SECURITY WARNINGS & Notices - Please post them here

[essexboy]

Unfortunately they cannot be tracked down as all security services/police are crippled by the privacy mob.   

[Secondmineboy]

Unfortunately they cannot be tracked down as all security services/police are crippled by the privacy mob.

Thats the issue here, either privacy or Cryptowall. And even if you track them down, whats on the internet once will stay there forever.

[Pondus]

MacBooks are so hot right now. And so is Mac OS X malware
http://www.theregister.co.uk/2015/11/05/mac_os_x_malware_explodes/

[Pondus]

ProtonMail still under attack by DDoS bombardment
http://www.theregister.co.uk/2015/11/05/protonmail_ddos_attack/

[Para-Noid]

DirectRev Advert Loads Self Sufficient Flash Exploit, CryptoWall

https://blog.malwarebytes.org/malvertising-2/2015/11/directrev-advert-loads-self-sufficient-flash-exploit-cryptowall/?utm_source=Gplus&utm_medium=social

New Malwarebytes Anti-Exploit Adds Fingerprinting Detection

https://blog.malwarebytes.org/exploits-2/2015/11/new-malwarebytes-anti-exploit-adds-fingerprinting-detection/?utm_source=gplus&utm_medium=social

[polonus]

E-commerce ttp implications to further erode online privacy: http://techcrunch.com/2015/11/05/tpp-vs-privacy/

polonus

[polonus]

Outdated CMS code, unpatched code, left code should be retired asap.
For a jQuery example see: https://forum.avast.com/index.php?topic=178773.msg1265449#msg1265449
Get rid of that vulnerable code, protect the visitors of your website.
Here things are OK: -http://zarabotok.net.ua (well website has other issues)
Detected libraries:
jquery - 1.10.2 : -http://zarabotok.net.ua/res/jquery.js?24
No vulnerable libraries found

polonus

[polonus]

Adware-wrappers and bundled-software can now give you a full new malicious browser like eFast en CrossBrowser.
Read: https://blog.malwarebytes.org/online-security/2015/10/efast-browser-hijacks-file-associations/
& https://blog.malwarebytes.org/online-security/2015/11/crossbrowse-another-chromium-project/
Look out what you download and where you download from! Do not get an infested browser installer, this again is a next step from the browser hijacker, the hijacked malware browser in itself.

polonus

[polonus]

Things can always get worse as here, where one-way ransomware can never be restored, ruined OS once and for all.
Shoddy Programming of Ransomware, where there is no way to be restored even if you pay, as programmer throws out the key with the program:Read:
http://www.bleepingcomputer.com/news/security/shoddy-programming-causes-new-ransomware-to-destroy-your-data/
link article author = Lawrence Abrams

polonus

[Secondmineboy]

“Offline” Ransomware Encrypts Your Data without C&C Communication

http://blog.checkpoint.com/2015/11/04/offline-ransomware-encrypts-your-data-without-cc-communication/

[Para-Noid]

Nice Instagram, Shame about the Code Generator

https://blog.malwarebytes.org/online-security/2015/11/nice-instagram-shame-about-the-code-generator/?utm_source=Gplus&utm_medium=social

[polonus]

Almost impossible to cleanse Android malware
Lookout discovers new trojanized adware; 20K popular apps caught in the crossfire: https://blog.lookout.com/blog/2015/11/04/trojanized-adware/
A factory reset would not remove this malware, unfortunately.

[Asyn]

Nigerian government serving up fresh phish
http://news.netcraft.com/archives/2015/11/05/nigerian-government-serving-up-fresh-phish.html

[Secondmineboy]

Beware of a New Apple ID Phishing Campaign

http://news.softpedia.com/news/beware-of-a-new-apple-id-phishing-campaign-495896.shtml

[abruptum]

Belgium gives Facebook 48 hours to stop tracking non-users or pay €250K per day

  https://www.rt.com/news/321373-facebook-belgium-court-tracking/