SECURITY WARNINGS & Notices - Please post them here

[Para-Noid]

Just looking for suckers!

https://blog.malwarebytes.org/fraud-scam/2015/05/your-account-paypal-has-been-limited-phishing-scam/?utm_source=gplus&utm_medium=social
That IP has a history and it's not good https://www.virustotal.com/en/ip-address/72.55.165.59/information/

That sample screen posted in the link does have one obvious indication that it's a scam ... PayPal has made the point over and over again that it will never, ever, address you as "Dear valued customer" or other generic greeting, but will instead always address you by your full registered name of record, whether individual or enterprise.

Since surely there are ways for a scammer to get this info, they're either too dumb or too lazy to be bothered.  Or maybe they're just gambling that no one ever reads PayPal's (or anyone else's) security warnings.

Most people probably never read the privacy statement or the EULA.

[Staticguy]

Just now I read about this

http://www.theregister.co.uk/2015/05/07/avast_false_positive_snafu/

This was caused by users running older versions of Avast 4,5,6,7, and 8. Good thing that Avast will stop and drop support for older versions of Avast end of this month. They should also drop support for Avast 9 aka 2014 as this same problem may also happen to users who still uses Avast 2014.

[DavidR]

Just now I read about this

http://www.theregister.co.uk/2015/05/07/avast_false_positive_snafu/

This was caused by users running older versions of Avast 4,5,6,7, and 8. Good thing that Avast will stop and drop support for older versions of Avast end of this month. They should also drop support for Avast 9 aka 2014 as this same problem may also happen to users who still uses Avast 2014.

Clearly you don't understand that avast 2014 and 2015 use the same virus definitions and update method. So by your thinking avast should cease support for avast 2015.

There has to be support for older versions (within reason) as not everyone updates immediately for many different and valid reasons.

[Staticguy]

Oh! Both the Avast 2014 and 2015 uses the Avast 9 server to update VPS and program updates. Didn't know that. I hardly do manual updates but didn't see the server name ?

[DavidR]

Oh! Both the Avast 2014 and 2015 uses the Avast 9 server to update VPS and program updates. Didn't know that. I hardly do manual updates but didn't see the server name ?

You have to look deeper than that as there isn't just one server used for VPS updates that couldn't cater for the 200+ million avast users

If you try to do a manual download of the full data base you will see there are three distinct VPS databases and there would be a different virus definitions update function to cater for the differing VPS types.

This also isn't really a security warnings & notices, things related to the avast program should go in the associated Avast Free/Pro/Premier sub forum.

[abruptum]

The end of Superfish?

  http://www.ghacks.net/2015/05/10/the-end-of-superfish/

[polonus]

Hacked ad-network has spread infested ads - Up to 12,500 users per day may have been affected by this threat...
http://blog.trendmicro.com/trendlabs-security-intelligence/ad-network-compromised-users-victimized-by-nuclear-exploit-kit/

Malvertising becoming more and more of a big problem -
another reason my friends to use a decent adblocker,
not only to block ads but also to block accompanying threats.

polonus

[Staticguy]

Security Updates Coming for Adobe Reader, Acrobat

https://threatpost.com/security-updates-coming-for-adobe-reader-acrobat/112697

http://www.theregister.co.uk/2015/05/08/adobe_reader_patch_pre_alert/

I have the latest version of Adobe Acrobat Reader DC (2015.007.20033)

It also says something about Microsoft. Here's that statement. "In January, the company announced that it was ending its Advanced Notification Service, which was a decade-long service providing customers the week before Patch Tuesday with a summary of the patches expected to be released, including the number of bulletins and affected products".

[polonus]

Crypto-ransomware found in the wild in Australia: http://www.symantec.com/connect/blogs/breaking-bad-themed-los-pollos-hermanos-crypto-ransomware-found-wild

polonus

[Para-Noid]

Compromised .Gov Redirected to Apple ID Phish

https://blog.malwarebytes.org/fraud-scam/2015/05/compromised-gov-redirected-to-apple-id-phish/?utm_source=Gplus&utm_medium=social

[Asyn]

Microsoft Security Bulletin Summary for May 2015
https://technet.microsoft.com/en-us/library/security/ms15-may.aspx

[Para-Noid]

Jamie Oliver’s website hacked again, drops password stealer

https://blog.malwarebytes.org/exploits-2/2015/05/jamie-olivers-website-hacked-again-drops-password-stealer/?utm_source=Gplus&utm_medium=social

“WinYahoo” PUP Modifies Chrome Secure Preferences

https://blog.malwarebytes.org/intelligence/2015/05/winyahoo-pup-modifies-chrome-secure-preferences/?utm_source=Gplus&utm_medium=social

[Staticguy]

“WinYahoo” PUP Modifies Chrome Secure Preferences

https://blog.malwarebytes.org/intelligence/2015/05/winyahoo-pup-modifies-chrome-secure-preferences/?utm_source=facebook&utm_medium=social

[Pondus]

‘Macro virus’ are back: threats of the past that will haunt us in the future
http://www.pandasecurity.com/mediacenter/malware/macro-virus-are-back-threats-of-the-past-that-will-haunt-us-in-the-future/

[Pondus]

How to reduce spam in almost 40%: Follow Canada’s example
http://www.pandasecurity.com/mediacenter/news/how-to-reduce-spam-canadas-example/