Monthly Archives: August 2009

Don't Get Mounted By New World of Warcraft Mounts

Image (1) wow.png for post 24294

Today SophosLabs received a phishing scam targeting the popular online game "World of Warcraft" (WoW). This scam message disguises itself as an official Blizzard Entertainment (makers of WoW) email and states that the company is about to launch a new Read more…

Share

Podcast explores the Delphi Induc virus

Default image

Sean Richmond, Senior Technology Consultant at Sophos Australia, discussed the W32/Induc virus with Patrick Gray on this week's Risky Business show. If you're interested in finding out more about this curious malware with an affinity for the Delphi programming language, Read more…

Share

What should we do with the Induc infections?

Image (4) fly-in-soup.jpg for post 14816

The Induc virus continues to make the headlines, with infected files being found even on the free cover CD ROMs given away by magazines. Paul Ducklin, Sophos's Asia-Pacific head of technology, wonders how should anti-virus vendors be responding? By the Read more…

Share

Google: Top things you may want to remove from your PC

Image (1) google.jpg for post 14813

I'm not the only Graham who works at Sophos you know. For instance, there's Graham Chantry, one of our software engineers. He contacted me earlier today because he had seen something that had tickled his fancy. When Graham typed "remove" Read more…

Share

Magazine ships Induc Delphi virus on cover CD ROM

Image (1) bild-cdrom.jpg for post 14807

According to German media reports, a popular computer magazine is on sale in the country containing a copy of the W32/Induc-A Delphi virus on its free cover CD ROM. The 18/2009 edition of ComputerBild, one of Germany's biggest computer magazines Read more…

Share

Twitter spammers post sexy profile pictures

Image (2) twitter-avatar-spam.jpg for post 14802

I woke up this morning to find a long list of new people following me on Twitter, and it looks like I wasn't the only one. Curiously, all of the followers appeared to have something in common. Spammers have created Read more…

Share

TV station finds failing to renew its anti-virus subscription can be really embarrassing

Default image

Failing to renew your anti-virus subscription isn't just bad for security, it can also leave you looking a little silly. Here's what happened to a FOX TV station in the States, when it failed to renew its copy of Norton Read more…

Share

Is your smartphone encrypted?

Default image

More and more people working in the wonderful world of IT find their lives revolutionised by mobile technology. Chances are that many people reading the Clu-blog have been given the wonderful gift of 24/7 connectivity with their office overlords, whether Read more…

Share

Sophos is not false alarming on the Delphi Induc virus

Image (1) false-alarm.jpg for post 14796

Robert Poston over in the Vancouver branch of SophosLabs has posted an recently reported W32/Induc-A virus. As Robert explains, in all cases Sophos's detections were shown to be legitimate and the files were infected. Indeed, it seems that it is Read more…

Share

Does the W32/Induc-A Delphi virus infection only happen to other people?

Image (1) jaywalking.jpg for post 20027

Every day, on my walk to work through downtown Vancouver, I pass a poster for a road safety campaign. It says "Being hit while jaywalking only happens to other people..." As someone who originates from England, where jaywalking is normal Read more…

Share

W32/Induc Delphi virus infections explored

Default image

In the last 2 days there has been considerable interest in the Delphi source code infecting malware that Sophos is detecting as W32/Induc-A. Richard Cohen initially blogged about it here and Graham Cluley later posted here. In his post, Graham Read more…

Share

W32/Induc-A virus being spread by Delphi software houses

Image (1) delphi-statue.jpg for post 14794

Richard Cohen, one of the analysts at SophosLabs, blogged yesterday about a curious piece of malware designed to infect applications written using Delphi (a variant of the Pascal language originally developed by Borland, and now used to quickly develop Windows Read more…

Share

P2P file-sharing banned in Antarctica

Image (1) antarctic.jpg for post 14788

Employees of the United States Antarctic Program (USAP) have been reportedly told that they are not permitted to run peer-to-peer file-sharing programs such as BitTorrent, KaZaa and Limewire.

Share

More Than Just A Beep On The Radar Screen

More Than Just A Beep On The Radar Screen

As virus analysts, all of us have to be constantly on our toes because honestly we never know what to expect. Let me take you through a quick summary of what happens in a typical analysis of a malware sample. Read more…

Share

Compile-a-virus - W32/Induc-A

Image (2) induc-a.jpg for post 14794

Here's something you don't see every day - a virus that infects Delphi files ... at compile-time. When a file infected with W32/Induc-A runs, it looks to see if it can find a Delphi installation on the current machine. If Read more…

Share

Is XP Mode in Windows 7 a positive step for security, or not?

Image (4) windows7-xpmode.jpg for post 14784

Sophos's Chief Technology Officer Richard Jacobs is once again guest blogging about XP Mode in Windows 7. The issue.. How are you going to manage its security? Over to you RJ.. Well, Microsoft seems to be aware that there are Read more…

Share

Will Yahoo Cent Mail Stop Spam

Image (1) spamcartoon-sm.jpg for post 24266

Yesterday Yahoo announced that they wanted to introduce a paid for email service to reduce spam. The idea is that each time you send an email you pay 1c to charity. The idea being that most people send a small Read more…

Share

Three men charged in 130 million credit card identity theft

Image (1) hannaford.jpg for post 14780

Chances are that you've seen the stories about what some are calling "the largest case of computer crime and identity theft ever prosecuted." 28-year-old Albert Gonzalez, and two unnamed Russian men, are accused of stealing more than 130 million credit Read more…

Share

New Industry Collaboration Initiative

Default image

The security industry, and in particular those offering anti virus solutions have a history of collaboration. From the very early days when computer viruses first appeared, researchers have shared samples. In those early days the community was very small, and Read more…

Share

Facebook fanatics, playing with fire?

Image (1) vampirewars.jpg for post 24259

Those of you reading this who have Facebook accounts must be feeling some of my pain with regard to game invities. Day in, day out, they stream in. "Joe has invited you to join his clan in Vampire, Mafia, Mob, Read more…

Share