trojan

Banking Trojan steals money from under your nose

Researchers at security firm Finjan have discovered details of a new type of banking Trojan horse that doesn't just steal your bank log-in credentials but actually steals money from your account while you are logged in and displays a fake balance.

The bank Trojan, dubbed URLZone, has features designed to thwart fraud detection systems which are triggered by unusual transactions, Yuval Ben-Itzhak, chief technology officer at Finjan, said in an interview Tuesday. For instance, the software is programmed to calculate on-the-fly how much money to steal from an account based on how much money is available.

It exploits a … Read more

Why virus writers are turning to open source

Malware developers are going open source in an effort to make their malicious software more useful to fraudsters.

By giving criminal coders free access to malware that steals financial and personal details, the malicious software developers are hoping to expand the capabilities of old Trojans.

According to Candid W?est, threat researcher with security firm Symantec, around 10 percent of the Trojan market is now open source.

The move to an open source business model is allowing criminals to add extra features to their malware.

"The advantages are that you have more people involved in developing it, so someone … Read more

If it happens, you'll be safe

iAntiVirus is a free app that will scan for Mac-specific viruses and malicious software, both on your hard-drive and during real-time Web browsing. You access iAntiVirus through a menu bar icon, and the app can scan your Mac for current infections, with either a Quick Scan, a Normal Scan (longer but still relatively quick), or a Custom Scan of specific areas. You can set iAntiVirus to protect your Mac in the background (with a relatively modest resource footprint), and you can also schedule both scans and app updates every week, every day, or every other day, to make sure that … Read more

Symantec: Posted code enables VoIP spying

Along with keyloggers that track what you type, now we have to worry about malicious software that listens in on our voice over Internet Protocol conversations.

A Symantec security blog on Thursday disclosed a new Trojan horse, Tojan.Peskyspy "that records VoIP communications, specifically targeting Skype." The posting, based on analysis from Symantec's Karthik Selvaraj, pointed out that "its existence isn't due to any problems with Skype itself" but that Skype may have been targeted "simply because it has such a large install base."

Gerry Egan, Symantec's director of security response, … Read more

BOL 1052: An actual piece of horse

I'm not sure why I mentioned an actual piece of horse, but it had to do with trojan horses and mysterious laptops showing up at Governor's offices around the US. We also help you get hooked up with Snow Leopard compatibility and warn you against a couple of scary government initiatives.

Subscribe with iTunes (audio) Subscribe with iTunes (video) Subscribe with RSS (audio) Subscribe with RSS (video) EPISODE 1052

Snow Leopard Application Incompatibilities Compiled http://www.macrumors.com/2009/08/27/snow-leopard-application-incompatibilities-compiled/ http://snowleopard.wikidot.com/ http://support.apple.com/kb/HT3258

Snow Leopard’s malware protection only … Read more

Kaspersky 2010 in pictures

Kaspersky Internet Security 2010 and Kaspersky Anti-Virus 2010 went live this week, and we've created a slideshow to help users see what's new and what needs work in one of the leading security programs.

Full protection from Kaspersky

Protecting your computer from viruses is not something to take lightly, so we're glad to say Kaspersky Internet Security does a better-than-average job of keeping your PC safe. Three new features along with expected upgrades to their antivirus engine keep Kaspersky competitive.

New features in the 2010 edition include a behavioral-based detection system called the Urgent Detection Sytsem. The UDS uses tthe anonymous data Kaspersky customers who choose to participate in submitting their system scans for analysis. In fact, the UDS must be opted-out of--there's a check box and data collection statement to read when you install the … Read more

Kaspersky updates security suite for 2010

UPDATED: Benchmarks provided by CNET Labs were added on Monday, August 24.

A new season of security suites is upon us, and Kaspersky has made improvements to its Kaspersky Internet Security and Kaspersky Anti-Virus programs that include changes indicative of where security software as an industry is leaning. Three new features along with expected upgrades to its antivirus engine keep Kaspersky competitive.

The full-feature suite Kaspersky Internet Security offers a complete and competitive range of security options. The new features in the 2010 edition include a behavioral-based detection system called the Urgent Detection System. The UDS utilizes the anonymous data of 10 million Kaspersky customers who choose to participate in submitting their system scans to Kaspersky's central servers for analysis. In fact, the UDS must be opted-out of--there's a check box and data collection statement to read when you install the program.

Although this might sound insidious, it's actually a smart way to leverage a huge consumer base for security purposes as long as the data remains anonymous. Symantec's Norton 2010 will contain a behavioral check, too, and what both do is look at programs installed on your computer and judge their safety based on how many people have them installed and how they behave. Among UDS's better sub-features are the ability to customize how long it takes to pass judgment on a new program and per-user configuration of the rules governing program behavior.

Even if a program has deep penetration and it starts behaving badly, Kaspersky will block it. If it's an unknown, Kaspersky will treat it skeptically, monitoring and restricting the program until it has been proven safe. The Vulnerability Scan option, available under the Scan tab, utilizes tech from Secunia to determine which programs are potential security risks because they lack recent updates or patches. For programs that may not warn you that they have a pending security update, such as Adobe Flash, having this tool baked-in could be exceptionally useful. … Read more

Security firms discover botnet on Twitter

A Twitter account can be used as the command center for harnessing a "botnet" of virus-infected computers, security firms Arbor Networks and Symantec reported. In a blog post Friday, Symantec analyst Peter Coogan wrote that researchers found an account, @upd4t3, which was tweeting out links to download a piece malware called Downloader.Sninfs. The account has since been suspended by Twitter.

Downloader.Sninfs, also known as Infostealer.Bancos, is a Trojan that uses the guise of a Brazilian banking site to collects passwords and related personal information from infected computers.

Security on Twitter is front and center right … Read more