Monthly Archives: July 2009

Are Apple Mac users perverts?

Default image

If the ad boys and girls could bottle the power of cyber-gossip, they would be set for life. Case in point: Did you all notice the sheer speed with which the story of Erin Andrews' naked video screeched around the Read more…

Share

Which is more secure - Internet Explorer or Firefox?

Default image

I had an interesting inquiry from a Twitter follower earlier this week asking the question "Which would you say is safest, Firefox or IE?". Not a question that hasn't been asked before, but in light of the happenings of the Read more…

Share

The Benign Phish of West Africa

Default image

Whilst the rest of the world flounders in insolvency there are several individuals whose scales are overflowing with ready cash. These pesky phishmongers claim to have several million dollars spare to allow the world economy to come up for air. Read more…

Share

America! Stop helping spam spread and clean up your computers!

Image (1) spam-q2-2009.jpg for post 14538

SophosLabs published some research today revealing that one in six spam emails are being relayed from compromised computers (which are part of hacker-controlled botnets) in the United States. Interestingly China and Russia seem to be sliding down the dirty dozen Read more…

Share

Beware of malicious Rapidshare links sent to you by a friend.

Beware of malicious Rapidshare links sent to you by a friend.

I've got this e-mail from my former classmate about a week ago: Followed by another one last night: Needless to say, the links point to malware. The first URL was taken down. But the last one is still active, though Read more…

Share

Erin Andrews peephole video spreads malware

Erin Andrews peephole video spreads malware

Hackers have created webpages claiming to contain the notorious Erin Andrews peephole video in their attempt to infect Mac and Windows computers. Erin Andrews is a glamourous TV sports reporter on ESPN with many fans, so it's no surprise that Read more…

Share

FakeAV -- Now with Porn!

Image (1) scan.jpg for post 24017

Once upon a time, surfing to a compromised porn site exposed the user to fake antivirus software through driveby downloads. I recently came across a sample that turns this concept around. Running the executable file does nothing at first but Read more…

Share

XP mode - demonstrating that security is never Microsoft's first priority

Image (3) richard-jacobs.jpg for post 14528

Sophos's Chief Technology Officer Richard Jacobs joins us as a guest blogger to discuss the implications of Microsoft including XP Mode in Windows 7. Over to you RJ.. Windows 7's planned XP compatibility mode risks undoing much of the progress Read more…

Share

Google plugs high-risk hole in Chrome browser

Google plugs high-risk hole in Chrome browser

Hot on the heels of a serious security update for its rival Mozilla Firefox, Google has released version 2.0.172.37 of its Chrome web browser which fixes a couple of security holes that could be exploited by users visiting a booby-trapped Read more…

Share

Firefox 3.5.1 released to fix major security problem

Firefox

As Beth reported on the SophosLabs blog a couple of days ago, there has been a lot of concern about a vulnerability in the recently released Firefox 3.5. The bug in Firefox 3.5's Just-in-time (JIT) JavaScript compiler was disclosed publicly, Read more…

Share

AV Haters

Image (1) childish.jpg for post 24006

Amateur malware authors come from various backgrounds and they each have their own agenda to convey. For example, there's one that attempts to educate computer users not to click on unknown links in emails. These amateurs clearly do not like Read more…

Share

Twitter Worms - Koobface Diversifies

Image (1) twitter-koobface-1.png for post 24002

Last week we reported that Twitter was warning users that the Koobface worm was now targeting their social networking site. One thing that was noticeable about the attacks was that they were quite diverse for such a short space of Read more…

Share

Trout sent to jail for 366 days after installing spyware

Image (1) creative-daydreaming.jpg for post 14524

Tony Trout, a former council official in Greenville County, South Carolina, has been sentenced to one year and one day in jail after being found guilty of using spyware to read emails on a colleague's computer. According to prosecutors, Trout Read more…

Share

Easy Steps to Stop Being Phished

Image (1) phish_socialt.png for post 23990

Phishing has become an increasingly rampant threat in recent years. It is an Internet fraudulent act for the purpose of gathering sensitive information such as usernames, passwords and credit card details. A typical phish sends a deceptive email falsely claiming Read more…

Share

FireFox may need asbestos suit

Default image

There's been quite a bit of buzz about the latest zero-day FireFox exploit. For those not in the know, it's a vulnerability in how JavaScript code is handled by their new TraceMonkey component. So this exploit only works in 3.5.x. Read more…

Share

Cats demand spam in Russia

Image (1) cat-spam.jpg for post 14522

For some reason, one of my non-Sophos email addresses receives a lot of Russian language spam. I'm not sure why, because I don't speak the language and the address isn't connected with anything of a Russian nature, but I would Read more…

Share

Talking social networking threats at Oxford

Image (1) said-business-school.jpg for post 14516

I was fortunate enough to be invited to speak earlier today at the Oxford University ICT Forum (ICTF) Conference about social networking threats. The conference is being held at a fabulous venue, the Said Business School, which is famous for Read more…

Share

Are you part of the USA/South Korean DDoS attack?

DDoS attack against USA and South Korea

This question came up in a discussion on the recent DDoS attack on various US and South Korean sites. The main concern was if there was a way to tell if his/her computer had been compromised to be a part Read more…

Share

July 2009 Microsoft Security Bulletins

Default image

Latest set of Microsoft Security Bulletins comes only a day after the publicly exploited vulnerability in Office Web Components was disclosed and exploited by several websites hosted in China. There are 3 Bulletins rated Critical by Microsoft and those are Read more…

Share