SECURITY WARNINGS & Notices - Please post them here

[abruptum]

Recently Bought a Windows Computer? Microsoft Probably Has Your Encryption Key

  https://theintercept.com/2015/12/28/recently-bought-a-windows-computer-microsoft-probably-has-your-encryption-key/

[polonus]

AVG Web Tune Up Chrome extension (still) has serious security flaws: https://code.google.com/p/google-security-research/issues/detail?id=675
Security through obscurity does not help this time, Google Zero Project researchers are relentless.

pol

[polonus]

Angry malcreant: http://www.bleepingcomputer.com/forums/t/599368/radamant-ransomware-kit-support-topic-encrypts-files-to-rrk-rdm-extension/page-4#entry3895835

polonus

[DavidR]

Good to see that the malcreants are pis**d at the successful efforts of the anti-malware authors. It probably says a lot about the character of the malcreant writing the code, or possibly script kids on copy and paste coders.

[Para-Noid]

In TalkTalk aftermath, it's time for companies to pay higher price for breaches

http://www.zdnet.com/article/in-talktalk-aftermath-its-time-for-companies-to-pay-price-for-breaches/

Millions of Voter Records Posted, and Some Fear Hacker Field Day

http://www.nytimes.com/2015/12/31/us/politics/voting-records-released-privacy-concerns.html?src=twr&smid=tw-nytimes&smtyp=cur&_r=1

Safe Browsing Scam: From Amazon to Rackspace

https://blog.malwarebytes.org/fraud-scam/2015/12/safebrowsing-scam-from-amazon-to-rackspace/?utm_source=gplus&utm_medium=social

[polonus]

Virus Scanners endanger or kill security and safety of encrypted connections.
No TLS-proxy was found completely secure against attacks, see this research paper: https://madiba.encs.concordia.ca/~x_decarn/papers/tls-proxy-ndss2016.pdf

Anyone?

pol

[polonus]

Is this correct for Google to allow and isn't it controversional?

The Trump Filter, developed by Rob Spectre, blocks websites covering the front-runner and, according to the filter’s website, “makes America great again.”
“Eliminate Donald Trump from all your web browsing without leaving the Internet. Donald simply disappears from your view of every web page.”
According to Spectre, blocking news coverage of Donald Trump will “give concerned citizens the opportunity to actually focus on other candidates and learn about the issues.”  Link: http://trumpfilter.com/

You cannot filter things away from reality because you rather wish to do so.

polonus

[bob3160]

Drinking in excess also isn't good but makes you forget.

[polonus]

Or you just go silent on things: Microsoft failed to warn victims of Chinese email hack.
Read: http://www.reuters.com/article/us-microsoft-china-insight-idUSKBN0UE01Z20151231

polonus

[Secondmineboy]

Meet Ransom32: The first JavaScript ransomware

http://blog.emsisoft.com/2016/01/01/meet-ransom32-the-first-javascript-ransomware/

Only 3(!) AVs detect this thing as im writing this.

https://www.virustotal.com/en/file/01d3becf7f1abe4599b8c2f5153443d8b5e3ede50f65889939323b223ee2944a/analysis/

[polonus]

Hi Steven Winderlich,

Interesting and a new task for the qualified removers here: http://www.bleepingcomputer.com/forums/t/554433/trojanwin32genericpakcobra/
 Trojan.Win32.Generic.pak!cobra has great damaging power to completely mess up the system, so you should remove it as soon as possible as it can badly affect your data on the Server.

Damian

[Pondus]

Most Destructive Malware of All Time
https://www.opswat.com/blog/most-destructive-malware-all-time

[polonus]

Hej Pondus,

I miss Virut mentioned there, as ever a virus was destructive, Virut was.

polonus

[Pondus]

Yandex employee stole search engine source code, tried to sell it for just £19,000
http://arstechnica.co.uk/business/2015/12/yandex-employee-stole-search-engine-source-code-tried-to-sell-it-for-just-27000/

[Secondmineboy]

Meet Ransom32: The first JavaScript ransomware

http://blog.emsisoft.com/2016/01/01/meet-ransom32-the-first-javascript-ransomware/

Only 3(!) AVs detect this thing as im writing this.

https://www.virustotal.com/en/file/01d3becf7f1abe4599b8c2f5153443d8b5e3ede50f65889939323b223ee2944a/analysis/

New variant maybe Rootkit!!!!!

https://www.hybrid-analysis.com/sample/01d3becf7f1abe4599b8c2f5153443d8b5e3ede50f65889939323b223ee2944a?environmentId=1

https://www.virustotal.com/en/file/01d3becf7f1abe4599b8c2f5153443d8b5e3ede50f65889939323b223ee2944a/analysis/