Hackers Leak Antipiracy Vendor's E-Mail
677536
Messages tell purported plans of MediaDefender, hired to ferret out file-sharing violations.
398227
An e-mail that tricks Linux users to download a fake update from Red Hatâs security team is currently doing the rounds of the Internet.
146885
(InfoWorld) - Usernames and passwords for more than 100 e-mail accounts at embassies and governments worldwide have been posted online. Using the information, anyone can access the accounts that have been compromised. Computer Sweden Â has verified the posted information and spoken to the person who posted them. The posted information includes names of the embassies and governments, addresses to e-mail servers, usernames and passwords. Among the organizations on the list are the foreign ministry of Iran, the Kazakh and Indian embassies in the U.S. and the Russian embassy in Sweden. Freelance security consultant Dan Egerstad posted the information. He spoke openly about the leak when Computer Sweden contacted him. "I did an experiment and came across the information by accident," he said. Egerstad says he never used the information to log in to any of the compromised accounts in order not to break any laws. Computer Sweden confirmed that the login details for at least one of the accounts is correct. Egerstad forwarded an e-mail sent on Aug. 20 by an employee at the Swedish royal court to the Russian embassy. The person who sent the e-mail, in which she declines an invitation to the Russian embassy, has confirmed that she sent the e-mail. "Yes, that is right. We did decline the invitation. As far as I can remember I did send the e-mail," she said. Computer Sweden has not been able to confirm the authenticity of any of the other information that has been posted. "When something like this happens you usually contact people and ask them to fix it. But in this case it felt too big for that, calling to other countries," Egerstad said. Of the compromised accounts, 10 belong to the Kazakh embassy in Russia./p> Around 40 belong to Uzbeki embassies and consulates around the world. Login details for e-mail accounts at the U.K. visa office in Nepal were also posted. Login details for the foreign ministry of Iran, the Kazakh and Indian embassies in the U.S. and the Russian embassy in Sweden were also posted. "I hope this makes them take action. Hopefully, faster than ever before, and I hope they become a bit more aware of security issues," Dan Egerstad says. Computer Sweden has contacted both the Russian and Indian embassies in Stockholm for comment. The Russian embassy confirmed the leaks and says that logins have now been changed. The Indian embassy declined to confirm the information and give comment. Computer Sweden has not published where the login details can be found. The information in this story has been verified by Computer Sweden without using any of the published login details. Computer Sweden is an InfoWorld affiliate.
92344
Blog: The most serious involves poisoned PDF files. The update also includes patches for Bind, Fetchmail, and GNU Screen.
187938
Beware of any e-mail claiming to come from "frauddep@ftc.gov"--it carries a nasty payload.
91495
An e-mail disguised as a Red Hat patch update is a fake designed to trick users into downloading malware, the Linux vendor warned in a message on its Web site.
531535
Phisher 'Vladuz' dodges eBay's defenses &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
758518
InfoWorld - A new hacking method is causing concern for the lengths it goes to avoid detection by security software and researchers.
212695
Internet spammers launched a widespread attack on e-mail inboxes this month. But instead of trying to lure users into opening a corrupted attachment, they're concealing a computer virus in a link to an online greeting card.
714470
An identity-stealing e-mail Trojan horse that disguises itself as the Lycos Europe antispam screensaver is being distributed around the Internet, an antivirus company has warned.
20758
Linux maker Red Hat is warning users about an email that pretends to be an official security advisory but is actually a phishing-type scam that contains links to malicious code.
375065
Microsoft has confirmed that criminals are e-mailing Word attachments that contain malicious code, with two vulnerabilities in the ubiquitous word-processing software now being exploited.
295969
Vendors ship updated packages to fix the problem that could allow an attacker to take control of a system.
3066
Skype warns users password-stealing Trojan horse is making the rounds, disguised as a Skype security plug-in
583320
Online auction house eBay confirms reports that some of its users have been hit by fake e-mails that could steal their account details.
540571
A security vendor is warning of a malware in the form of a flirtatious robot.
