SECURITY WARNINGS & Notices - Please post them here

[Para-Noid]

.htaccess Tricks in Global.asa Files

https://blog.sucuri.net/2015/09/htaccess-tricks-in-global-asa-files.html?utm_campaign=.htaccess%20Tricks%20in%20Global.asa%20Files%20Blogpost&utm_medium=social&utm_source=googleplus

GTA 5 Money Generator Scams: They’re Wheelie Bad

https://blog.malwarebytes.org/fraud-scam/2015/09/gta-5-money-generator-scams-theyre-wheelie-bad/?utm_source=Gplus&utm_medium=social

Press H to Hack: Unsolicited

https://blog.malwarebytes.org/privacy-2/2015/09/press-h-to-hack-unsolicited/

Imgur Abused in DDoS Attack Against 4Chan!

https://blog.malwarebytes.org/hacking-2/2015/09/imgur-abused-in-ddos-attack-against-4chan/

Ghostery: A Tool that Stops Trackers   (This is one add-on most of us use) (FYI, I have disabled the pop-up bubble.)

https://blog.malwarebytes.org/privacy-2/2015/09/ghostery-a-tool-that-stop-trackers/

[Pondus]

Kovter malware upgraded with Poweliks features
http://www.scmagazine.com/kovter-malware-upgraded-with-poweliks-features/article/440711/


Kovter malware learns from Poweliks with persistent fileless registry update
http://www.symantec.com/connect/blogs/kovter-malware-learns-poweliks-persistent-fileless-registry-update

[REDACTED]

Fake Online Avast Scanner

https://blog.malwarebytes.org/online-security/2015/09/fake-online-avast-scanner/

[bob3160]

Fake Online Avast Scanner

https://blog.malwarebytes.org/online-security/2015/09/fake-online-avast-scanner/

This is a bit misleading since you only get to this by mistyping the Malwarebytes website.
I highly doubt that this scanner gets much use.

[Para-Noid]

Fake Online Avast Scanner

https://blog.malwarebytes.org/online-security/2015/09/fake-online-avast-scanner/

This is a bit misleading since you only get to this by mistyping the Malwarebytes website.
I highly doubt that this scanner gets much use.

+1 But the fact that it's out there could mean trouble for avast.

[Para-Noid]

SSL Malvertising Campaign Targets Top Adult Sites   (Watching porn has a price.)

https://blog.malwarebytes.org/malvertising-2/2015/09/ssl-malvertising-campaign-targets-top-adult-sites/

Don’t have a Meltdown over this Lunchbox Fallout

https://blog.malwarebytes.org/fraud-scam/2015/09/dont-have-a-meltdown-over-this-lunchbox-fallout/

[DavidR]

Fake Online Avast Scanner

https://blog.malwarebytes.org/online-security/2015/09/fake-online-avast-scanner/

This is a bit misleading since you only get to this by mistyping the Malwarebytes website.
I highly doubt that this scanner gets much use.

+1 But the fact that it's out there could mean trouble for avast.

I beg to differ, first someone has to A) mistype the URL as Bob said, B) ignore the obvious porn image, suspect to say the least C) then they would have to elect to run the fake scan and D) it would have to get past your real AV software.

That's a lot of ifs and you would like to hope the user would have enough common sense after all of them to back off.

[1234ava]

Yes it takes a somewhat dumb user to fall into the trap, but the world is full of somewhat dumb users. 
Few dumb users claiming that "Avast infected my PC" (while in reality it was the fake site) might be enough to cause trouble, especially if reported with some alarming headlines in the media.

If I were in Avast's shoes, I would take immediate legal action and try take the site down.

[Pondus]

On several blacklists now
https://www.virustotal.com/en/url/f3b2e6cc365cdbc13ac17076f56b935af20621fb09ea44abbd681f16c0ef124f/analysis/1443348829/

[Secondmineboy]

Yes it takes a somewhat dumb user to fall into the trap, but the world is full of somewhat dumb users. 
Few dumb users claiming that "Avast infected my PC" (while in reality it was the fake site) might be enough to cause trouble, especially if reported with some alarming headlines in the media.

If I were in Avast's shoes, I would take immediate legal action and try take the site down.

I reported the website to them via their support page

SITE IS NOW BLOCKED BY AVAST

[Asyn]

WinRAR SFX v5.21 - Remote Code Execution Vulnerability
http://seclists.org/fulldisclosure/2015/Sep/106

[Gopher John]

Cookie handling in browsers can break HTTPS security

http://www.networkworld.com/article/2986286/cookie-handling-in-browsers-can-break-https-security.html

[Pondus]

Mobile Ad Networks as DDoS Vectors: A Case Study
https://blog.cloudflare.com/mobile-ad-networks-as-ddos-vectors/

[abruptum]

ConfigFox: manage advanced Firefox privacy and security settings

  http://www.ghacks.net/2015/09/29/configfox-manage-advanced-firefox-privacy-and-security-settings/

[polonus]

WP exploit kit hacks thousands and thousands of websites to redirect to pages with Nuclear-exploitkit!
Read article by Daniel Cid here: https://blog.sucuri.net/2015/09/wordpress-malware-visitortracker-campaign-update.html
Google watch.php malware please. For instance: http://malwarefor.me/2015-06-15-nuclear-ek-glupteba-operation-windigo-again/

polonus