Malware

SPOTLIGHT ON SECURITY

Google Play Misses Dangerous Apps at Border Control

Despite yeoman efforts by Google to close a critical hole in its Android mobile OS that allows any app to be turned into a malicious Trojan, programs are still appearing in the company's Google Play store with the flaw. A number of apps containing the so-called MasterKey vulnerability were discovere...

Lumbering like the old-school technology firms it sometimes derides, Google has finally issued a patch for a master key vulnerability in Android that Bluebox called to its attention back in February. "Is Google eating their own dog food?" asked Randy Abrams, a research director at NSS Labs. In May, ...

SPOTLIGHT ON SECURITY

Hackers Find WordPress Easy Pickings

Adobe Reader and Oracle Java aren't alone in having a bull's eye painted on their code. WordPress also is becoming a popular target for Internet outlaws. It's quite a large target, too. About 18 percent of the sites on the Web -- about 60 million of them -- use WordPress. One reason WordPress is att...

SPOTLIGHT ON SECURITY

Cybersecurity Tops the Agenda in U.S.-China Weekend Talks

Among the issues on the agenda for the talks over the weekend between China's President Xi Jinping and U.S. President Obama were cybersecurity and attacks on U.S. targets by hackers based in China. Even if China had the will to act against hackers within its territory, doing so wouldn't be easy. "Th...

A coalition comprising Microsoft, the FBI, financial industry companies and technology firms has taken out more than 1,400 botnets that used the Citadel Trojan to steal victims' online banking information and information about their identities. "This was a lengthy process, and we relied heavily on o...

This coming weekend's cybersecurity talks may have already started. China's state-run newspaper ran an article claiming that the government has "mountains of data" proving it has been the victim cyberespionage at the hands of the United States. The report precedes the upcoming landmark meeting betw...

Cybercriminals use zero-day and unpatched application vulnerabilities to install data-stealing malware on corporate endpoints because these are -- and will continue to be -- an issue with virtually all software applications. Zero-day exploits that take advantage of unknown vulnerabilities are the ha...

Mozilla, the creator of the Firefox browser, has sent a cease-and-desist letter to Gamma International, a German company that sells spyware to governments and law enforcement agencies. The move was a reaction to the news that a booby-trapped Microsoft Word document -- sent out for upcoming Malaysian...

SPOTLIGHT ON SECURITY

Report: Criminals Put a Bull’s-eye on Web Infrastructure

Cybercriminals have begun focusing their malicious endeavors on the sinew of the Internet to reap greater rewards. For months now, Net bandits have targeted key infrastructure elements -- from the domain-naming service to certificate-issuing authorities to hosting services -- in order to spread cash...

Bing may be engaged in a "Scroogled" marketing campaign, but an 18-month study by an antivirus security firm shows that Microsoft's search engine may need to play some defense, thanks to results showing more malware-infected links popping up in its search results than for Google. The study by AV Tes...

Andy Rubin was Google's Steve Jobs, and with him now booted off the Android product, that platform in its current form will pass. It is kind of funny to see the spin on this, which suggests this was Andy's decision. Yeah right, and I'll be buying that bridge in Brooklyn shortly. While there likely w...

SPOTLIGHT ON SECURITY

Hacks, Hijacks and Hunts for Chinese Data Thieves

Still smarting from a recent attack on its systems, Facebook started its week with a discovery by researchers at Bitdefender that an infected add-on at the Chrome Web Store was planting malware on its members' computers. The malware, among other things, was padding the Like counts on dummy Facebook ...

A study on Chinese hacking practices issued by U.S. security firm Mandiant sent shock waves Wednesday through the technology and business worlds. A large number of cyberattacks on American corporations, organizations and government agencies are coming from a building near Shanghai that houses, as on...

Europol announced Wednesday the breakup of a gang of cybercriminals who allegedly ran a ransomware scheme to extract money from online users in 30 countries. Spanish police, working alongside Europol's European Cybercrime Center, made 11 arrests in an action dubbed "Operation Ransom." The cyberthiev...

The European police agency, Europol, announced Wednesday that it had dismantled a Russian-led, Spain-based cybercrime organization. The organization reportedly extorted millions of euros across more than 30 countries, mostly in Europe. The group's plan was to convince Internet users to pay fines, s...

Technewsworld Channels