Apple is taking steps to address the Java vulnerabilities behind the Flashback Trojan outbreak. But Java isn't the only attack vector for OS X -- and Apple users can no longer cling to the belief that Macs are virtually immune to malware.. Are Macs as insecure as PCs? It's a notion that once was unthinkable, but increasingly is being said out loud. Recently, Mac OS X users have been at risk thanks to a Java-based attack vector. The Flashback malware specifically targeted OS X, and took advantage of the fact that Apple had not yet updated its users to a fully patched version of Java. More than half a million Macs were infected by the malware, which turned the victimized machines into a remote-controlled botnet. The link for this article located at eSecurity Planet is no longer available. . Investigating Mac security: Do Macs face the same level of threats as Windows machines?. Mac Security, Flashback Trojan, Apple Malware. . LinuxSecurity.com Team
According to reports, many online users are almost always attacked from the hacked websites of legitimate providers. Previously a majority of surfers used to assume that malware was only found on sex sites and other shady websites, but these days all you need to do is visit your favourite newspaper to come under attack.. Antivirus vendor Avast reports reports that there are now 99 "normal" infected websites for every infected adult site. Current cases, such as the manipulation of Lenovo's server or of Vodafone UK's server seem to support that finding. In the case of Vodafone, attackers manipulated the Blackberry product pages so they could upload an exploit in an iFrame for an unpatched hole in the Windows Help Center. The link for this article located at H Security is no longer available. . Security assessments reveal a significant surge in malware infiltrations emanating from trusted platforms, creating fresh challenges in digital defense.. Trojan Attack, Malware Exploitation, Online Safety, Cybersecurity Awareness. . LinuxSecurity.com Team
Most voice encryption systems can be tapped in minutes by installing a voice-recording Trojan on the target computer, a security researcher has confirmed after testing a range of well-known products.. Although this type of attack has been known about for some time, the scale of the issue uncovered by researcher The link for this article located at Tech World is no longer available. . Voice safeguarding technologies face threats from swift intrusions via malware, jeopardizing confidentiality and protection.. Voice Encryption, Trojan Attacks, Cybersecurity Threats. . LinuxSecurity.com Team
There has recently been considerable alarm about the possibility of a malicious code spreading via Skype. Skype is a system that allows voice communication over established Internet connections, in an environment very similar to that of telephone calls. It even allows calls to be made to telephones from a computer, with lower tariffs than that of a normal call. The real problem that a malicious code for Voice over IP (VoIP) would suppose is that it opens a whole new field for hackers to create new types of malware. Initially, one might think of malicious code that uses VoIP in order to propagate, as was the case with the Trojan mentioned at the beginning. In reality, this represents nothing more than finding a new communication channel. . New? No! There are already many worms that spread using numerous instant messaging systems. So this Trojan has not really done anything that hasn't been going on for many years now. The problem lies in using the full characteristics of VoIP in order to spread malicious code. Imagine a dataflow across an audio channel (perhaps at a frequency that is not audible to humans) that could crash the voice system, causing a denial of service. Or that this dataflow could be used to create a system status that would allow execution of malicious code. This would be something genuinely new with respect to propagation of code, unlike other hundreds of codes that use messaging systems simply to propagate. But this is nothing more than speculation. The link for this article located at IT Observer is no longer available. . VoIP systems, while enhancing communication, face vulnerabilities to malware attacks due to their internet dependency, allowing attackers to exploit protocol weaknesses. VoIP Security, Malware Risks, Trojans in Communication, Denial of Service Attacks, VoIP Vulnerabilities. . Brittany Day
Among the devilish deeds that can be perpetrated by Trojans is the creation of "zombie networks" -- networks typically composed of home computers surreptitiously controlled by a badware's author. "We estimate that spam zombie networks are responsible for from anywhere to 25 to 30 percent of the spam on the Internet today, and it's growing," said Scott Chasin, CTO of e-mail defense solutions company MX Logic. . . .. Among the devilish deeds that can be perpetrated by Trojans is the creation of "zombie networks" -- networks typically composed of home computers surreptitiously controlled by a badware's author. "We estimate that spam zombie networks are responsible for from anywhere to 25 to 30 percent of the spam on the Internet today, and it's growing," said Scott Chasin, CTO of e-mail defense solutions company MX Logic. The techniques used to develop open-source software like Linux have proven to be so effective that they've been adopted by malware writers to improve their mischievous ways. The link for this article located at John P. Mello Jr. is no longer available. . Among the devilish deeds that can be perpetrated by Trojans is the creation of 'zombie networks' -- . among, devilish, deeds, perpetrated, trojans, creation, 'zombie, networks'. . LinuxSecurity.com Team
The Trojan scans random ports on random machines, each time sending an initial SYN packet. One of the few identifiable characteristics of the program is a window size of 55808 on each of the packets it transmits. It also spoofs the . . . . The Trojan scans random ports on random machines, each time sending an initial SYN packet. One of the few identifiable characteristics of the program is a window size of 55808 on each of the packets it transmits. It also spoofs the originating IP address on all of the packets, making them look as if they're coming from machines in unallocated name space. ISS has been tracking the Trojan for about a month and has yet to find a copy of its code or successfully trace it back to an infected machine. Other security vendors and officials at the Department of Homeland Security are also tracking the Trojan, all without any luck so far. The link for this article located at eWeek is no longer available. . Investigate the methods employed by Trojans to probe arbitrary ports while circumventing security measures through advanced packet masquerading tactics. Discover professional perspectives.. Packet Spoofing, Trojan Network, Evasion Techniques, Cyber Threats. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.