SECURITY WARNINGS & Notices - Please post them here

[Asyn]

Nasdaq hackers spied on company boards
http://www.reuters.com/article/2011/10/20/us-nasdaq-hacking-idUSTRE79J84T20111020

[alpha1]

asyn,wow,you're like an information ninja,dont you ever sleep? 

[Avastfan1]

Hi Asyn,

The C-media Certificate was apparently stolen: http://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/w32_duqu_the_precursor_to_the_next_stuxnet.pdf
And here F-Secure's Mikko states that w32_duqu was made by the same makers of the previous Stuxnet malware: http://www.f-secure.com/weblog/archives/00002255.html

polonus

Great to see Polonus back :-)

[nmb]

Imperva, a pioneer and leader of a new category of data security solutions for high-value business data in the data center, announced today the release of the “The Monthly Trend Report,” the fifth in the Hacker Intelligence Initiative research series. The report analyzes the content and activities of an online hacker forum with nearly 220,000 registered members, although many are dormant.

More

Read the report here(Google viewer)

[ranjitr]

Hi,

I am a new user and hence unsure if this message is posted in the correct section.

Avast warns of a trojan the site <www.madrasgymkhanaclub.com> with the message

"Infection: js:Downloader-BAX [Trj]"

Screenshot attached. The webmaster insists there is no trojan on the site and other programs like Norton Security allow access to the site without warning.

How do I know if there is a threat or not ? Further is there any  check / link for online verification of infected URLs /sites ?

Thanks

Ranjit

[Gargamel360]

Hi, I am a new user and hence unsure if this message is posted in the correct section.

Yes, you posted in an ongoing thread for security notices, wrong place. 

Please start your own topic in this section>>http://forum.avast.com/index.php?board=4.0

[DavidR]

I am a new user and hence unsure if this message is posted in the correct section.

Avast warns of a trojan the site <wXw.madrasgymkhanaclub.com> with the message

"Infection: js:Downloader-BAX [Trj]"

As mentioned this is in the wrong place and the site does appear to have been infected/hacked - Please 'modify' your post change the URL from http to hXXp or www to wXw, to break the link and avoid accidental exposure to suspect sites (as I did in the quoted text), thanks.

But a quick confirmation (no further input should be in this topic but its own new topic) - Avast isn't the only thing which considers it infected http://sitecheck.sucuri.net/scanner/ and check for yourself, image extract of results below.

[Asyn]

Adobe remedies webcam spy hole in Flash
http://www.h-online.com/security/news/item/Adobe-remedies-webcam-spy-hole-in-Flash-1364631.html
http://blogs.adobe.com/psirt/2011/10/clickjacking-issue-in-adobe-flash-player-settings-manager.html
http://www.feross.org/webcam-spy/

[Pondus]

Mac Trojan Disables XProtect Updates
http://www.f-secure.com/weblog/archives/00002256.html

[Asyn]

MyBB downloads were infected
http://www.h-online.com/open/news/item/MyBB-downloads-were-infected-1366300.html
http://blog.mybb.com/2011/10/25/some-closure-on-the-1-6-4-security-vulnerability/

[Asyn]

Avira anti-virus detects itself
http://www.h-online.com/security/news/item/Avira-anti-virus-detects-itself-1367055.html

[alpha1]

Avira anti-virus detects itself

i dont blame it for detecting itself,lol. 

[Asyn]

Avira anti-virus detects itself

i dont blame it for detecting itself,lol. 

Yes, me neither.

[RZPogi]

Avira anti-virus detects itself

LOL

[Omid Farhang]

Avira anti-virus detects itself
http://www.h-online.com/security/news/item/Avira-anti-virus-detects-itself-1367055.html

Ouch!