trojan

More malware targeting Android

Researchers are reporting the discovery of malware targeting Android devices, specifically a new variant of the DroidDream Trojan found in apps that Google removed from the Android Market, as well as malware on alternative app markets in China designed to run up premium SMS bills, and a data-stealing Trojan that targets one-time bank SMS pass codes.

Mobile-security firm Lookout warned of new variants of DroidDream Light that were found in the Android Market and subsequently removed by Google. "Fortunately the malware was available in the Android Market for [only] a short period of time, so the number of downloads … Read more

Anonymous, LulzSec spawn 'one of worst' quarters

Cyberattacks from Anonymous and LulzSec and breaches against everyone from Sony to Lockheed Martin turned the second quarter into "one of the worst on record," according to a new report from Panda Security.

Released this week, Panda's second-quarter report (PDF) examined the security landscape from April to June and highlighted a string of alarming incidents.

Pointing to the attacks by Anonymous and LulzSec against the likes of Sony, the U.S. Chamber of Commerce, the Spanish police, and several government sites, Panda said that the line between "hacktivism" and criminal behavor has gotten fuzzier.

Panda clearly questioned the methods of the new breed of hackers, saying that Anonymous calls its actions "peaceful protests," even though such actions are illegal. Also mincing no words with LulzSec, Panda said that "if you took the most irresponsible and brainless members of Anonymous and put them all together, they would be considered the most refined gentlemen compared to LulzSec."

Though LulzSec recently announced that it would be ending its attacks, the group urged other hackers to carry on the fight via operation Anti-Security, or AntiSec.… Read more

How to remove MacDefender fake antivirus program

A new malware infection has apparently been spreading relatively rapidly among Mac users, and it's unclear both how pervasive the infection is and whether Apple is addressing the problem. What is known, however, is how to get rid of it.

What is it? Most often called MacDefender, but also known as MacProtector and MacSecurity, this bit of malware is a socially engineered threat of a type that's more familiar to Windows users. It often starts with a Web advertisement that suckers you into downloading a rogue antivirus program, which purports to protect you. In fact, once installed it … Read more

How to manage malware in OS X backups

In yesterday's article on protecting your Mac from recent malware developments in the Mac community, I mentioned briefly to exclude specific download folders from your Time Machine backups or other backup options to prevent any downloaded malware installers from being retained in a backup. In response to this article, MacFixIt reader "Harry" wrote in wondering what to do if malware or other unwanted items do get backed up to Time Machine.

Time Machine runs every hour, so if you have installed the recent malware or another unwanted item and your backup routine has run, then it is … Read more

'Apple Security Center' malware targeting OS X users

If you ever see a message or window in Safari or your e-mail client about your system's security being compromised, ignore it! Malware developers and scammers are increasingly focusing on OS X and working to trick Mac users with highly developed Trojan horse attempts, using both software and ominous-looking messages generated in Web browsers and e-mail clients. Recently some rather sophisticated Trojan horse scam software called MacDefender was discovered for OS X, and a similar attempt has surfaced with a Web-based malware-detection facade that tries to get you to download and install malware on your system.

In a growing threadRead more

New MacDefender malware discovered for OS X

Mac antivirus and security developer Intego has issued a blog report on a new malware threat for OS X systems called "MacDefender" that has surfaced. The threat is a Trojan horse that is being targeted to Mac systems through "Search Engine Optimization (SEO) poisoning" efforts, and uses Safari's "Open Safe Files" feature to run the installer for the malware.

SEO Poisoning takes advantage of common search terms that Google, Yahoo, Bing, and other search engines use to present results, and forces a malicious Web page to the top of the search provider's … Read more

Surge in malware marks start of year

The first three months of the year have so far witnessed a rise in malware and some notable cyberattacks, according to a report released today by Panda Security.

Tracking a big jump in malware (PDF), Panda Security has uncovered on average around 73,000 new types of threats being released every day. That's a 26 percent increase during this year's first quarter compared with the same period in 2010.

Among the various flavors of malware, Trojan horses have accounted for around 70 percent of all threats so far this year. That points to Trojans as a tool favored … Read more

Reports: Google yanks infected Android apps

Google apparently has used a kill switch to remove 21 malware-infected apps from both its Android Market and from people's Android devices.

Calling the Trojan the "mother of all Android malware," enthusiast site Android Police said yesterday the infected apps were discovered by a Reddit user. That Reddit user found that pirated versions of legitimate apps were infected by a Trojan called DroidDream, which uses a root exploit dubbed "rageagainstthecage" to compromise a device.

This piece of malware is especially virulent because it apparently cannot only capture user and product information from a device but … Read more

Symantec: Malware masquerading as Android apps

Legitimate Android apps are being compromised by phony versions that masquerade as the real thing but deliver a payload of malware, according to a Symantec blog published yesterday.

Found on unregulated third-party Android markets, malicious versions of legitimate apps like Steamy Window are difficult to distinguish except for their tendency to request permissions that are more excessive than usual, says Symantec. But once installed, these apps carry a new piece of Android malware dubbed Android.Pjapps.

Even running the app doesn't raise a red flag to the user as the fakes closely look and act like the legitimate versions. … Read more

Closing backdoor threats in OS X

A "back door" in computing terms is a method that hackers use to circumvent a system's authentication features and gain access without being detected. Usually this involves taking advantage of bugs in the built-in sharing services and OS features, but it also can happen if a user inadvertently installs some malware that provides a path around the system's security.

Anytime you start a sharing service on your computer, be it for files, screen sharing, chatting, or printers, you are technically opening a door for a client application running on remote system to connect and change or … Read more