SECURITY WARNINGS & Notices - Please post them here

[polonus]

Hi malware fighters,

Underforge of Lack - R.I.P. Just security prevent everything!
Occasionally have a look here for recent threats: http://www.underforge.net/category/security/
example malicious site xorg*pl
for this threat (we had it in the mailcious websites in virus and worms): www3.workfree36-td.xorg★pl as 95.169.186.25
with Diagnostic pages like this: http://www.google.com/safebrowsing/diagnostic?site=AS:31103
and this http://www.robtex.com/route/95.169.160.0-19.html

Damian

[polonus]

Hi malware fighters,

Just to keep a quick check on infested websites via Norton Safe Web, Safety and Threats:
http://forum.avast.com/index.php?topic=59287.msg499672#msg499672

polonus

[polonus]

Hi malware fighters,

As this was issued, new zbot infects through PDF file, avast did not detect this:
http://securitylabs.websense.com/content/Alerts/3593.aspx

polonus

[Pondus]

US Air Force phishing test transforms into a problem   
http://www.computerworld.com/s/article/9176155/US_Air_Force_phishing_test_transforms_into_a_problem?taxonomyId=13&pageNumber=1

[YoKenny]

US Air Force phishing test transforms into a problem   
http://www.computerworld.com/s/article/9176155/US_Air_Force_phishing_test_transforms_into_a_problem?taxonomyId=13&pageNumber=1

File this under:
military intelligence
http://www.oxymoronlist.com/military-intelligence

[Marc57]

'Extremely severe' flaw in Opera web browser


An “extremely severe” security vulnerability in the Opera browser could put web surfers at risk of remote code execution attacks, the software maker warned today.

http://blogs.zdnet.com/security/?p=6355&tag=nl.e589

The vulnerability, now patched with the new Opera 10.53, affects Opera for Windows and Mac.

[polonus]

Hi malware fighters,

Current threats Malware Database - iFrames and Rogue AV hacks: http://malwaredatabase.net/blog/
Current malicious websites reported: http://safeweb.norton.com/safety

polonus

[Hermite15]

Facebook's New Features Secretly Add Apps to Your Profile
http://www.pcworld.com/businesscenter/article/195728/facebooks_new_features_secretly_add_apps_to_your_profile.html

When a piece of software is automatically installed on your computer without your knowledge, it's called malware. But what do you call it when Facebook apps are added to your profile without your knowledge? We discovered Wednesday that this is actually happening, and stopping it isn't as easy as checking a box in your privacy settings.
 If you visit certain sites while logged in to Facebook, an app for those sites will be quietly added to your Facebook profile. You don't have to have a Facebook window open, you don't need to be signed in to these sites for the apps to appear, there's no notification, and there doesn't appear to be an option to opt-out anywhere in Facebook's byzantine privacy settings.

[spg SCOTT]

Fake HSBC emails...

OK, so I got one today that was supposedly from them.

It says that I need to verify some account details, and gives what looks to be a genuine link.

There are some things to note though...

1. It is addressed to my email account, not my name...'Dear abcd@abcd.com...' (not how it would be done if it was really HSBC)
2. I have NEVER banked with HSBC...

These things alone are indicative of a scam email...

Another tell tale sign that it is bad, is that the link doesn't actually go to where it says it goes...

The link looks like it goes to a secure (https) HSBC site, but when you look at it, it actually goes to a .ro website, which is romanian...so obviously not from HSBC...

This email was correctly caught by the hotmail spam filter, but I still thought it was a good idea to warn about it...

So please leave it in junk and do not open it...

I have also forwarded it to the real bank's phishing address...


EDIT: Another worrying thing is that this is (I think) the first piece of spam that has been sent directly to my exact email address...where did they get it (also the same with a lot of my friends...)

-Scott-

[polonus]

Hi malware fighters,

Warn your mother for Mothersday Card malware:
http://ftc.gov/bcp/edu/multimedia/ecards/mom/butterfly/index.html

polonus

[polonus]

Hi malware fighters,

The 2007 Storm worm has reappeared in various new variants that differ from the original in specific aspects:
https://www.honeynet.org/node/539
http://www.avertlabs.com/research/blog/index.php/2010/04/28/dark-and-stormy-comeback-of-a-botnet/
and easier to defy than the original Storm worm:
http://www.v3.co.uk/v3/news/2262211/storm-botnet-forming

pol

[nmb]

New attack bypasses virtually all AV protection

Researchers say they've devised a way to bypass protections built in to dozens of the most popular desktop anti-virus products, including those offered by McAfee, Trend Micro, AVG, and BitDefender.

The Register

Original research paper.

nmb

[polonus]

Hi malware fighters,

Latest Malware Database alerts: http://malwaredatabase.net/blog/

pol

[polonus]

Hi malware fighters,

Win7 compatibility tool could be a trojan and malicious downloader:
http://www.net-security.org/malware_news.php?id=1335

polonus

[Pondus]

U.S. May Face Cyber Attack, Says Richard Clarke
http://topnews.us/content/219583-us-may-face-cyber-attack-says-richard-clarke