System Defender

Author: Omid Farhang Published: January 21, 2010 Reading Time: 1 min

System Defender is a rogue antispyware program, or a PC infection made to look like real security software. System Defender is a scam designed to trick people out of their money. If your PC has been infected with System Defender, you will most likely experience the following symptoms: System scans that report numerous infections, yet requires purchase of System Defender before it will remove the infections (These are fictitious scan results) Alerts and Pop-Up system warnings stating the PC is infected and recommend purchase of System Defender (These warnings are fake) Web browser redirecting to random websites (these websites are owned by cyber thieves and will further infect your PC) System Defender will prevent other programs from opening, stating they are infected (The programs are not infected) System Defender is a very serious computer infection and should be removed from infected machines immediately.

Continue Reading System Defender

ProtectSoldier

Author: Omid Farhang Published: January 21, 2010 Reading Time: 1 min

ProtectSoldier is the latest rogue antispyware program released by cyber thieves to terrorize PC users. ProtectSoldier is phony security program that trick people into buying the software with false security warnings and system scans. By displaying false system warnings, pop-up alerts warning of infections, and system scans that state the PC has numerous infections, cyber thieves rip people off by demanding the user buy the program to remove the supposed infections.

Continue Reading ProtectSoldier

ArmorDefender

Author: Omid Farhang Published: January 21, 2010 Reading Time: 1 min

ArmorDefender is the latest rogue antispyware program released by cyber thieves to terrorize PC users. ArmorDefender is phony security program that trick people into buying the software with false security warnings and system scans. By displaying false system warnings, pop-up alerts warning of infections, and system scans that state the PC has numerous infections, cyber thieves rip people off by demanding the user buy the program to remove the supposed infections.

Continue Reading ArmorDefender

Antivirus360

Author: Omid Farhang Published: January 21, 2010 Reading Time: 1 min

Antivirus360 is a phony antivirus program, designed to rip people off. Cyber thieves who created phony software like Antivirus360 use scare tactics to frighten people into buying the software. Antivirus360 will show false security warnings and scan results stating the PC is infected and request payment for the software to remove the supposed infections. Antivirus360 is a complete scam and a potentially very dangerous PC infection that should be remove from infected computers.

Continue Reading Antivirus360

Charities fight for piece of $5 million prize on Facebook

Author: Omid Farhang Published: January 21, 2010 Reading Time: 4 min

(CNN) — This week, 100 charities are battling for votes on Facebook to win $1 million. The competition is a new approach to philanthropic giving and is led by JPMorgan Chase, which throughout the competition will donate a total of $5 million to 100 charities chosen by Facebook users. Traditionally, organizations would go through a grant process, and Chase would choose who would get its money and how much. However, late last year, Chase decided to take a different approach and put the power of choosing charities into the hands of Americans. Chase took a database filled with 500,000 nonprofit organizations and uploaded the information on to Facebook. The bank then allowed “crowdsourcing” to choose which charities should be recognized. The top 100 charities won $25,000 and advanced to the second round, where another vote will determine which organization will win $1 million. The five runners-up in the second round will receive $100,000 each. Another $1 million will be given to a single charity chosen from the original group by a Chase board of directors set up to oversee this competition. The concept of crowdsourcing corporate giving via online communities and voting was first used by American Express in 2007. In the Members Project, American Express would donate $5 million to charities submitted and selected by card members. But Chase has taken a huge leap by moving the entire competition to Facebook. “We wanted to find a way where we could hear from the communities we were operating in and hear what was important to them,” said Chase Community Giving foundation President Kim Davis. The philanthropic arm of the large bank donates annually $100 million to organizations around the world, Davis said. “This, for us, is very much about testing out a new way of doing corporate philanthropy for the firm.” More than a million fans have participated in the Facebook program. Along the way, obscure charities have joined better-known ones near the top of the rankings. Because the winners of the first round worked hard to organize their online communities, smaller charities with get-out-the-vote passion were able to compete with larger organizations. Thus, the final 100 charities range from the large Susan G. Komen for the Cure (which claims on its Web site to be the “world’s largest grassroots network of breast cancer survivors and activists”) to the Feel Your Boobies foundation, started by a woman in her garage, who wants to increase awareness of breast cancer screenings in young women. As of midday Thursday, the top vote-getting charity on the contest’s Facebook page was Invisible Children Inc., a nonprofit that seeks to combat child-related violence in Africa through documentary storytelling. Other companies are starting to pick up on crowdsourcing corporate philanthropy. ...

Continue Reading Charities fight for piece of $5 million prize on Facebook

“Aurora” update brief DoS

Author: Omid Farhang Published: January 21, 2010 Reading Time: 1 min

Early this afternoon Microsoft released an out-of-band security bulletin patching the vulnerabilities in Internet Explorer. The fix has been at the top of the news since the vulnerabilities it treats are believed to have led to the compromise of Google and about 30 other companies last week in what has been called the “Aurora” attack. The governments of France and Germany suggested that Internet users switch to a different browser until the vulnerability was fixed. ...

Continue Reading “Aurora” update brief DoS

ProtectDefender

Author: Omid Farhang Published: January 21, 2010 Reading Time: 1 min

ProtectDefender is a new clone of the WiniGuard family.

Continue Reading ProtectDefender

Web users still don’t select good passwords

Author: Omid Farhang Published: January 21, 2010 Reading Time: 2 min

Security firm Imperva of Redwood Shores, Calif., found a unique way to gage the quality of the passwords that Web users select: they analyzed the 32 million passwords in the unencrypted file of passwords that miscreants stole from the servers of RockYou.com in December and posted on the Internet. RockYou creates and distributes entertainment widgets that work with social networking networks. What they found wasn’t good, according to their report. “Key findings: — About 30% of users chose passwords whose length is equal or below six characters. _ _ — Moreover, almost 60% of users chose their passwords from a limited set of alpha-numeric characters. _ _ _— Nearly 50% of users used names, slang words, dictionary words or trivial passwords (consecutive digits, adjacent keyboard keys, and so on). _ _ _ The most common password among Rockyou.com account owners is “123456”. ...

Continue Reading Web users still don’t select good passwords

Targeted Attack using "Operation Aurora" as the lure

Author: Omid Farhang Published: January 21, 2010 Reading Time: 1 min

Now here’s an interesting turn of events. In the middle of all the attention to the “Operation Aurora” attacks, we’re now seeing new targeted attacks that are using this very event as the lure to get the targets to open a malicious attachment! Here’s the email we saw: The attachment Chinese cyberattack.pdf (md5: 238ecf8c0aee8bfd216cf3cad5d82448) is a PDF file which exploits the CVE-2009-4324 vulnerability in Adobe Reader (again, this is the one which was patched last week). ...

Continue Reading Targeted Attack using "Operation Aurora" as the lure

Intelligence sector hit by a targeted attack

Author: Omid Farhang Published: January 21, 2010 Reading Time: 1 min

We just blogged about a highly targeted attack against military contractors. Now we saw one against the intelligence sector. This attack was done with a PDF file. Again. It was targetting the CVE-2009-4324 vulnerability. Again. When opened, the PDF file (md5: c3079303562d4672d6c3810f91235d9b) looked like this: What really happens in the background? Just like last time, the exploit code drops a backdoor in a file called Updater.exe (md5: 02420bb8fd8258f8afd4e01029b7a2b0). Now, what is the document talking about? President’s day? DNI Information Sharing Environment? We don’t know, but a quick web search tells us that apparently there is going to be an Intelligence fair & expo in Germany next month. ...

Continue Reading Intelligence sector hit by a targeted attack