SECURITY WARNINGS & Notices - Please post them here

[bob3160]

Worldwide Antivirus Vendor Market Share
https://www.opswat.com/about/media/reports/antivirus-october-2014

Caution when looking at these statistics. Windows Defender is turned on by default
in all Windows 8 computers. These stats don't give a true picture since installing a third party
turns off Defender but doesn't remove it from the list.
It's nice to see that Avast is listed as the most used third party AV.

[polonus]

Trojan horse being spread via malicious Tor-exit-nodes as a wrapper: http://www.f-secure.com/weblog/archives/00002764.html
Source: FSLabs.

polonus

[Pondus]

Trojan horse being spread via malicious Tor-exit-nodes as a wrapper: http://www.f-secure.com/weblog/archives/00002764.html
Source: FSLabs.

polonus

Trojan-Dropper:W32/OnionDuke.A
https://www.virustotal.com/en/file/19972cc87c7653aff9620461ce459b996b1f9b030d7c8031df0c8265b73f670d/analysis/

Backdoor:W32/OnionDuke.A
https://www.virustotal.com/en/file/0102777ec0357655c4313419be3a15c4ca17c4f9cb4a440bfb16195239905ade/analysis/

Backdoor:W32/OnionDuke.B
https://www.virustotal.com/en/file/366affd094cc63e2c19c5d57a6866b487889dab5d1b07c084fff94262d8a390b/analysis/

[polonus]

Hi Pondus,

Thank you for this additional scan info. Als read this: http://sensorstechforum.com/onionduke-malware-used-in-apt-attacks-through-the-tor-network/  Link article author = BertaB+

polonus

[Asyn]

Vulnerability in Kerberos Could Allow Elevation of Privilege (3011780)
https://technet.microsoft.com/en-us/library/security/MS14-068

[Pondus]

Fake Windows 10 Activators Spreading All Over the Web
http://news.softpedia.com/news/Fake-Windows-10-Activators-Spreading-All-Over-the-Web-465227.shtml

[polonus]

Backdoor found in thousands and thousands illegal CMS-plug-ins and themes.
Read: http://blog.fox-it.com/2014/11/18/cryptophp-analysis-of-a-hidden-threat-inside-popular-content-management-systems/

We cannot determine the exact number of affected websites but we estimate that, at least a few thousand websites are compromised by CryptoPHP.

polonus

[Pondus]

Malware now infecting users from popular website
http://blogs.norman.com/2014/for-consumption/malware-now-infecting-users-from-popular-website

[polonus]

Thank you Pondus for your heads-up on this. I hope everybody is convinced now they cannot be completely safe without a decent adblocker installed like ABP.

polonus

[bob3160]

If you belong to the Malwarebytes Forum (Many of us do!) you should be aware of the following:
"bob3160,
I'm writing to let you know that on November 10th a vulnerability in our
forum software allowed a hacker to gain access to the server hosting our
community. We have no evidence of any personal data being stolen (nor do
we store any on our forums!) but as a precautionary measure we are
forcing all users to reset their passwords. The next time you attempt to
log in, please select the "Forgot Your Password?" link below and follow the steps.
https://forums.malwarebytes.org/index.php?app=core&module=global&section=lostpass
We've also migrated our community away from our servers and onto aservice hosted by Invision Power Board. They know their software bestand as vulnerabilities are discovered, they can patch them more quickly.I personally apologize for the inconvenience and if you have anyquestions, do not hesitate to contact me directly at
mkleczynski at malwarebytes.org.
Marcin"

[Pondus]

If you belong to the Malwarebytes Forum (Many of us do!) you should be aware of the following:
"bob3160,
I'm writing to let you know that on November 10th a vulnerability in our
forum software allowed a hacker to gain access to the server hosting our
community. We have no evidence of any personal data being stolen (nor do
we store any on our forums!) but as a precautionary measure we are
forcing all users to reset their passwords. The next time you attempt to
log in, please select the "Forgot Your Password?" link below and follow the steps.
https://forums.malwarebytes.org/index.php?app=core&module=global&section=lostpass
We've also migrated our community away from our servers and onto aservice hosted by Invision Power Board. They know their software bestand as vulnerabilities are discovered, they can patch them more quickly.I personally apologize for the inconvenience and if you have anyquestions, do not hesitate to contact me directly at
mkleczynski at malwarebytes.org.
Marcin"

https://forums.malwarebytes.org/index.php?/topic/161236-malwarebytesorg-comprimised/
see post from RubbeR DuckY

[polonus]

Amnesty and EFF launch a scanner to detect government spyware:
Read about Detekt here: https://resistsurveillance.org/

polonus

[Para-Noid]

Russian hackers hijack webcams worldwide!

http://ottawacitizen.com/technology/internet/russian-hackers-hijack-webcams-worldwide-including-at-least-four-in-ottawa

[REDACTED]

Hi all,
sorry if this the wrong place to put my ?
Having a small prob with Windows update KB3011780, it says it failed to d/load and now i have to switch of my comp manually.
I presume this update has something to do with it???. not being a tech wiz i have no idea.
I read in another forum that Avast might have something to do with it,, any ideas??

[Asyn]

Having a small prob with Windows update KB3011780, it says it failed to d/load and now i have to switch of my comp manually.
I presume this update has something to do with it???. not being a tech wiz i have no idea.
I read in another forum that Avast might have something to do with it,, any ideas??

-> https://forum.avast.com/index.php?topic=160717.0