WebProNews

Tag: F-Secure

  • New Variant of Flashback Malware Exploits Unpatched Java Vulnerability in Macs

    A new variant of the Flashback trojan has appeared, exploiting a Java vulnerability found in Macs. Cyber security firm F-secure announced this discovery via its blog today.

    Flashback is a trojan that was originally distributed in the guise of erotic images or politically offensive material. It was later updated to be distributed in a fake installer application for the Adobe Flash Player plug-in. The malware works by downloading its payload from remote sites and creating a backdoor in users’ browsers through which the users’ information is transmitted to remote servers. Previous versions of the malware targeted older Java vulnerabilities (CVE-2011-3544 and CVE-2008-5353, according to F-secure) which were repaired in updated versions of Java.

    But the most recent variant of Flashback, called Flashback.K, exploits a newly discovered vulnerability (CVE-2012-0507) and is capable of “infecting systems without user interaction” [F-secure]. Originally this variant of Flashback targeted both Mac and Windows systems, but a patch released by Oracle in February as part of a Windows Java update has rendered up-to-date Windows machines safe from the attack. Apple has yet to release the update for OS X.

    F-secure also warns of yet another available Java exploit that is currently on sale in the computer underworld.

    At least until Apple releases a patch for the newly targeted exploit, F-secure urges users to disable the Java client on their Macs. As a rule, the company recommends that users keep Java disabled on their browsers, enabling it only when necessary and with caution, and then disabling it again immediately when it is no longer needed.

    The company also provides instructions on detecting and removing Flashback from your Mac.

    [F-secure, Photo Source: ThinkStock]

  • Majority Of Facebook Users Don

    A majority of Facebook users say they connect to the social networking site from work, but 73 percent have not "friended" their boss, according to a new report from F-Secure.

    More than half (58%) of Facebook users said they visit the site at least occasionally at work and 77 percent report they actively use the privacy settings on the site.

    Sean-Sullivan

    "We’re finding that Facebook users are more privacy savvy than some experts assume," said Sean Sullivan, F-Secure Security Advisor.

    "As Facebook moves to make more and more information public, its users seem to be increasingly aware that their privacy control is at stake."

    More than a third (35%) of Facebook users said they have posted something on the site they later regretted.

    In addition, Facebook users are careful about backing up photos they post on the site. Seventy percent said they have backups of at least some of the photos they’ve shared, compared to 56 percent of computer users who stored or backed up their digital photos in a 2009 survey by F-Secure.

    "Facebook is a free service," Sullivan says, "but we ‘pay’ by viewing advertising and making our lives into content that can be searched, shared and monetized."

    "Users are willing to make a bargain, but they are also demanding Facebook for more control over what they share and with whom."
     

  • Google Partners with NSA on Cyber Attack Analysis

    Update 4: Google has reportedly now teamed up with the National Security Agency to analyze the attack and try to better defend against such attacks in the future.

    Update 3: The Chinese government has reportedly denied that it had any involvement in the much publicized cyber attacks against Google and other companies. AFP provides the following quotes:

    The "accusation that the Chinese government participated in (any) cyberattack, either in an explicit or inexplicit way, is groundless and aims to denigrate China," an unnamed spokesman for the Ministry of Industry and Information Technology told state news agency Xinhua.

    "We are firmly opposed to that," the spokesman said…

    "We urge the United States to respect facts and stop using the so-called Internet freedom issue to criticise China unreasonably," said foreign ministry spokesman Ma Zhaoxu.

    Update 2: The Chinese government has reportedly spoken up regarding Secretary of State Hillary Clinton’s speech, regarding China and Google.

    CNN quotes a spokesman for China’s Ministry of Foreign Affairs as saying, ""We’re firmly against this statement that goes against truth and damages U.S.-Sino relationship," adding that the Chinese government views the Google case as a "business dispute" that shouldn’t affect relationships between the U.S. and Chinese governments.

    Update: 
    In a speech today, Secretary of State Hillary Clinton called upon China to investigate the attacks on Google and the State Department will reportedly file "a formal protest over the complaints."

    Original Article: Google may try to continue with operations in China, even if it shuts its search engine down due to censorship. You must remember that Google is much, much more than just a search engine, and the censoring search results doesn’t necessarily come into play in all other aspects of its business.

    According to the New York Times, Google will be holding talks with Chinese government officials soon, which will likely determine the fate of Google’s operations in the country, and to what (if any) extent those operations will continue to exist.

    "In most countries, Google draws the majority of its revenue from ads that appear on its search engine, but the No. 1 source of revenue in China comes from ads that Chinese companies place on Google’s sites in the United States," reports Miguel Helft with the Times. "A person knowledgeable about Google’s business in China said ads that run on a network of Chinese Web sites are the company’s second-largest source of revenue in the country. Google can retain both of those if it is allowed to keep a sales force and advertising network there."

    Google China

    The question is, is the Google China situation going to be an all or nothing scenario? We will probably know soon enough if said talks get underway (according to the Times they will be in the coming days and weeks).

    On a related note, the Wall Street Journal has spotted that Google is showing ads on search Google+Leaves+China”>results related to the situation that point to the company’s official blog post that announced its decision to stop censoring search results in China. I guess that’s the best way to make sure the true source turns up no matter what combination of related keywords are used to search for information on the matter (I wonder what that says about the SEO vs PPC debate)?

    On yet another related note, security Vendor F-Secure says that the cyber attacks that kicked this whole thing into motion are now targeting United States defense contractors ( Via NetworkWorld). The firm says malicious PDFs under the guise of official Department of Defense documents were sent to them.


    Related Articles:

    > China Responds To Google Situation

    > Baidu’s Stock Soars Following China News

    > Google May Quit China