smartphone.

Basically, hackers can rig a TIFF file with malware then deceive a BlackBerry individual into loading it via webpage, e-mail or an embedded message, thus enabling the bad men into their company’s Business Server. BlackBerry hasn’t gotten any reports of attacks simply yet, however advises IT administrators to update their BES software all the exact same. The update is available at the source, as are a number of temporary workarounds for those that cannot update their installations just yet.

Submitted under: Cellular phones, Mobile, BlackberryCommentsVia: Naked SecuritySource: BlackBerry Understanding Base

Incoming search terms:

Ballmer calls Android ‘wild’ and ‘uncontrolled,’ susceptible to malware

|

Author: Stacey Cook

via assets.sbnation.com

An interview of Steve Ballmer by LinkedIn founder Reid Hoffman this evening saw the Microsoft CEO characterize Windows Phone & rsquo; s competitors in some less than favorable terms. TechCrunch states that Ballmer called the competing Android platform “wild,” “uncontrolled,” and susceptible to malware. Having said that, Apple & rsquo; s ecosystem was “high priced” and “very controlled.” It & rsquo; s clear that Ballmer envisions Microsoft as a kind of Goldilocks-just-right middle ground, however with such a considerable amount of ground to compose just to overtake third-place RIM, it & rsquo; s a vision that the business is still struggling to get around to consumers.

Continue reading & hellip;

Incoming search terms:

Google explains how its Android 4.2 malware scanner guards the side door

|

Author: Jade Kim

Sideloading applications on Android implies an entire set of security holes, however the brand-new malware scanner consisted of in Android 4.2 might supply a much-needed plug. Speaking with Computerworld, Android VP of Engineering Hiroshi Lockheimer exposed that Google’s been analyzing APKs that turn up online, regardless of whether they’re formal market apps or not, in order to preserve a growing database of good and bad code. The scanner– shown above– then works in a comparable way to the Bouncer on the front gate, contrasting all the applications on your phone to that database. The brand-new sentry assists Google create upon other Android 4.2 protection attributes such as an enhanced app authorization display and a block against applications sending superior SMS messages in the background. On the other hand, some could state that gathering samples of existing malware will certainly never be as powerful as genuinely recognizing its DNA.

Filed under: Cellphones, Tablets, Software, Mobile, GoogleGoogle explains exactly how its

Android 4.2 malware scanner guards the side door originally appeared on Engadget on Fri, 02 Nov 2012 11:36:00 EDT . Please see our terms for usage of feeds. Permalink Android Authorities|Computerworld Blogs|E-mail this |

Comments

Incoming search terms:

Microsoft issues fix for Internet Explorer malware exploit, promises full patch by Friday

|

Author:

Internet Explorer zero-day vulnerability (Metasploit)

Just a few short days after identifying a security exploit in multiple versions Internet Explorer, Microsoft has issued a Windows fix it to resolve the issue, with a comprehensive update planned for this Friday. The vulnerability, which was discovered on Monday, put millions of machines at risk by allowing malware to bypass existing security protocols via a specially crafted Flash animation. While it’s exact origins remain unknown, the exploit was believed to have been propagated by the same hacker group that launched the zero-day Java vulnerability last month. While the fix it offers immediate protection, Microsoft urges all Internet Explorer users to download and install their forthcoming security update when it becomes available via…

Incoming search terms:

Microsoft disrupts millions of botnet connections after discovering PCs with preloaded malware

|

Author: Brian McKinnell

The Verge Gaming Rig 1024

Microsoft disclosed this week that it has helped interrupt more than 500 different strains of malware in an attempt to slow the emerging threat of the Nitol botnet. In an operation codenamed b70, Microsoft uncovered stores in China selling computers with counterfeit models of Windows loaded with malware. Part of an unsecure supply chain, the malware-equipped models of Windows could have been installed at any sort of component of a process when a computer system travels with different business that ship and market it.

In a research focusing on the Nitol botnet, Microsoft uncovered that 20 percent of the Computers its researchers bought from an unsecure supply chain in numerous cities in China were infected with malware. Microsoft is calling on …

Continue reading & hellip;

Incoming search terms:

Malware targeting energy sector raises specter of Flame virus

|

Author: Matthew Baker

Shamoon malware data

Security researchers have identified a new variety of malware which appears to be targeting the energy sector, permanently erasing data from affected Windows machines. Flagged as either “W32.Disttrack” or “W32.EraseMBR” and nicknamed Shamoon, the executable contains the word “wiper” in a directory used for debugging, as well as the phrase “ArabianGulf.” The words have provoked memories of the Wiper malware that prompted the discovery of Flame, a virus co-developed by the US and Israeli governments to attack Iran’s nuclear program.

