TechBlog

We regularly learn of cases where criminals have gained access to credit card numbers via keyloggers, skimmers or online hacks. Once they have the credit card numbers, they basically have three ways to turn them into cash: Sell them Make fraudulent purchases on them Create real-world cards out of them To create real-world cards, you need blank cards to start with. These are known in the underground as “blank plastic“. ...

You can now access Google Buzz from your Android mobiles easily using the official Google Buzz widget, that lets you post text and photos with a single tap. The widget lets you choose to tag your post with the location or place from which it was posted. To save time, your posts will upload in the background. It is initially available in English for Android phones running v1.6 and later. To download it, search for ‘Google Buzz’ in the Android Market. Once installed, you can add it to home screen: tap “Menu” while on the home screen and select “Add > Widgets > Google Buzz”.

Microsoft is announcing an update to Windows XP Mode today that will make it a more accessible to PCs in small and midsize businesses who want to migrate to Windows 7 Professional but have applications that still require Windows XP. Windows XP Mode will no longer require hardware virtualization technology to run. This change makes it extremely easy for businesses to use Windows XP Mode to address any application incompatibility roadblocks they might have in migrating to Windows 7. Windows XP Mode will of course continue to use hardware virtualization technology such as Intel VT (Intel Virtualization Technology) or AMD-V if available. You can find more information and download the update which will go live later today here. ...

Are Mac OS X rogues an emerging threat? For many years discussions of the potential for malware on Macs have ended with the conclusion: “there isn’t much yet, but as soon as Mac gets a big market share the dark side is going to start writing the code.” There are indications that the bad guys are working on it. There have been some blog posts suggesting that the dark side is working hard to create a Mac OS X compatible rogue. SCMagazine is carrying a piece quoting a spokesman for researchers at Intego. Apparently Intego researchers got proof-of-concept code for an OS X rogue from underground sources and determined that it didn’t quite work. However, they concluded that some sophisticated coding was going on: ...

The more eagle-eyed Reader users have noticed a few tweaks being made to Reader’s mobile interface over the past few days: Google has brought over a few more features from the desktop version of Reader: magic ranking and search. Both can be found in the option drop-down menu. For better consistency with the desktop version, Google has made the titles of items be links to the original page The top of each item now has “collapse” and “next item” links. This way there’s always a consistent space for your thumb to hit so you can advance to the next item. Since Google know the best mobile content is short and sweet, they’re going to leave you with that. Feel free to get in touch with them on Twitter or on their help group with feedback on these changes.

Google has rolled out a significant update to the Google Maps application for Android 1.6+ devices, which includes a new search results page, support for multiple accounts, a new Latitude homescreen widget, and a new Maps live wallpaper for 2.1 devices. Previously, when you performed a search in Maps, you would have to choose a result from a list of markers on the map. When you clicked the marker, it would open a page with three tabs: Address, Details, and Reviews. Under the Address tab, there were options to Show the result on the map, get directions to it, call it, look at it in Street View, or add it as a contact. The other two tabs contain exactly what you’d expect, details and reviews. If you wanted to pick a different listing, you’d have to go back to the map view and pick a different marker. ...

Today has been quite a busy day for scammers. We have been tracking a global scam/spam run that targets Facebook users. The lure used in the run is a familiar one: Facebook Password Reset Confirmation! Customer Support. The email looks like the following [Just it won’t notify you it’s Spam, it’s my own Software 😉 ]: The activity on this particular scam run has been global from the beginning. The malware in the attachment is pretty much what one would expect: downloaders, password-stealing Trojan, fake-AV, or bot stuff, depending on which one you got. Check out the Artemis map of this malware: ...

Most of us are familiar with how high profile news events are used for malware distribution. We’ve seen it many times such as with Tiger Woods’ scandal and the earthquake in Haiti. Now the recent earthquake in Chile is used to prey upon unsuspecting folks interested in what’s going on with the post-quake and tsunami. This shows we should really be careful in our choices of where we go to get information. Try any related search term or phrase related to “Chile Earthquake”, “Tsunami”, etc. I’ve done so and will walk us through a few examples of risky to malicious content that my search turned up. This type of malware distribution tends to target the broadest audience possible, so I entered the search term “Chile” and then let Google auto-complete my search to “Chile quake 2010 tsunami” to load what is a popular search phrase. Almost immediately, among some recognizable news site results are random blog posts touting words like “download” or “.exe”. We should be suspicious of these. ...

About a year or so ago one of the “McMarketeers” decided it would be fun to run a campaign against “fram”–spam that friends send you. As you might guess, we in the Labs have no friends, so it was no problem for us to ridicule the idea. However, around the coffee machine the other day I got involved in a quick discussion about spam on Facebook. A long-term social networker genuinely thought that Facebook spam did not exist and that all the noise was from Facebookers playing games or using annoying apps. So I offered to write up an example. ...

Apple yesterday released a huge Safari update that fixes 16 vulnerabilities – six for Windows versions and ten for Mac OS X and Windows. The update, Safari 4.0.5, makes fixes in Tiger, Leopard, Snow Leopard and Windows versions. This is probably pretty significant. In November, the TheInquirer.net of the UK carried a piece about browser vulnerabilities that rated Firefox and Safari as the ones with the most vulnerabilities: ...