As Many as 3,000 Vodafone Memory Cards Infected by Malware
The malware that was found on a pair of Vodafone memory cards installed in HTC Magic handsets recently has in fact affected an entire batch of 3,000 memory cards, the company said.
Malware
Which ISPs Are Hosting the Bad Guys?
Security blogger Brian Krebs has compiled lists of the top 10 ISPs who are hosting the worst botnets, spam, phishing, and other malware from independent tracking organizations. These lists come from: Stop Badware, F.I.R.E., Phishtank, Zeustracker, Malware Domain List, Arbor Top ASN List, Emerging Threats Compromised IPS, Emerging Threata RBN, Shadowswerver, and Google Safebrowsing. Read the full article. [KrebsonSecurity]
A Closer Look at Underrated Security Tech
Here are four techniques and related technologies several cited as
underrated in today’s security fight. Since one security pro’s miracle
tool is another’s waste of budget, it’s no surprise that a couple of
the technologies panned earlier are praised here. Read the full article. [CSO]
MIT researchers funded by DARPA (U.S. Defense Department’s Defense Advanced Research Projects Agency) have developed a system to keep web servers — or, for
that matter, any Internet-connected computers — running even when
they’re under attack. Read the full article. [MIT News]
Hackers have flooded the Internet with virus-tainted spam that targets Facebook’s estimated 400 million users in an effort to steal banking passwords and gather other sensitive information. The emails tell recipients that the passwords on their Facebook accounts have been reset, urging them to click on an attachment to obtain new login credentials, according to researchers.
It seems that the HTC Magic phone distributed by Vodafone in Spain that security researchers discovered recently was pre-loaded with the Mariposa bot client was not an isolated incident after all, as the concerned party had claimed. An employee of another Spanish security vendor found the same malware pre-installed on the same model phone this week bought directly from Vodafone.
The following is the full transcript of a live Threatpost chat with Charlie Miller, a vulnerability researcher at Independent Security Evaluators. During this session, Miller discussed his approach to finding security flaws, his work on fuzzing applications, his plans for this year’s Pwn2Own hacker challenge and his thoughts on improvements in Apple’s Mas OS X.
Over the past week, security researchers and vendors have been playing a cat-and-mouse game with a cybercrime-friendly ISP known as TROYAK-AS. The results so far? A series of attempts by the cybercriminals to restore access to their botnet, and an invaluable learning experience for the community, with the gang exposing node after node of malicious activity. Read the full article. [ZDNet]
According to a report issued today, eight networks connect
directly to the botnet-hosting ISP Troyak and four other upstream providers that “surround the
malicious core,” and help to “mask the true malware-hosting armada and
provide solid uptime to the malware servers” for ZeuS botnets, Gozi, and RockPhish among others. Read the full article. [KrebsonSecurity]
Those charged with the care and feeding of
database information stores, beware: A new statistic tucked into a
comprehensive study of financial services firms’ data protection
policies shows that even at the most security-aware organizations,
application developers still use live data in their development and
test environments including many in financial firms. Read the full article. [Dark Reading]
