Author Topic: SECURITY WARNINGS & Notices - Please post them here  (Read 2905147 times)

0 Members and 8 Guests are viewing this topic.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37548
  • Not a avast user
« Last Edit: January 06, 2012, 08:22:18 AM by Pondus »

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76035
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48597
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: SECURITY WARNINGS & Notices - Please post them here
« Reply #1712 on: January 06, 2012, 12:23:36 PM »
Patch Tuesday heads-up: Windows security holes
Microsoft plans to ship 7 bulletins, one rated “critical,” Microsoft’s highest severity rating.

Microsoft’s first batch of patches for 2012 will include fixes for security vulnerabilities in the Windows operating system and Microsoft Developer Tools and Software.
Microsoft also announced that one of the bulletins will fix an issue described as a “Security Feature Bypass.”  It is the first time Microsoft has used this label on a security update.

The patches will be released next Tuesday (Jan 10, 2012) at approximately 1:00 PM EST.
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v24H2 64bit, 32 Gig Ram, 1TB SSD, Avast Free 24.4.6112, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76035
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76035
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: SECURITY WARNINGS & Notices - Please post them here
« Reply #1714 on: January 06, 2012, 02:15:55 PM »
Patch Tuesday heads-up: Windows security holes
Microsoft plans to ship 7 bulletins, one rated “critical,” Microsoft’s highest severity rating.

The patches will be released next Tuesday (Jan 10, 2012) at approximately 1:00 PM EST.

http://technet.microsoft.com/en-us/security/bulletin/ms12-jan
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89141
  • No support PMs thanks
Re: SECURITY WARNINGS & Notices - Please post them here
« Reply #1715 on: January 06, 2012, 02:22:58 PM »
"Lilupophilupop" infects a million URLs
http://www.h-online.com/security/news/item/Lilupophilupop-infects-a-million-URLs-1404812.html
http://isc.sans.org/diary/Lilupophilupop%2Btops%2B1million%2Binfected%2Bpages/12304
https://isc.sans.edu/diary.html?storyid=12127

Well another day and a different SQL injection attack, not much difference from the last big one. There are many pro-active measures that can be followed as are mentioned in the 2nd article. Firefox with NoScript for the injected script tag is another measure.

Not to mention avast was all over the last SQL injection incident like a rash, with many people reporting sites being alerted on by avast when they were reputable/clean (NOT). So I guess we will have the same rash of hits in the viruses and worms forum claiming FPs.
« Last Edit: January 06, 2012, 02:24:44 PM by DavidR »
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76035
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: SECURITY WARNINGS & Notices - Please post them here
« Reply #1716 on: January 06, 2012, 02:27:04 PM »
So I guess we will have the same rash of hits in the viruses and worms forum claiming FPs.

Most likely. ;)
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Jtaylor83

  • Guest
Re: SECURITY WARNINGS & Notices - Please post them here
« Reply #1717 on: January 07, 2012, 07:53:15 PM »
Ramnit Virus has stolen 45000 Facebook Login Credentials Worldwide

http://www.techgadgetsweb.com/6678/ramnit-virus-stolen-45000-facebook-login-credentials-worldwide
« Last Edit: January 07, 2012, 08:00:10 PM by Jtaylor83 »

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76035
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Chris Thomas

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1936
  • Christian Geek - aka 'born again' Geek
Re: SECURITY WARNINGS & Notices - Please post them here
« Reply #1719 on: January 08, 2012, 03:15:16 PM »
Huge Security Breach at Security Firm Symantec No Threat to Consumers, Analyst Says

Hacked my some Indian Hackers  :P

http://www.foxnews.com/scitech/2012/01/06/symantec-source-code-theft-likely-no-threat-to-average-user-analyst-says/?google_editors_picks=true


Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37548
  • Not a avast user
Re: SECURITY WARNINGS & Notices - Please post them here
« Reply #1721 on: January 10, 2012, 09:39:33 PM »
Convicted murderer gets new trial after computer virus destroys data
http://nakedsecurity.sophos.com/2012/01/04/convicted-murderer-trial-virus/


Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89141
  • No support PMs thanks
Re: SECURITY WARNINGS & Notices - Please post them here
« Reply #1722 on: January 11, 2012, 02:16:09 PM »
Well the fake HM Revenue & Customs Tax Refund email I reported on the 2nd Jan finally made the papers now. It turns out that HM Revenue & Customs have known about this for some time and have shut down 149 sites (I believe that is the number, but of that order).

Why the hell didn't they make it public sooner is what I have to ask.

####
Following hard on its heals is yet another fake email, social engineering, phishing attempt, this time for Santander bank, "Account blocked: Confirmation required" as the subject.

Yet again easy to spot (not least because I don't have a Santander account ;D) but banks just don't pull these sort of strokes asking for information in this way. If you have any doubt that it might actually be legit, then logon to your bank in the normal way not via a link in an email.

The link in the email is easy to see is fraudulent, if you only look, hover the mouse over the link and look at the status bar or the email program where the true URL is displayed. For me using MailWasher it displays the underlying URL which stick out like balls on a plate (image).

The email headers also shoe that it doesn't come from who they purport to be.

It also used an email address that I wouldn't use for banking, my filtering email which I use for non-trusted sources like banking.

So stay alert, stay suspicious, stay safe as there will be another along soon with a slightly different format.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.4.6112 (build 24.4.9067.762) UI 1.0.803/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37548
  • Not a avast user
Re: SECURITY WARNINGS & Notices - Please post them here
« Reply #1723 on: January 11, 2012, 02:59:10 PM »
Signed malware: Snooping on Chinese students?
http://blogs.norman.com/2012/malware-detection-team/signed-malware-snooping-on-chinese-students

Quote
By redirecting the address to a different IP, attackers are able to present users with altered web content or perform man-in-the-middle attacks. The purpose of this against a student site is up for speculation.

I wonder what the reason can be......hmmmmm   ;D
« Last Edit: January 11, 2012, 03:05:19 PM by Pondus »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37548
  • Not a avast user