Author Topic: SECURITY WARNINGS & Notices - Please post them here  (Read 2904980 times)

0 Members and 6 Guests are viewing this topic.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37548
  • Not a avast user
Re: SECURITY WARNINGS & Notices - Please post them here
« Reply #3795 on: June 20, 2015, 05:31:13 PM »

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33921
  • malware fighter
Re: SECURITY WARNINGS & Notices - Please post them here
« Reply #3796 on: June 20, 2015, 07:40:21 PM »
New Exploitkit "Sundown" aims at user that has not updated Adobe Flash Player!
Adobe "the new Java" of our time!
Read: http://malware.dontneedcoffee.com/2015/06/fast-look-at-sundown-ek.html
Analysis: https://www.virusbtn.com/virusbulletin/archive/2015/06/vb201506-Beta-BEP
Info credits go to:  Aditya Sood en Rohit Bansal

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Staticguy

  • Super Poster
  • ***
  • Posts: 1427
Re: SECURITY WARNINGS & Notices - Please post them here
« Reply #3797 on: June 21, 2015, 12:50:29 AM »
MalwareBytes acquires Junkware Removal Tool
http://www.majorgeeks.com/news/story/malwarebytes_acquires_junkware_removal_tool.html

Very interesting and looking forward how MBAM will incorporate this tool into their program. MBAM always keeps on getting better and better  :)
DELL Inspiron 15" 7000 Gaming, Windows 10 Home Version 21H1 (OS Build 19043.1237), Trend Micro Maximum Security 2021 (17.0.1333), Avast SecureLine VPN (5.12.5655), Windows Firewall, Unchecky 1.2

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33921
  • malware fighter
Re: SECURITY WARNINGS & Notices - Please post them here
« Reply #3798 on: June 22, 2015, 12:54:36 PM »
Comics, a way to make users more security aware: http://www.littlebobbycomic.com/projects/week-17-encryption-and-me-1/

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33921
  • malware fighter
Re: SECURITY WARNINGS & Notices - Please post them here
« Reply #3799 on: June 22, 2015, 03:11:58 PM »
Dutch botnets aggressively attacking Norway & Sweden, read report:
http://www.level3.com/~/media/files/white-paper/en_secur_wp_botnetresearchreport.ashx
Behind USA, Ukraine and Russia the Netherlands is falicitating the fourth largest malbot infra-structure in the World.

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33921
  • malware fighter
Re: SECURITY WARNINGS & Notices - Please post them here
« Reply #3800 on: June 22, 2015, 03:35:21 PM »
Funny thing is we get an IDS alert like: "ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related". (Surricata IDS alert example), and read about country risk status on Zulu Zscaler scans for China, Russia, Ukraine, while the by far biggest malware spreading nation on earth, the U.S. of A., is never even mentioned. How about some biased risk rating?

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Para-Noid

  • Avast Evangelist
  • Starting Graphoman
  • ***
  • Posts: 6700
  • Trust only what you test yourself!
Dell Inspiron, Win10x64--HP Envy Win10x64--Both systems Avast Free v17.9.2322, Comodo Firewall v8.2 w/D+, MalwareBytes v3.0, OpenDNS, Super Anti-Spyware, Spyware Blaster, MCShield, Unchecky, Vivaldi Browser and, various browser security tools.

"Look before you leap!" Use online scanners before you click on any link.

Offline abruptum

  • Massive Poster
  • ****
  • Posts: 2460
Re: SECURITY WARNINGS & Notices - Please post them here
« Reply #3802 on: June 22, 2015, 10:14:42 PM »
Popular Security Software Came Under Relentless NSA and GCHQ Attacks

  https://firstlook.org/theintercept/2015/06/22/nsa-gchq-targeted-kaspersky/

NSA, GCHQ targeted Kaspersky, other cybersecurity companies – Snowden docs

  http://rt.com/usa/268891-nsa-gchq-software-kaspersky/
« Last Edit: June 22, 2015, 10:19:08 PM by abruptum »

Offline Staticguy

  • Super Poster
  • ***
  • Posts: 1427
Re: SECURITY WARNINGS & Notices - Please post them here
« Reply #3803 on: June 23, 2015, 05:31:36 AM »
Beyond Superfish: Turns out SSL-trashing spyware is widespread

https://gigaom.com/2015/02/23/beyond-superfish-turns-out-ssl-trashing-spyware-is-widespread/

One thing I noticed is this "quite a few software packages in the areas of antivirus and parental protection also use Komodia’s engine".

