Malware

Firefox to introduce click-to-play option to protect against dangerous plugins

by Chester Wisniewski on May 5, 2012 | 18 Comments

Mozilla developer Jared Wein is introducing a new security feature to Firefox 14 called click-to-play. Plugins will not load automatically when visiting websites using things like Flash and Java requiring the user to click before the content is loaded. This could prevent many common drive-by attacks on the web.

BBB assistance malware attack strikes again

by Graham Cluley on May 4, 2012 | 4 Comments

Once again, cybercriminals have spammed out emails claiming to come from the Better Business Bureau (BBB), with the intention of infecting Windows computers with malware.

Notcom malware for Android distributed using drive-by downloads

by Chester Wisniewski on May 3, 2012 | 2 Comments

Another Android Trojan is making the rounds, this one is distributed through drive-by downloads on compromised websites. Whether it's a proxy or a bot is not really important, make sure you don't install unsolicited packages on your phone.

Iran makes its own anti-virus software - would you buy it?

by Graham Cluley on May 3, 2012 | 14 Comments

Iran is reported to have started making its own anti-virus software.

Would you buy it?

View from the IT desk: A little more conversation, a little less action

by Carl Blackett on May 1, 2012 | 11 Comments

A computer appears to have been hacked, or infected by malware.. but is there a more down-to-earth explanation?

Carl Blackett, an ICT Security Architect at Norfolk County Council, explains why you shouldn't be too quick to push the panic button.

Porn spam campaign redirects web browsers to hardcore websites

by Graham Cluley on April 30, 2012 | 3 Comments

SophosLabs has been intercepting an X-rated spam campaign, designed to promote hardcore porn websites.

Emails have been spammed out purporting to have an adult video attached, using a variety of names.

Python-based malware attack targets Macs. Windows PCs also under fire

by Graham Cluley on April 27, 2012 | 17 Comments

A new malware attack is targeting Mac computers with a Python-based backdoor Trojan.

And Windows computers aren't getting away scott free either.

Opinion: America is under cyber attack, so what should we do?

by Carole Theriault on April 27, 2012 | 20 Comments

US House of Representatives kicked off “cybersecurity week,” with "America is Under Cyber Attack: Why Urgent Action is Needed." Is using Hollywood-style language really the way to deal with a really serious issue?

The Legend of Zelda and dirty tricks by Android apps in the Google Play store

by Graham Cluley on April 26, 2012 | 2 Comments

Shady tricks by Android apps, as coders steal intellectual property and introduce excessively aggressive advertising frameworks to make money.

Internet doomsday on July 9th? Don't panic!

by Beth Jones on April 25, 2012 | 12 Comments

Users may not realise now that their computers are using rogue DNS servers to access the internet... but come July 9th, things might be rather different.

Find out how to check your computer, and how Sophos products can help.

Facebook teams up with Sophos and other security vendors

by Carole Theriault on April 25, 2012 | 15 Comments

Facebook has announced that it is teaming up with a number of security vendors, including Sophos.

1 in 5 Macs has malware on it. Does yours?

by Graham Cluley on April 24, 2012 | 59 Comments

One in every five Mac computers is harbouring some kind of malware, a new study from the experts at Sophos has revealed.

Sophos has revealed a disturbingly high level of malware on Mac computers - with both Windows and Mac threats being discovered.

Iran oil terminal suffers malware attack

by Chester Wisniewski on April 23, 2012 | 5 Comments

The Mehr news agency in Iran is reporting that the oil ministry and entire industry has been taken offline after suffering a malware attack.

India becomes the king of the spammers, stealing America's crown

by Graham Cluley on April 23, 2012 | 8 Comments

SophosLabs reports on the top twelve spam relaying countries for January - March 2012.

SSCC 88 - iTunes security, Mac malware and Google's FCC fine

by Chester Wisniewski on April 22, 2012 | 2 Comments

Chester Wisniewski and Paul Ducklin chat about the security issues surrounding Apple's new iTunes security, knowledge-based authentication, Mac malware and Google's fine from the FCC.

IMG0893.zip - Your photo all over Facebook? Naked? Malware campaign spammed out

by Graham Cluley on April 20, 2012 | 8 Comments

SophosLabs is intercepting a spammed-out malware campaign, pretending to be an email about a revealing photo posted online of the recipient.

The emails, which have a variety of subject lines and message bodies, arrive with an attached ZIP file (IMG0893.zip) which contains a Trojan horse.

Only 4% of IT staff trust users: free security toolkit now available

by Carole Theriault on April 18, 2012 | 17 Comments

User education is of course a great idea, but we all know how hard it is to get the messages across in a clear and memorable way. Sophos launches a free education toolkit to help the poor IT guys who are responsible for user education.

Fake Instagram app infects Android devices with malware

by Graham Cluley on April 18, 2012 | 19 Comments

Tempted to try out the much talked about Instagram app? Well, be careful where you get it from - as malware authors are distributing malware disguised as the popular app.

FLAMING RETORT: All this new Mac malware - whose fault is it?

by Paul Ducklin on April 17, 2012 | 35 Comments

Flaming Retort is back, this time trying to Coole and Explayne the flames we've had from some Mac users in the past few days.

In a back-to-front way of making Mac fans feel better, I'll start by making everyone feel slightly worse, taking a small potshot at Windows, OS X and Linux fans alike.