- ChetWisniewski: Microsoft wasn't the only one to release patches on Valentine's. Adobe Shockwave and Oracle Java get critical fixes http://t.co/S26DjIl7about 1 hour ago
- SophosLabs: Warning - Whitney Houston autopsy video links on Facebook aren’t what they seem http://t.co/aLG1e7vY tip @techmemeabout 8 hours ago
- SophosLabs: Who has better privacy laws: USA or European Union? http://t.co/rQUnw2kW (via @mooseabyte)about 8 hours ago
- gcluley: Warning: Whitney Houston autopsy video links on Facebook aren’t what they seem http://t.co/sg98h50Fabout 8 hours ago
- SophosLabs: iPhone 5 tester SMS text scam hits cellphones http://t.co/0orOOGG7about 12 hours ago
Monthly Archives: July 2009
Are Apple Mac users perverts?
If the ad boys and girls could bottle the power of cyber-gossip, they would be set for life. Case in point: Did you all notice the sheer speed with which the story of Erin Andrews' naked video screeched around the Read more…
Which is more secure - Internet Explorer or Firefox?
I had an interesting inquiry from a Twitter follower earlier this week asking the question "Which would you say is safest, Firefox or IE?". Not a question that hasn't been asked before, but in light of the happenings of the Read more…
The Benign Phish of West Africa
Whilst the rest of the world flounders in insolvency there are several individuals whose scales are overflowing with ready cash. These pesky phishmongers claim to have several million dollars spare to allow the world economy to come up for air. Read more…
America! Stop helping spam spread and clean up your computers!
SophosLabs published some research today revealing that one in six spam emails are being relayed from compromised computers (which are part of hacker-controlled botnets) in the United States. Interestingly China and Russia seem to be sliding down the dirty dozen Read more…
Beware of malicious Rapidshare links sent to you by a friend.
I've got this e-mail from my former classmate about a week ago: Followed by another one last night: Needless to say, the links point to malware. The first URL was taken down. But the last one is still active, though Read more…
Erin Andrews peephole video spreads malware
Hackers have created webpages claiming to contain the notorious Erin Andrews peephole video in their attempt to infect Mac and Windows computers. Erin Andrews is a glamourous TV sports reporter on ESPN with many fans, so it's no surprise that Read more…
FakeAV -- Now with Porn!
Once upon a time, surfing to a compromised porn site exposed the user to fake antivirus software through driveby downloads. I recently came across a sample that turns this concept around. Running the executable file does nothing at first but Read more…
XP mode - demonstrating that security is never Microsoft's first priority
Sophos's Chief Technology Officer Richard Jacobs joins us as a guest blogger to discuss the implications of Microsoft including XP Mode in Windows 7. Over to you RJ.. Windows 7's planned XP compatibility mode risks undoing much of the progress Read more…
Google plugs high-risk hole in Chrome browser
Hot on the heels of a serious security update for its rival Mozilla Firefox, Google has released version 2.0.172.37 of its Chrome web browser which fixes a couple of security holes that could be exploited by users visiting a booby-trapped Read more…
Firefox 3.5.1 released to fix major security problem
As Beth reported on the SophosLabs blog a couple of days ago, there has been a lot of concern about a vulnerability in the recently released Firefox 3.5. The bug in Firefox 3.5's Just-in-time (JIT) JavaScript compiler was disclosed publicly, Read more…
AV Haters
Amateur malware authors come from various backgrounds and they each have their own agenda to convey. For example, there's one that attempts to educate computer users not to click on unknown links in emails. These amateurs clearly do not like Read more…
Twitter Worms - Koobface Diversifies
Last week we reported that Twitter was warning users that the Koobface worm was now targeting their social networking site. One thing that was noticeable about the attacks was that they were quite diverse for such a short space of Read more…
Trout sent to jail for 366 days after installing spyware
Tony Trout, a former council official in Greenville County, South Carolina, has been sentenced to one year and one day in jail after being found guilty of using spyware to read emails on a colleague's computer. According to prosecutors, Trout Read more…
Easy Steps to Stop Being Phished
Phishing has become an increasingly rampant threat in recent years. It is an Internet fraudulent act for the purpose of gathering sensitive information such as usernames, passwords and credit card details. A typical phish sends a deceptive email falsely claiming Read more…
FireFox may need asbestos suit
There's been quite a bit of buzz about the latest zero-day FireFox exploit. For those not in the know, it's a vulnerability in how JavaScript code is handled by their new TraceMonkey component. So this exploit only works in 3.5.x. Read more…
Cats demand spam in Russia
For some reason, one of my non-Sophos email addresses receives a lot of Russian language spam. I'm not sure why, because I don't speak the language and the address isn't connected with anything of a Russian nature, but I would Read more…
Talking social networking threats at Oxford
I was fortunate enough to be invited to speak earlier today at the Oxford University ICT Forum (ICTF) Conference about social networking threats. The conference is being held at a fabulous venue, the Said Business School, which is famous for Read more…
What would you do if you were a cybercriminal?
If you had someone else's social networking passwords, what do you think you would do with them? More importantly, if someone else had your social networking passwords, what do you think they might be able to do? Here are a Read more…
Are you part of the USA/South Korean DDoS attack?
This question came up in a discussion on the recent DDoS attack on various US and South Korean sites. The main concern was if there was a way to tell if his/her computer had been compromised to be a part Read more…
July 2009 Microsoft Security Bulletins
Latest set of Microsoft Security Bulletins comes only a day after the publicly exploited vulnerability in Office Web Components was disclosed and exploited by several websites hosted in China. There are 3 Bulletins rated Critical by Microsoft and those are Read more…