594242
(InfoWorld) - Computer security analysts who fight spam face the same thankless task as goalkeepers: They don't get much credit for the unsolicited e-mail they stop, only demerits for the ones that get through. But those few messages thatÂ wriggle past increasingly sophisticated filtersÂ constitute the greatest threats on the Internet. The messages range from relatively harmless pitches for human growth hormones to ones with malicious code attached that could steal passwords or documents from a machine. TheÂ sheer volume of spamÂ still threatens to bring the Internet to a crisis point. Up to 90 percent of all e-mail traffic is spam, a figure that has crept upward in recent years. The forecast isn't good, either. "We see spam just going up to the point where Internet servers start having difficulty," said Steven Linford, chief executive officer of Spamhaus, a London nonprofit organization that generates a list used by technology companies and organizations running e-mail servers to block spam. "Spam will tend to increase to where it will be 99 percent of all e-mail on the Internet," he said. "At that point, governments will start to take notice." The front line of defense for most computers connected to the Internet is anti-spam software that tries to determine whether a message is legitimate. Anti-spam software uses a number of methods to make that decision. The software can block messages coming from a particular IP (Internet Protocol) address of a computer known to send spam. Messages containing links to potentially harmful Web sites can be halted using URL (uniform resource locator) filtering. Security vendors can tweak special "rules" for their anti-spam engines, such as blocking messages containing certain kinds of text identified as common to spam. Anti-spam software usually aims to filter out 98 percent of bad messages -- any higher level of filtering tends to snag real messages and cut off critical business communication. So spammers are aiming for the narrow, 2 percent window -- and even in the last few months have honed new methods to hit the inbox bull's eye, experts say. Sophos, one of many security vendors with anti-spam software, has analysts stationed at four labs -- in Abingdon, England, Vancouver, Boston, and Sydney -- watching the Internet 24 hours a day, seven days a week for threatening spam and malicious software. Sophos' lab in Abingdon doesn't look much different from any other office. But it's mission control for security analysts with special rules: no computers or electronic equipment can be brought inside, and the room remains locked. While Sophos catches hundreds of new malware and spam samples a day, many can be stopped immediately using software if the samples show similar characteristics to known problem code. New, unique ones are prioritized and doled out to researchers for inspection, and Sophos quickly updates its software to block them. "We're unusual in the respect that we like to receive spam," said Mark Harris, director of the lab. That's because spam does leave a trail, albeit one that's often a confusing series of hops between servers around the world. But those clues are enough to block it. Sophos catches spam in "traps" -- abandoned e-mail addresses and domains that have been donated for the purpose of spam research. Messages sent to those addresses are invariably spam, the first clue a message is garbage. On a recent day, Paul Baccas, a spam research analyst, pulled duty. A message entitled "Let's go" caught his attention after it landed in a spam trap of addresses monitored by Sophos that belonged to a telecommunications company that went bust six years ago. Machine analysis ranked the message as likely being spam, but the filter let it through.Â Human analysis revealedÂ it wasn't a legitimate message. Deeper investigation showed a tangle of false information peppered with international locales. The message contained a link to a Web site selling "human growth hormone," a product advertised recently through spam aimed at U.S. users, Baccas said. The Web site was registered with a hosting company in Hong Kong less than an hour before the spam message was received by Sophos, Baccas said. It was registered by a person in Detroit according to the whois data. It's uncertain whether the registered name is real, according to Graham Cluley, chief technology consultant for Sophos. The state abbreviation in the whois database, however, was incorrect. A call to the phone number listed found it disconnected. Adding to the ruse, the return address for the spam message contained a ".pl" suffix, indicating it came from Poland. But that information is also easily faked. "Basically, he's sent an e-mail to a company that hasn't existed in six years within 45 minutes of him registering the Web site," Baccas said. "That's very suspicious." The approach is one in a rich bag of tricks spammers employ to beat security software. Lately, analysts have noticed a sharp uptick in spam messages with images containing words, which can defeat text analysis. Another method spammers use is adding or subtracting just a few pixels in every image, which to a computer makes the message look unique and good. To defeat optical character recognition (OCR) technology -- which can read words embedded in images -- spammers introduce colored pixels to create image noise. Humans, for example, can make out a letter "C," but a machine begins to struggle if the technique is used, said Simon Heron, director of operations for security vendor Network Box Corp. It's the spammer equivalent of using hairspray on a license plate to confuse a speed camera, which also uses OCR, he said. "Basically, they've got a little program which is actually able to generate a slightly different e-mail each time even though the picture to the human eye looks absolutely identical," Heron said. But the spam fighters aren't giving up. In the next two weeks, Spamhaus is planning to roll out a new approach to halt the number of "zombie" machines sending spam. Zombie machines are ones that are remotely controlled by hackers and used to send spam. These machines -- scattered around the world in shifting networks called "botnets" -- are a huge component of the spam problem. Spamhaus' Policy Block List (PBL) will block large ranges of IP addresses of end-user computers that should be using their ISP's (Internet Service Provider's) servers to send mail, Linford said. Most computers on the Internet that are directly sending out e-mail are spammers, he said, although Spamhaus has a mechanism for incorporating exceptions. The ISPs will submit lists to Spamhaus, which will push them out to those that use its list to block spam, including businesses such as Sophos and Microsoft. "It's an arms race with spammers," Linford said. "It [the PBL] will certainly be an extremely good weapon." But he's not sure for how long. "Obviously, by this time next year, the spammers will have found a way around it," Linford said.