SECURITY WARNINGS & Notices - Please post them here

[bob3160]

Microsoft disrupts ZeroAccess botnet in collaboration with FBI and Europol

Microsoft has revealed that it has disrupted a “rampant botnet” known as ‘ZeroAccess’ –
which has so far infected almost two million PCs –
in collaboration with the FBI, Europol and industry partners.

[polonus]

BGP exploit attack threat, read: http://www.renesys.com/2013/11/mitm-internet-hijacking/ link article author - Jim Cowie
Unwanted upstream providers?
Route Monitoring should brought in, see: http://www.bgpmon.net/services/route-monitoring/

polonus

[polonus]

Despite valiant takedown efforts #zeroaccess bots have already been updated with new ClickFraud infrastructure. The battle continues....

quote taken from -> https://twitter.com/threatintel/statuses/408989605178785792
Botnet has been updated with a new clickfraud method,

polonus

[abruptum]

The NSA Uses Google's Cookies to Track Specific Targets

  http://news.softpedia.com/news/The-NSA-Uses-Google-s-Cookies-to-Track-Specific-Targets-407977.shtml

[Secondmineboy]

Christmas time! Do you want a malware present?

Avast Blog: http://blog.avast.com/2013/12/12/christmas-time-do-you-want-a-malware-present/

Sample: https://www.virustotal.com/de/file/C669E7E9E9A6FA4E321670E8237AEFDE73991425B8320C23F3A9F9FACA61B7C3/analysis/

[polonus]

World-sucking Octopus launched: https://twitter.com/ODNIgov/status/408712553179533312/photo/1

polonus

[polonus]

Google Removes Vital Privacy Feature: https://www.eff.org/deeplinks/2013/12/google-removes-vital-privacy-features-android-shortly-after-adding-them
Also read: https://plus.google.com/+DannyHolyoake/posts/FkfBxA5i3iG
Good we still have this - XPrivacy: http://www.androidpolice.com/2013/06/23/xprivacy-gives-you-massive-control-over-what-your-installed-apps-are-allowed-to-do/
polonus

[!Donovan]

Upgrade to WordPress 3.8!

http://wordpress.org/news/2013/12/parker/

[Pondus]

Blue Coat Acquires Norman Shark
http://normanshark.com/news-events/press-releases/blue-coat-acquires-norman-shark/

[bob3160]

                     
40 Million Credit and Debit Card customers are at risk!
( I'm one of those 40 Million.    )

[essexboy]

This is for the really paranoid ..  This will work
http://www.cs.tau.ac.il/~tromer/acoustic/

[YLAP]

It is time to change your Samsung account password, if you own one 

MediaTest Digital, a company which tests security of mobile devices and software, was able to elicit sensitive user data from Samsung accounts. Names, email addresses, and passwords were all at risk. MediaTest took the news to Heise Security - a tech news outlet based in Germany. The media was able to confirm that the hole did in fact exist by extracting user's private data from Samsung accounts as well. Heise took this information to Samsung, and the Korean manufacturer responded to the problem immediately. Only 5 days after receiving the report, the Korean giant announced publicly that the security hole has been fixed. There is no word on follow up tests to verify whether or not the patch has actually been made though.

http://www.gsmarena.com/samsung_patches_security_hole_in_gs4-news-7398.php

[Asyn]

40 Million Credit and Debit Card customers are at risk!
( I'm one of those 40 Million.    )

Cards Stolen in Target Breach Flood Underground Markets
http://krebsonsecurity.com/2013/12/cards-stolen-in-target-breach-flood-underground-markets/

[bob3160]

40 Million Credit and Debit Card customers are at risk!
( I'm one of those 40 Million.    )

Cards Stolen in Target Breach Flood Underground Markets
http://krebsonsecurity.com/2013/12/cards-stolen-in-target-breach-flood-underground-markets/

Since actually using the card at a Target Store is one of the requirements for being a victim, I'm happy to say that
neither Alice or I actually used the card in or out of the store during the listed timeframe.
(After this fiasco, I will probably get rid of this card.)

[Asyn]

(After this fiasco, I will probably get rid of this card.)

I'd do so Bob. (If you ever used it there.)