SECURITY WARNINGS & Notices - Please post them here

[polonus]

Hi bob3160,

Well I have read enough about Comodo's to leave my fingers off of it. And now free Let's Encrypt has been targeted by cybercrooks to abuse it to secure and harden their malcreations. Yep, certainly the https everywhere mission has it's darker sides to it as well. Read here what Trend Micro's reports: http://www.theregister.co.uk/2016/01/07/net_scum_getting_lets_encrypt_certs_for_malware/

It is an insecure world, bob3160, and it is hard to come by just on a smile....

polonus

[bob3160]

These types of offers are acted upon all too often:

Clicking on that link, sends you here: which is certainly not connected to Amazon Prime or any other part of Amazon.
Hover your mouse over any descriptive link and you'll see the actual link address on the bottom left side of your screen.
It's almost always a dead giveaway of an attempted scam or Phishing attempt.
Be careful, it's a dangerous world out there. 

[Eddy]

http://www.theregister.co.uk/2016/02/04/dridex_botnet_pwned/

[polonus]

Hi Eddy this is a form of dedicated sink-holing then,
Clever strategy, but counter-hacking malicious payload is a strange way of propagating an AV software.
I wonder if it isn't whitehat hacking with a tinge of blackhat activity to it,
especially if you neither would like to have Dridex nor Avira's.

According to Dutch law we call this "eigen richting" and it is not allowed according to our judiciary system.

polonus

[polonus]

Massive Admedia/Adverting iFrame Infection
WordPress under massive attack from hackers injecting encrypted code at the end of all legitimate .js files,
https://blog.sucuri.net/2016/02/massive-admedia-iframe-javascript-infection.html
link article author = Sucuri's Denis Sinegubko.
In case of this infection, the easiest way is to check any .js files if they have the malware at the very bottom.

Additional reason never to go without a decent adblocker and a cookie cruncher!

polonus

[Eddy]

http://www.theregister.co.uk/2016/02/05/avast_spoons_browser_patch_as_google_cleaver_yells_your_forks_forked/

[Para-Noid]

Fake Amazon Mail Phishes for Login, Payment Information

https://blog.malwarebytes.org/fraud-scam/2016/02/fake-amazon-mail-phishes-for-login-payment-information/?utm_source=Gplus&utm_medium=social

10 easy steps to clean your infected computer

https://www.malwarebytes.org/articles/10-easy-steps-to-clean-your-infected-computer/?utm_source=Gplus&utm_medium=social

BleepingComputer Defends Freedom of Speech

https://blog.malwarebytes.org/news/2016/02/bleepingcomputer-defends-freedom-of-speech/?utm_source=gplus&utm_medium=social

Gossip Site TMZ, Latest Victim of Malvertising Campaign

https://blog.malwarebytes.org/malvertising-2/2016/02/gossip-site-tmz-latest-victim-of-malvertising-campaign/?utm_source=gplus&utm_medium=social

[Secondmineboy]

Data breach in China: 100 million records used to hack 20 million Taobao users

https://nakedsecurity.sophos.com/2016/02/05/data-breach-in-china-100-million-records-used-to-hack-20-million-taobao-users/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+nakedsecurity+%28Naked+Security+-+Sophos%29

[Asyn]

Oracle Security Alert for CVE-2016-0603
http://www.oracle.com/technetwork/topics/security/alert-cve-2016-0603-2874360.html

[Para-Noid]

DayZ in a Daze: Forum Breach Confirmed

https://blog.malwarebytes.org/hacking-2/2016/02/dayz-in-a-daze-forum-breach-confirmed/?utm_source=gplus&utm_medium=social

The Malware Museum offers a look at the viruses of yesteryear

http://www.slashgear.com/the-malware-museum-offers-a-look-at-the-viruses-of-yesteryear-06425817/

Mysterious spike in WordPress hacks silently delivers ransomware to visitors

http://arstechnica.com/security/2016/02/mysterious-spike-in-wordpress-hacks-silently-delivers-ransomware-to-visitors/

[polonus]

Steam uses an insecure version of Chrome without the sandbox: https://github.com/ValveSoftware/steam-for-linux/issues/4292

pol

[polonus]

Russian Ruble rate was manipulated by malware hackers: https://www.bloomberg.com/news/articles/2016-02-08/russian-hackers-moved-currency-rate-with-malware-group-ib-says

polonus

[Pondus]

DMA Locker Strikes Back
https://blog.malwarebytes.org/intelligence/2016/02/dma-locker-strikes-back/


sample >  ( 4 hours, 17 minutes ago )
https://www.virustotal.com/en/file/b7eeb0746b8e5df88c9937463db3f12a07ed3cf62ff720c6c91b8610080f2d9c/analysis/

[Pondus]

Making email safer for you
http://gmailblog.blogspot.co.uk/2016/02/making-email-safer-for-you-posted-by.html

[Asyn]

Microsoft Security Bulletin Summary for February 2016
https://technet.microsoft.com/en-us/library/security/ms16-feb