Technical

[mchain]

Blackhole exploit kit author arrested:
http://blog.malwarebytes.org/whats-in-the-news/2013/10/blackhole-exploit-kit-author-reportedly-arrested-changes-already-noticeable/

Schneier on Security blog re NSA exploit details:
https://www.schneier.com/blog/archives/2013/10/how_the_nsa_att.html

and finally:

PureVPN WAS Hacked, But is NOT Closing:
http://www.infosecurity-magazine.com/view/34909/purevpn-was-hacked-but-is-not-closing/

[Asyn]

Piercing Through WhatsApp’s Encryption
https://blog.thijsalkema.de/blog/2013/10/08/piercing-through-whatsapp-s-encryption/
https://blog.thijsalkema.de/blog/2013/10/08/piercing-through-whatsapps-encryption-2/

[Asyn]

Ad Vulna: A Vulnaggressive (Vulnerable & Aggressive) Adware Threatening Millions
http://www.fireeye.com/blog/technical/2013/10/ad-vulna-a-vulnaggressive-vulnerable-aggressive-adware-threatening-millions.html

[Asyn]

Anatomy of an exploit - inside the CVE-2013-3893 Internet Explorer zero-day (Part 1)
http://nakedsecurity.sophos.com/2013/10/11/anatomy-of-an-exploit-ie-zero-day-part-1/

[Asyn]

Steam UAC bypass via code execution
http://codeinsecurity.wordpress.com/2013/10/11/steam-uac-bypass-via-code-execution/
http://codeinsecurity.wordpress.com/2013/10/11/steam-code-execution-privilege-escalation-to-system/

[Asyn]

Vulnerabilities Discovered in Global Vessel Tracking Systems
http://blog.trendmicro.com/trendlabs-security-intelligence/vulnerabilities-discovered-in-global-vessel-tracking-systems/

[Asyn]

Win32/KanKan – Chinese drama
http://www.welivesecurity.com/2013/10/11/win32kankan-chinese-drama/

[Asyn]

Destructive malware "CryptoLocker" on the loose - here's what to do
http://nakedsecurity.sophos.com/2013/10/12/destructive-malware-cryptolocker-on-the-loose/

[bob3160]

Destructive malware "CryptoLocker" on the loose - here's what to do
http://nakedsecurity.sophos.com/2013/10/12/destructive-malware-cryptolocker-on-the-loose/

There isn't anything you can do once you've been infected.
You need to be prepared before the infection happens through regular image backups.
After infection, without the Key or a restore point, you're screwed..... 


How is this being detected by avast!

[Asyn]

There isn't anything you can do once you've been infected.
You need to be prepared before the infection happens through regular image backups.
After infection, without the Key or a restore point, you're screwed..... 

Yes, you're right Bob, it's really bad malware.

[Lisandro]

Does avast detect *all* these nasties? It's a job for full restore...

[mchain]

There isn't anything you can do once you've been infected.
You need to be prepared before the infection happens through regular image backups.
After infection, without the Key or a restore point, you're screwed..... 

Yes, you're right Bob, it's really bad malware.

At least one version disables/encrypts .tib files used by Acronis backup software.  Russian roulette, is what it is.

[Asyn]

Win32:Reveton-XY [Trj] saves hundreds of computers worldwide and cybercriminals know it!!!
http://blog.avast.com/2013/10/22/win32reveton-xy-trj-saves-hundreds-of-computers-worldwide-and-cybercriminals-know-it/

[bob3160]

Win32:Reveton-XY [Trj] saves hundreds of computers worldwide and cybercriminals know it!!!
http://blog.avast.com/2013/10/22/win32reveton-xy-trj-saves-hundreds-of-computers-worldwide-and-cybercriminals-know-it/

There is a big difference between Reveton and CryptoLocker.
Reveton is relatively simple to prevent and/or recover from.
CryptoLocker without a good Image backup, means the end of all your files.

[Asyn]

There is a big difference between Reveton and CryptoLocker.
Reveton is relatively simple to prevent and/or recover from.
CryptoLocker without a good Image backup, means the end of all your files.

Yes Bob. That's just a new post in the topic, not related to anything posted before.