SECURITY WARNINGS & Notices - Please post them here

[Scrambler]

I'd like to place a security/spam warning.
How can I start a new topic here?

[bob3160]

I'd like to place a security/spam warning.
How can I start a new topic here?

We are dealing with the spam as it's posted. Avast needs to come up with a permanent way to block spmmers from getting to the forum.
Unfortunately that may make it harder for new users to get to the forum.

[Be Secure]

desuCrypt Ransomware in the Wild with DEUSCRYPT and Decryptable Insane Variants
https://www.bleepingcomputer.com/news/security/desucrypt-ransomware-in-the-wild-with-deuscrypt-and-decryptable-insane-variants/

[Be Secure]

Rapid Ransomware Continues Encrypting New Files as they Are Created
https://www.bleepingcomputer.com/news/security/rapid-ransomware-continues-encrypting-new-files-as-they-are-created/

Hacker Uses Malware to Steal Gas From Paying Customers
https://www.bleepingcomputer.com/news/security/hacker-uses-malware-to-steal-gas-from-paying-customers/

[Be Secure]

BlackMailware Found On Porn Site Threatens to Report Users are Spreading Child Porn
https://www.bleepingcomputer.com/news/security/blackmailware-found-on-porn-site-threatens-to-report-users-are-spreading-child-porn/
Blackmailware and Scare Tactics may be more efficient than Ransomware

[polonus]

Adware malvertising, the big threat of 2017 and still going strong:

Read: https://blog.trendmicro.com/trendlabs-security-intelligence/malvertising-campaign-abuses-googles-doubleclick-to-deliver-cryptocurrency-miners/

Mining a reason to keep your adblocker visors high inside your browser of choice!
One copuld also use an additional anti-miner extension.

polonus

[polonus]

Mozilla's apologies for errors made: https://blog.mozilla.org/firefox/retrospective-looking-glass/

polonus

[bob3160]

Mozilla's apologies for errors made: https://blog.mozilla.org/firefox/retrospective-looking-glass/

polonus

It's always easy to realize that after you've gotten a black eye, that maybe you should have ducked.

[Asyn]

Security Advisory for Flash Player | APSA18-01
https://helpx.adobe.com/security/products/flash-player/apsa18-01.html

[Be Secure]

WannaMine – new cryptocurrency malware exposes failings of traditional anti-virus tools
https://www.pandasecurity.com/mediacenter/mobile-news/wannamine-cryptomining-malware/

[Pondus]

Malvertizing leads 500k victims to 90 bad Chrome Web Store extensions
https://www.cso.com.au/article/632897/

https://blog.trendmicro.com/trendlabs-security-intelligence/malicious-chrome-extensions-found-chrome-web-store-form-droidclub-botnet/

[Be Secure]

System Cryptomix Ransomware Variant Released
https://www.bleepingcomputer.com/news/security/system-cryptomix-ransomware-variant-released/

With this version, when a file is encrypted by the ransomware, it will modify the filename and then append the .SYSTEM extension to encrypted file's name.

[Be Secure]

New JenX IoT DDoS Botnet Offered Part of Gaming Server Rental Scheme
https://www.bleepingcomputer.com/news/security/new-jenx-iot-ddos-botnet-offered-part-of-gaming-server-rental-scheme/

[polonus]

Word Press update will break automatic update.:
https://wordpress.org/news/2018/02/wordpress-4-9-4-maintenance-release/

Installs now should be performed manually. Note that nearly 30% of websites run the Word Press CMS:
https://w3techs.com/technologies/history_overview/content_management

polonus (volunteer website security analyst and website error-hunter)

[polonus]

Open tab phishing patched by DuckDuckGo, but Google will not patch it (because it supports Google's core business):
Read: https://sites.google.com/site/bughunteruniversity/nonvuln/phishing-with-window-opener

On that vulnerability: https://www.chaoswebs.net/blog/exploiting-window.opener.html  (source credits: Kevin Forman)

polonus (volunteer website security analyst and website error-hunter)