- SophosLabs: Anatomy of a security hole - the break that broke sudo http://t.co/IsIQeuZ113 minutes ago
- SophosLabs: State of Utah outlines mistakes made allowing theft of 780K records http://t.co/KojHRCTC55 minutes ago
- gcluley: What can secure software development learn from Bill Shakespeare? http://t.co/aGpajSnrabout 1 hour ago
- SophosSupport: How to uninstall Sophos Mobile Security for Android: http://t.co/aQedSnXnabout 2 hours ago
- gcluley: TV tech hacked sports show's website to earn virtual cash http://t.co/zfPCm2mzabout 2 hours ago
Monthly Archives: August 2008
"Yahoo Award" means less cash for you
Today I came across this phishing attempt that a customer had submitted to us. Now while a sharp eye can detect all the errors, it's not a bad job. Here's just a few that we found: 1) If this was Read more…
UK firms invited to Sophos usability workshop (and a free lunch)
I was collared by Kim the other day and she told me she had some news that all British readers of this blog might be interested in. Kim is one of the lovely crowd of people from upstairs who run Read more…
Sophos Needs You!
Providing the best protection, is not just about detection, but also about making products brilliantly simple to use. As part of our development process of new Sophos products, the engineering team are running a number of Usability workshops for Sophos Read more…
Redirection affection
A few months ago I highlighted the importance of control over user web traffic in today's attacks [1]. Compromised web sites and spam messages containing URL links are the main ways today in which attackers get user traffic. Once they Read more…
Confidence
This week's guest blog comes from my colleague Rob Forsyth. Rob is managing director of Sophos in Asia Pacific, and currently Deputy Chairman of the IIA (Australian Internet Industry Association). Over to you Rob... I believe that a major driver Read more…
Lloyds TSB bank rejects man's "pants" password
If you set a password for your bank account you don't expect your bank to change it without your permission do you? In particular, you don't expect people at your bank to have looked at your password, disapproved of it Read more…
NASA hacker Gary McKinnon loses final extradition appeal
Gary McKinnon, the infamous NASA hacker, has lost in his attempt to get the European Court of Human Rights to hear his appeal against extradition to the United States. McKinnon was arrested in 2002 after allegedly hacking into computers belonging Read more…
McAfee man stole my identity
Last Friday, the BBC Radio 4 six o'clock news show ran a piece about how easy it is to lose USB memory sticks, and how identity thieves can benefit if the data is not properly encrypted. This news story surfaced Read more…
More FakeAlert trickery
The conveyor belt of fake alert malware has continued apace over recent days. As previously reported [1,2,3], the attackers are using a variety of tricks and social engineering in order to infect victims. In contrast to other malware, where the Read more…
Black hole broadcasting
As I have blogged before, I sometimes get rolled out in front of the media to pontificate about the implications of the latest breaking security story. Yesterday was no exception, and the story of the day was the latest in Read more…
Computer worm strikes International Space Station
Wired has published a fascinating story about malware penetrating computers at the International Space Station on a USB memory stick or compact flash card. Fortunately, anti-virus software managed to identify the infection and prevent it from spreading unnoticed. What confuses Read more…
Teenager escapes jail after £9000 phishing scam
An interesting story has bubbled up from the Cambridgeshire area of East England, about a young chap who has escaped jail after being found guilty of involvement in a phishing scam. 18-year-old Ronaldas Janusevicius is reported has been struck with Read more…
Best Western: 10 customers affected by data breach, not 8 million
Yesterday I blogged about the confusion surrounding the Best Western data security breach. Newspapers had claimed that up to eight million hotel visitors might have had their personal information put in peril. The Best Western hotel group, however, had angrily Read more…
Just how sick can a hacker get?
Just how sick in the head do you have to be if you're a computer criminal? We've seen them exploiting misery in all imaginable ways: from natural disasters such as tsunamis and hurricanes,to terrorist bombings and even mining accidents. Today Read more…
Madonna quiz: we have a winner!
Thanks to everyone who took part in the Madonna song title quiz. In total we had just under 100 entries. The first person to correctly find all nineteen (yes, count them, they're in red below) Madonna song titles was... drum Read more…
We have hijacked your baby
One of the current malware spammings has an interesting social engineering lure. Protecting your family is one of the primal urges and social engineering techniques work best when they make use of strong emotions. How many people will open photo.zip? Read more…
Are your bank details being sold on eBay?
webmail + anonymizer = 419?
Not too long ago we reported on how GMail's effort to kick out "419 fraud" spammers from its networks resulted in a positive decrease. Clearly, this problem is not specific to large webmail providers like GMail or Yahoo!, but is Read more…
Confusion reigns over Best Western data security breach
Conflicting stories are hitting the security headlines today about an alleged breach of computer systems run by the Best Western hotel chain. According to a report by Iain S Bruce of the Scottish newspaper The Sunday Herald, names, home addresses, Read more…
Statement of Fees
We're continuing to see high volumes of Fedex and UPS spam at the moment, and we've just started to see a parallel campaign by the same authors with the subject "Statement of fees 2008/09" and the following message body: Please Read more…

