SECURITY WARNINGS & Notices - Please post them here

[polonus]

First we postedon the HTTPS URLS Sniffing with mal PAC files Threat, now there is a solution to be applied quite easily:
http://www.contextis.com/resources/blog/leaking-https-urls-20-year-old-vulnerability/

polonus

[polonus]

Deleted WhatsApp chats not gone from the database on your device.
Weird the chats in the database are not encrypted.
Read: http://www.zdziarski.com/blog/?p=6143
Certain restore Apps already able to recover deleted WhatsApp data: FonePaw/Reincubate
If you mean Privacy, do not use WhatsApp.
When you really wanna loose the data uninstall Whatsapp or use a complex back-up password.

Remember in these times and days, never entrust the Internet with private or other info you do not intend to share with the world.
The Internet never forgets and all your data will be there forever and a day.
Know Google and others sits on them info and where it goes no-one knows,
so they even might to come to boomerang and bite you back.
Forewarned is forearmed,

polonus

[polonus]

Does Avast Mobile Security protects us against these 155 new trojaned apps from Google Play?
Read: https://news.drweb.com/show/?i=10115&lng=en&c=5

Anyone?

polonus

[polonus]

Kaspersky's apologies for ad that should not have been shown:
https://twitter.com/antireality/status/758998526990823426

polonus

[bob3160]

Kaspersky's apologies for ad that should not have been shown:
https://twitter.com/antireality/status/758998526990823426

polonus

I'm ssurprised that they didn't try to rename Kaspersky to Cialis or Viagra

[polonus]

Curiosity killed the proverbial animal aka how almost anybody could become a victim of phishing:
Read: https://www.blackhat.com/us-16/briefings.html#exploiting-curiosity-and-context-how-to-make-people-click-on-a-dangerous-link-despite-their-security-awareness

And that is why, my good forum friends, it is good I have avast online security beta extension installed in the browser.

Furthermore I report the baddies directly to avast, and also analyze them in the virus and worms section as a volunteer website security analyst
and website error-hunter.

Whenever I see something that is not alerted and should be blocked I use this extension in Google Chrome;
Block site 3.1.11
Stay focused and let Block Site automatically blocks websites of your choice. Best for procrastination problem
Details  Options
Id: eiimnmioipafcokbfikbljfdeojpcgbh  Really like that one, just blocked flavors.me & subdomains as a SE redirector.

Next to that I work Bitdefender TrafficLight and also report blockables to WOT (under another nick).

Don't fall for it, folks, just think before opening that link. I always check and click, especially when coming there the first time around.

polonus

[REDACTED]

Drep detection whenever i download an executable from my own website. It a clean software i made by own. but why this detection occurring? can any body tell me how to avoid it?

[Asyn]

Drep detection whenever i download an executable from my own website. It a clean software i made by own. but why this detection occurring? can any body tell me how to avoid it?

As you're a developer, read here:

-> https://www.avast.com/faq.php?article=AVKB229
-> https://www.avast.com/faq.php?article=AVKB228

[abruptum]

Attention: Some Fosshub downloads compromised

  http://www.ghacks.net/2016/08/03/attention-fosshub-downloads-compromised/

More :

  http://news.softpedia.com/news/hacker-compromises-fosshub-to-distribute-mbr-hijacking-malware-506932.shtml

[mchain]

Cisco report says growing ransomware attacks are costing people and businesses millions

Cisco security researchers also discovered a sharp increase in HTTPS traffic related to malicious activity between September 2015 and March 2016. The increase is due in large part to malicious ad injectors and adware. (Bold is mine).  Researchers also observed that even though major software vendors make patches available, many users failed to quickly install the patches, giving hackers plenty of time to exploit vulnerabilities.

http://www.bizjournals.com/sanjose/news/2016/08/01/cisco-report-says-growing-ransomware-attacks-are.html

[Dwarden]

HEIST
yet another attack vs HTTPS, this time also works vs HTTP/2

http://arstechnica.com/security/2016/08/new-attack-steals-ssns-e-mail-addresses-and-more-from-https-pages/
http://www.scmagazine.com/heist-attack-on-ssltls-can-grab-personal-info-black-hat/article/514203/

details https://tom.vg/papers/heist_blackhat2016.pdf

[Be Secure]

New Remcos RAT Available for Sale on Underground Hacking Forums

http://news.softpedia.com/news/new-remcos-rat-available-for-sale-on-underground-hacking-forums-507018.shtml

[Pondus]

Recent Hacks on Forums Show Platforms Remain Vulnerable to Fundamental Exploits
http://www.trendmicro.no/vinfo/no/security/news/vulnerabilities-and-exploits/recent-hacks-on-forums-show-platforms-remain-vulnerable-to-fundamental-exploits

[Be Secure]

Hitler Ransomware

http://news.softpedia.com/news/hitler-ransomware-infects-everyone-not-just-the-jews-507123.shtml

Two days ago, AVG security researcher Jakub Kroustek discovered a quite originally named ransomware variant called the Hitler Ransomware (actually Ransonware but the grammar Nazi lying in me could not let that pass) that deletes your files as a result of bad coding.
The Hitler ransomware infection takes place when the user double-clicks on an infected binary. According to Bleeping Computer, this file drops a batch file on the user's system, which then drops three files called firefox32.exe, ErOne.vbs, and chrst.exe.

Good news is that Avast! also blocked the ransomware.

[Asyn]

Microsoft Security Bulletin Summary for August 2016
https://technet.microsoft.com/library/security/ms16-aug