Hope Avast is not one of them? We all would be very appreciated if one of the Avast Team confirms this? Could one of the forum member report this, so one of the Avast team can take a look at this, read it, and investigate if Avast antivirus is affected by Komodia engine. Thanks!
DELL Inspiron 15" 7000 Gaming, Windows 10 Home Version 21H1 (OS Build 19043.1237), Trend Micro Maximum Security 2021 (17.0.1333), Avast SecureLine VPN (5.12.5655), Windows Firewall, Unchecky 1.2

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33921
  • malware fighter
Re: SECURITY WARNINGS & Notices - Please post them here
« Reply #3804 on: June 23, 2015, 03:57:00 PM »
Unpatched IE hole will not be patched by MS - circumventing ASLR-security,
demonstrated here: https://github.com/thezdi/abusing-silent-mitigations
Whitepaper on the mitigation attack: http://h30499.www3.hp.com/hpeb/attachments/hpeb/off-by-on-software-security-blog/599/1/WP-Hariri-Zuckerbraun-Gorenc-Abusing_Silent_Mitigations.pdf

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33921
  • malware fighter
Re: SECURITY WARNINGS & Notices - Please post them here
« Reply #3805 on: June 23, 2015, 04:05:06 PM »
Upate this optional MS update: https://support.microsoft.com/en-us/kb/3045645
to protect against a specific Banking Trojan that disables/hides UAC alerts.

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33921
  • malware fighter
Re: SECURITY WARNINGS & Notices - Please post them here
« Reply #3806 on: June 23, 2015, 11:59:57 PM »
The many enemies of Google - EU antitrust case: http://www.reuters.com/article/2015/04/27/us-eu-google-antitrust-idUSKBN0NF1YX20150427
Main Outer Category of complainants (19 in total) is formed by Microsoft, ICOMP, FairSearch, Beuc and The Open Internet Project.
Maybe the New Atlantic and International Trade Agreement will come in time so this antitrust case could/would never materialize, because it would overrule the outcome anyway.

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Rednose

  • Pirate Party Member
  • Avast Überevangelist
  • Massive Poster
  • *****
  • Posts: 3739
  • Bits of Freedom : https://www.bof.nl
    • Nederlandstalig Avast! forum
OS: Win 10 / iOS 17 / Debian 12 / Tails 5
Real Time: Avast Premium Security
On Demand: Malwarebytes
VPN: NordVPN ( NordLynx ) with Threat Protection ( Lite )

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33921
  • malware fighter
Re: SECURITY WARNINGS & Notices - Please post them here
« Reply #3808 on: June 24, 2015, 10:59:25 AM »
Millions and millions of dollars lost through CryptoWall ransomware:
http://www.ic3.gov/media/2015/150623.aspx
Update your AV, use a firewall, use a decent ad-/pop-up-/script blocker and stay alert!

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline Para-Noid

  • Avast Evangelist
  • Starting Graphoman
  • ***
  • Posts: 6700
  • Trust only what you test yourself!
Dell Inspiron, Win10x64--HP Envy Win10x64--Both systems Avast Free v17.9.2322, Comodo Firewall v8.2 w/D+, MalwareBytes v3.0, OpenDNS, Super Anti-Spyware, Spyware Blaster, MCShield, Unchecky, Vivaldi Browser and, various browser security tools.

"Look before you leap!" Use online scanners before you click on any link.