‘Mahdi’ malware targets Middle Eastern companies and government agencies

|

Author: Ian Simpson

Mahdi source Securelist Kaspersky Labs

Specialists from Kaspersky Labs and Seculert have actually teamed up to investigate a new malware that has actually contaminated over 800 Computers in Center Eastern nations, mostly targeting infrastructure companies, the finance industry, and government divisions. The malware, understood as Madi or Mahdi, logs keystrokes, screenshots, and can record audio using the pc’s microphone. Mahdi, which implies “messiah” in the Islamic faith, then uploads all of this details to a remote server. While the source of the malware is currently unknown, Mahdi is mostly focused in Iran with 387 infections, however is even found in Israel, Afghanistan, the United Arab Emirates, and Saudi Arabia.

While Mahdi is targeting places and organizations comparable to …

Continue reading & hellip;

Windows updated with better checking for bad digital certs after Flame malware incident

|

Author: Stefanie Jenkins

Having already pushed one patch to servers as part of its response to the recently discovered Flame trojan, Microsoft is making another adjustment on Windows Vista, Windows 7, and Windows Server 2008 machines. A new update going out lets revoked certificates be published and recognized much faster, which would protect against a vulnerability exploited by Flame to fake its way in as a legitimate update. Informationweek has more information on the old OCSP method used to set revocation status, and also points out another vulnerability in XML Core Services the folks in Redmond is warning people of this week and has already released a “fix it” solution for. Hit the source link to get all the details and grab the update, IT types may want to update their firewalls with the new URLs being put into use for the lists.

Windows updated with better checking for bad digital certs after Flame malware incident originally appeared on Engadget on Thu, 14 Jun 2012 23:49:00 EDT. Please see our terms for use of feeds.

Permalink Informationweek | source Microsoft | Email this | Comments

Mobile security researchers present Android Malware Genome Project at IEEE

|

Author:

Android’s openness, combined with its popularity, has lead a few of the developer faithful astray — with malware being a legitimate concern for the mobile operating system. To help combat the issue, Xuxian Jiang, an NC State researcher, has created the Android Malware Genome Project, which was presented at the IEEE Symposium on Security this week. The aim is to collect and analyse all the known malicious software, and share the findings so that more effective and preventative measures to be taken by the community. Jiang claims that the main drawback has been understanding the malware, and getting access to examples, something the project aims to solve. More than 1,200 malware samples have been collected so far, and if you’re curious, the dataset is available for download via the source.

Mobile security researchers present Android Malware Genome Project at IEEE originally appeared on Engadget on Tue, 22 May 2012 22:13:00 EDT. Please see our terms for use of feeds.

Permalink NCSU | source Android Malware Genome Project | Email this | Comments

Incoming search terms:

Malware attack on Iran’s oil ministry: infrastructure fine, but websites taken offline

|

Author: Margo Tipton

iran ministry of petroleum 1020

Iran’s Ministry of Petroleum and a number of affiliated companies were hit with a malware attack on Sunday, the ministry confirmed. Production equipment at several locations was taken offline as a precaution, including at the Kharg Island oil terminal, where 90 percent of oil exports are handled. While an oil ministry spokesman said the attack “had not caused significant damage,” it wasn’t completely ineffectual. The BBC reports the attack took the oil ministry and national oil company websites offline, and that some of the sites’ user data was stolen. Iran’s core data on oil production is safe, however, since it’s housed offline and therefore much less accessible to attackers. Following the attack a “cyber crisis management committee”…

Posts Tagged ‘malware’

BlackBerry says TIFF vulnerability exposes enterprise servers to malware

Incoming search terms:

Related Posts:

Ballmer calls Android ‘wild’ and ‘uncontrolled,’ susceptible to malware

Incoming search terms:

Related Posts:

Google explains how its Android 4.2 malware scanner guards the side door

Incoming search terms:

Related Posts:

Microsoft issues fix for Internet Explorer malware exploit, promises full patch by Friday

Incoming search terms:

Related Posts:

Microsoft disrupts millions of botnet connections after discovering PCs with preloaded malware

Incoming search terms:

Related Posts:

Malware targeting energy sector raises specter of Flame virus

Related Posts:

‘Mahdi’ malware targets Middle Eastern companies and government agencies

Related Posts:

Windows updated with better checking for bad digital certs after Flame malware incident

Related Posts:

Mobile security researchers present Android Malware Genome Project at IEEE

Incoming search terms:

Related Posts:

Malware attack on Iran’s oil ministry: infrastructure fine, but websites taken offline

Related Posts: