Eye on Security: Windows Ransomware, DLL Hole, Malware, and More
- Dr. Roy Schestowitz
- 2010-09-03 06:46:58 UTC
- Modified: 2010-09-03 06:46:58 UTC
Summary: Menaces and unpleasant 'niceties' that only affect users of Windows this week
●
Russian cops cuff 10 ransomware Trojan suspects [
via]
PCs infected by the WinLock Trojan at the centre of the scam were rendered unusable because the malware disabled key Windows components. More embarrassingly pornographic images were displayed on compromised machines, IDG adds.
●
Polymorphic ransomware tops malware charts
Ransomware variant TotalSecurity is topping the malware charts, according to the latest threat report from security firm Fortinet.
August was the biggest comeback month since March for TotalSecurity, which locks out applications and data, and then demands a ransom to restore access.
●
Microsoft Releases 'Fix It' for DLL Hole
The DLL security vulnerability first grabbed headlines in August when a Slovenian security research firm pointed out that, under some circumstances, a malicious hacker could deploy a booby-trapped DLL file into a directory where Windows will load it, potentially granting the attacker control over the system. But it later surfaced that a U.S. security researcher had warned Microsoft about the DLL issue almost a year before, and had even published an academic paper on the threat last month.
●
Google Code hosting malware-spreading project
Google Code's project hosting feature has occasionally been used by malicious individuals for storing and spreading malware.
[...]
After this discovery was made public, Google removed the offending project. But this instance shows that the company must find a better way of detecting malware hosted on its sites.
●
University loses nearly 1 million dollars to malware
Thieves appear to have stolen the funds from University of Virginia after compromising a computer belonging to the University's Financial Controller. Malware intercepted the Online Banking Credentials for the University's Bank accounts and initiated a fraudulent wire transfer for $996,000 to a Bank in China.
●
25 percent of Windows malware now targets USB storage devices
In a survey of small businesses, PandaLabs discovered that 48 percent had been victims of malware in the past year. Of those businesses infected, 27 percent were able to verify that a compromised USB device was at the root of the issue.
●
New malware detects browser, shows fake malware warning page
While the malware is a pretty good attempt, it's not perfect. The goal is to get the user to download and install something, shelling out some cash in the process, which neither of the three browser vendors would ever recommend. The Firefox warning page, meanwhile, has an obvious typo ("Get me our of here"). In addition, it's suspicious that a webpage is going out of its way to tell you it is protecting your purchase. It's also not hard to check that the supposedly detected files do not actually exist on the user's computer. All of these missteps should raise red flags immediately; having said that, we've still not before seen this level of detail and effort from the bad guys.
●
Heartland pays another $5.4m for malware infection
The United States' fourth largest credit card payments processing company Heartland Payment Systems has agreed to pay a US$5 million ($5.4 million) settlement to its financial services customer Discover over a data breach caused by a malware infection.
Heartland processed card payments for Visa, Mastercard and other financial service providers to the tune of US$70 billion in 2009.
●
Rogue Win7 AV Copies the Microsoft Security Essentials Site
There are downsides to market success, and in the case of Microsoft Security Essentials is that attackers build malware designed to piggy-back ride the free security solution from Microsoft.
Recent Techrights' Posts
- Microsoft Windows Falls to 19% in Congo, Only About 1 in 8 Windows Users (or 2-3% of Web Users) Are on Vista 11
- The estimated share of Vista 11 fell sharply this past month
- Twitter as X-Rated Hatred: Criticising Microsoft is Not OK, Calling for Beheadings (With Bounties on People's Heads) is OK
- Twitter automation missed 'hit job' advertising
-
- Another Case Study Regarding Edge's Death
- people adopt Chrome and a lot more people use obscure browsers than adopt the latest Edge
- [Meme] A Question of Interests
- 'The Internet? We are not interested in it.' -Bill Gates, 1993
- In the Romanian Browser Market, Microsoft is the 2% (Edge Down to 2.3%)
- the Wintel era has ended
- Gemini Links 17/08/2024: Selfishness and Offline BBSing
- Links for the day
- Frans Pop & Debian Day 2024: 31 years of deception and modern slavery
- Reprinted with permission from Daniel Pocock
- Over at Tux Machines...
- GNU/Linux news for the past day
- IRC Proceedings: Friday, August 16, 2024
- IRC logs for Friday, August 16, 2024
- Links 16/08/2024: YouTube Bans and Surveillance Expanded
- Links for the day
- We Were Right All Along and the Collaborators of Microsoft Helped Competition Crimes of Microsoft
- Once again vindicated regarding UEFI "secure boot"
- [Meme] The New Windows Slogan
- stat me up
- Addendum: Associate's Notes on Free Software as a Labour Issue and the Connectivity Swindles
- these are related issues/causes
- Microsofters Infiltrating Roles of Authority and Government Positions to Protect Microsoft and to FUD Microsoft's Competition
- friends of Microsofters who bully me and my wife
- Links 16/08/2024: UK Skills Deficit and Kim Dotcom to be Extradited to the US (for Doing the Same Stuff GAFAM Does)
- Links for the day
- Gemini Links 16/08/2024: Overgeneralisation and Games
- Links for the day
- Russia's Yandex 5 Times Bigger Than Microsoft... in Ukraine
- They'd rather rely on the Kremlin than on Microsoft
- [Meme] Gemini is Different, So What?
- different, not worse
- Now It's "Official": Over 4,000 Known Gemini Capsules in Lupa
- For the first time ever
- Clown Computing
- Reprinted with permission from Dr. Andy Farnell
- [Meme] What Freedom Means to IBM
- Free labou
- Balancing Activism Against (or With) Basic Necessities and Daniel Cantarín on Our Collective Battle for Software Freedom Around the World
- "I'm VERY angry about lots of stuff happening here in Argentina, all of it shielded behind the word "freedom"."
- Over at Tux Machines...
- GNU/Linux news for the past day
- IRC Proceedings: Thursday, August 15, 2024
- IRC logs for Thursday, August 15, 2024
- From 99% in 2012 to 27% in 2024: How Microsoft Lost Georgia
- What we're seeing is a migration from Windows to other platforms, notably GNU/Linux
- To Understand Cisco's Mass Layoffs Look at the Company's Soaring Debt (Same at Microsoft)
- Look what's happening to Intel - down almost 60% since the start of the year, 57% to be precise
- Windows Flying Low at 25%
- It's another all-time low
- [Meme] Long Texts You Never Bother Reading (Because Life is Too Short, Unlike Those Texts)
- The devil is in the terms of service
- Links 15/08/2024: Monkeypox Hysteria and Modern Homesteaders Living Off the Grid
- Links for the day
- Gemini Links 15/08/2024: Confession of a Convention Game Master and Some Release nostalgia
- Links for the day
- Congratulations to Romania, Where Windows is Now "Minority Market Share" Platform
- Time will tell if GNU/Linux can pass 5% on the desktop/laptop "form factor" there
- Why It Matters That 4,000 Gemini Capsules Are Known to Lupa and Why Gemini Protocol Matters to Us
- I have no doubt Gemini Protocol will continue to expand because it solves a real problem
- Links 15/08/2024: Avast Surveillance Scandal Unsolved and Facebook Still Censors Terror Sympathisers
- Links for the day
- Daniel Cantarín's Response to Alexandre Oliva's Talk on Achieving Software Freedom in the Age of Platform Decay
- Soylent News caught up with the series
- 4,000 Gemini Capsules
- it's basically one capsule short of 4,000
- "Microsoft is a Sponsor of The New Stack."
- Many articles turn out to be just ads
- New Highs for Android in Russia, But It's Reportedly Working on Its Own Linux-Based Operating Systems (GAFAM-Free)
- statCounter isn't equipped to properly parse user agents or to keep up
- Upcoming Series: Terms of Service (TOS) Under the Microscope, FSF Party, GitHub Scandals, Clowns, and More
- Right now we have way more material than we have time to cover. But that's a good thing.
- Gemini Links 15/08/2024: Lies of Therapy and Web Applications
- Links for the day
- Software Freedom in Perspective - Part 5 - When Richard Stallman Came to Argentina
- It might seem a bit harsh, but a discussion at the end of this series will tie things together and explain why those things were said
- Over at Tux Machines...
- GNU/Linux news for the past day
- IRC Proceedings: Wednesday, August 14, 2024
- IRC logs for Wednesday, August 14, 2024