SECURITY WARNINGS & Notices - Please post them here

[bob3160]

Microsoft's Mundie calls for 'internet driving licence' 
http://www.v3.co.uk/v3/news/2257372/microsoft-mundie-calls   

Not only need a license but they should be re-tested every few years.
It would certainly cut down on the number of infected systems.

[Hermite15]

Microsoft's Mundie calls for 'internet driving licence'  
http://www.v3.co.uk/v3/news/2257372/microsoft-mundie-calls  

Not only need a license but they should be re-tested every few years.
It would certainly cut down on the number of infected systems.

...yeah, and hackers are dumb enough to fail and not get such a license right?
adding: kids would learn and succeed too eventually...and then spread the malware sent to them by hackers, just for fun.

[Jtaylor83]

If Microsoft is taking this thing seriously, then we all can't use our computers without a license.

I'll just throw my PC in the garbage and enjoy nature instead.

[Hermite15]

I'll just throw my PC in the garbage and enjoy nature instead.

same here  wondering sometimes if it would be so bad 

[polonus]

Hi malware fighters,

Gumblar and Conficker dominate the malware scene:
http://www.security.nl/image/2555/1
better look here:
http://www.security.nl/popup/2555

pol

P.S. 13% of the malware was Adobe related exploits....

[Hermite15]

Mozilla overlooked malware-laced Firefox add-ons

http://www.theregister.co.uk/2010/02/05/malicious_firefox_extensions/

Two Firefox add-ons available for months on Mozilla's website infected users with malware that stole passwords and opened a backdoor on Windows machines, the open-source browser maker has confirmed.

The add-ons, available on an experimental section of Mozilla's official add-on download site carried trojans that have been detected since 2008 by commercial anti-virus products. And yet they weren't removed until late January and earlier this week because a scanning tool used to vet add-ons during upload failed to catch the malicious files.

[Pondus]

Fake Firefox Update Pages Push Adware
http://threatcenter.blogspot.com/2010/02/fake-firefox-update-pages-push-adware.html

[Alan Baxter]

Mozilla overlooked malware-laced Firefox add-ons

The SoThink detection may have been a false positive.
http://blog.mozilla.com/addons/2010/02/04/please-read-security-issue-on-amo/comment-page-1/#comment-45452

"Alan Baxter says:
February 6, 2010 at 11:51 am

It looks like the current scans of the SoThink 4.0 addon may have been false positives. SoThink updated the addon to 4.2 because of false positive reports in May 2008. Did AMO verify that 4.0 actually contained a trojan?

From http://74.125.47.132/search?q=cache:aou1K7snX3QJ:https://addons.mozilla.org/en-US/firefox/addons/versions/6541+site:addons.mozilla.org+sothink+%22version+history%22&cd=1&hl=en&ct=clnk&gl=us:
Version 4.2 — May 16, 2008 — 685 KB
Works with:
* Firefox: 1.5 – 3.0b3
Fixed Bug
* Some of anti-virus softwares misreported that it contained virus.

[Pondus]

Conficker.........again.....


Conficker outbreak infects Leeds hospital servers
http://www.theregister.co.uk/2010/02/09/conficker_nhs_outbreaks/

ZeuS tracker shrinks takedowns from days to minutes
http://www.theregister.co.uk/2010/02/05/zeus_tracker/

Leaky anti-virus defences letting malware through
http://www.theregister.co.uk/2010/02/08/security_scanner_shortcomings/

[spg SCOTT]

First the police, then the health service...what is next, the the fire service?

Seriously though, ESPECIALLY in those areas there should be safeguards against things like that, like no external media or no personal laptops etc. as this seems to be a vector for attack...

[Alan Baxter]

One Mozilla malware report turned out to be a false positive

Mozilla overlooked malware-laced Firefox add-ons

http://www.theregister.co.uk/2010/02/05/malicious_firefox_extensions/

Two Firefox add-ons available for months on Mozilla's website infected users with malware that stole passwords and opened a backdoor on Windows machines, the open-source browser maker has confirmed.

The add-ons, available on an experimental section of Mozilla's official add-on download site carried trojans that have been detected since 2008 by commercial anti-virus products. And yet they weren't removed until late January and earlier this week because a scanning tool used to vet add-ons during upload failed to catch the malicious files.

Mozilla has announced that their report of a trojan in the SoThink Video Downloader extension was a false positive after all.
http://blog.mozilla.com/addons/2010/02/09/update-on-the-amo-security-issue/

[computerfreaker]

One Mozilla malware report turned out to be a false positive

Mozilla overlooked malware-laced Firefox add-ons

http://www.theregister.co.uk/2010/02/05/malicious_firefox_extensions/

Two Firefox add-ons available for months on Mozilla's website infected users with malware that stole passwords and opened a backdoor on Windows machines, the open-source browser maker has confirmed.

The add-ons, available on an experimental section of Mozilla's official add-on download site carried trojans that have been detected since 2008 by commercial anti-virus products. And yet they weren't removed until late January and earlier this week because a scanning tool used to vet add-ons during upload failed to catch the malicious files.

Mozilla has announced that their report of a trojan in the SoThink Video Downloader extension was a false positive after all.
http://blog.mozilla.com/addons/2010/02/09/update-on-the-amo-security-issue/

Wow. I've got to wonder how much of a backlash Mozilla's going to get; IMHO, it's going to be big and well-deserved. First, letting a trojan into addons, even experimental addons, is just plain a bad decision, given there were - and are - tools detecting said trojan. Smearing SoThink - even accidentally - is only going to make it worse.
Maybe Mozilla just had a lot of bad luck, but the circumstances are sure weird.

[Pondus]

New Russian Botnet Tries to Kill Rival

An upstart Trojan horse program has decided to take on its much-larger rival by stealing data and then removing the malicious program from infected computers.

http://www.nytimes.com/external/idg/2010/02/09/09idg-new-russian-botnet-tries-to-kill-rival-90923.html

[Hermite15]

New Russian Botnet Tries to Kill Rival

An upstart Trojan horse program has decided to take on its much-larger rival by stealing data and then removing the malicious program from infected computers.

http://www.nytimes.com/external/idg/2010/02/09/09idg-new-russian-botnet-tries-to-kill-rival-90923.html

lol Polonus has already mentioned that the first thing a rogue would do is get rid of the competition, to avoid other malware interference...I would add to make sure the victim will send the cash to the winner only  This seems confirmed here 

[Pondus]

Security chip that does encryption in PCs hacked

http://news.yahoo.com/s/ap/20100208/ap_on_hi_te/us_tec_crypto_chip_cracked;_ylt=AlgYlCohoMwaXKR3qvFz_VwjtBAF;_ylu=X3oDMTJyZzFmdXMxBGFzc2V0A2FwLzIwMTAwMjA4L3VzX3RlY19jcnlwdG9fY2hpcF9jcmFja2VkBGNwb3MDMgRwb3MDNQRzZWMDeW5fdG9wX3N0b3J5BHNsawNzZWN1cml0eWNoaXA