This week in computer security

That's the exact reason why I'm not on these sites.

They can still be useful. Just keep in mind that any info you put on these sites has the possibly of becoming completely public. In other words, don't put info there that you wouldn't want someone to see. Apply some common sense.

Didn't LinkedIn already show pretty much all your info anyways?

Well if you add other accounts (like email) and used the same password for them, your life could unravel.

its actually getting bad. just as potential employers expect you to have a cell phone these days they also expect you to have a LinkedIn profile and your proper name in an email address.

not having any of these can seriously hurt your hiring potential, particularly in high tech.

Just found this : http://www.h-online.com/security/new…s-1653568.html

I have no idea whether it affects desktop systems, too - but I think that it's rather unlikely.

The press tells me about an aggressive Trojan coming with E-Mails using respected titles of firms.

It encrypts your hard disk.

And then wants money to get it free again.

And of course it won't get free again.

("We've got their money. Why bother ?")

Always check the addresses of ANY links you get in emails before clicking them. If they look suspicious in any way, don't click on them. Application of a little common sense goes a long way to protecting yourself.

Yes, that's a lesson I learned with spam early in this century/millennium.

Or ask oneself : "Why should I do this ? Who would profit from me doing it ?"

And especially asking oneself : "What if this goes wrong ?"

This is the most important question one should ask oneself when doing any online transactions.

I don't know whether this is old news or new nes : http://www.eurogamer.net/articles/20…ls-compromised

Edit : Ah, I see its already "old news" : http://www.rpgwatch.com/forums/showthread.php?t=17769

… Found a few articles … :

- Zero-Day-Exploit with IE used . http://eromang.zataz.com/2012/09/16/…-not-over-yet/

- Microsoft against 3322.com : http://blogs.technet.com/b/microsoft…ply-chain.aspx

- Localized "Hijacking-Software" spreading even further . http://www.h-online.com/security/new…t-1398912.html

- Microsoft vs. Zeus : http://www.h-online.com/security/new…s-1631264.html

All found via www.heisec.de , my currently favourite security-related web site.

Uh ? http://www.tomshardware.com/news/Nes…ion,17739.html

Originally Posted by Alrik Fassbauer
Uh ? http://www.tomshardware.com/news/Nes…ion,17739.html

!

As long as the customer don't eat it. Although, seems like GPS chips are now super cheap if "contest" use them to track winners.

Virus hides "behind" the mouse.

In short : if the mouse isn't moved, it becomes active. If it is moved, it remains inactive. Plus, it takes a LOT of time for itself : It becomes active only after 5 minutes, then it performs the next stepts only after 20 minutes of remaining in inactive mode after each step.

The whole report is here : http://www.symantec.com/connect/blog…alysis-systems


And Steam can be risky, too : http://www.h-online.com/security/new…k-1731562.html

Originally Posted by Alrik Fassbauer
And Steam can be risky, too : http://www.h-online.com/security/new…k-1731562.html

Yes, but only on machines with certain browsers (Safari).

Speedrun-Bankrobbery (so to say) : http://www.h-online.com/security/new…s-1741079.html

Another case of Phishing : http://www.h-online.com/security/new…o-1757018.html

"E-Mail hacks Router" : http://www.h-online.com/security/new…r-1759874.html

"4,5 Million Routers Hacked" : http://www.h-online.com/security/new…d-1722430.html

I had to format and do a reinstall this weekend.
My virus checker picked up an aggressive virus this weekend and after several unsuccessful attempts at dislodging the thing, I formatted.
What tipped me off(other than the red warning) was the slowdown of my internet to a crawl. I monitored my internet connection and my computer sent over 200 mg of data and downloaded over 2 gigs. In about an hour. I checked and everything I could see was off including Steam, windows update,other pcs, phones and internet tv's. Opening the task manager revealed nothing.
Went pretty smooth except that Blizzard locked my account the first time I tried logging into Diablo3.

More recently, the Alureon rootkit has successfully subverted the requirement for 64-bit kernel-mode driver signing in Windows 7 by modifying the master boot record.[40]

That is what I found-never heard of it before

I guess so that there still exists places in the MBR into which a virus/trojan could hide things ? - That was kind of possible in DOS, too.

Bad if someone uses multi-boot programs, I don't believe that such a virus could detect it.

These things become more nd more sophisticated. Being offline is the only solution.
And worse, even routers can nowadays be hacked.