worm

Massive worm hits Tumblr, spams big blogs like USA Today

A massive bug swept Tumblr today and infected some of the biggest blogs -- including USA Today, Reuters, The Verge, and CNET -- until Tumblr resolved the issue shortly before 10:30 a.m. PT.

GNAA, a hacker group, claimed responsibility for the attack. The group's Twitter profile earlier today said 8,600 unique Tumblr users were affected.

Tumblr didn't explain what happened but said in a blog post that no accounts were compromised, and users didn't need to take any further action.

"Our sincere apologies for the inconvenience," the company said. "As always, … Read more

Worm spreading on Skype IM installs ransomware

A malicious worm spreading through Skype instant messages threatens to take control of a victim's machine and hold its contents for ransom.

The issue, which was first brought to light Friday by GFI, tricks users into downloading a ZIP file by displaying the socially-engineered message, "lol is this your new profile pic?" along with a link that also spreads the message to other Skype users. The ZIP filed contains an executable file that installs a variant of the Dorkbot worm and creating a backdoor via "Blackhole," an exploit kit used by criminals to infect computers … Read more

Windows malware slips into Apple's iOS App Store

A Windows malware worm has been found embedded in an application being distributed in Apple's App Store for iOS. The worm is a relatively low-threat malware package that will not affect the iOS or the MacOS platform but may be harmful to those who manage the app in their iTunes accounts on Windows machines.

In a recent post to an Apple discussion forum, user "deesto" mentioned he had downloaded the free "Instaquotes Quotes Cards for Instagram" app from the iTunes store and noticed that his ClamXav antivirus program had flagged the downloaded file as containing … Read more

The 404 1,081: Where nobody's perfect (podcast)

Leaked from today's 404 episode:

-Facebook quietly adds creepy "Find Friends Nearby" feature.

-Apple no longer claims immunity from viruses on its Web store.

-New site "weknowhatyouredoing.com" tracks Twitter and posts incriminating patterns.

-Hot Toys' Joker action figure is serious...ly amazing.

-No one watches TV, Nielsen, and you know it.… Read more

Behind the 'Flame' malware spying on Mideast computers (FAQ)

The Flame worm that has targeted computers in the Middle East is being called "the most sophisticated cyberweapon yet unleashed" by Kaspersky Lab researchers who discovered it. Lurking on computers for at least five years, the malware has the ability to steal data, eavesdrop on conversations, and take screen captures of instant message exchanges, making it dangerous to any victim. But a possible link to malware found on computers in Iran's oil sector has experts saying it's got to be the work of a nation-state.

CNET talked with Roel Schouwenberg, senior researcher at Kaspersky, the company … Read more

A new polish for Chromebook and Chromebox

In today's show, we test Google's new operating system, chirp goodbye to Nextel, and pay our Russian bills with green pigs:

The reviews are out for Samsung's new Chromebook and Chromebox, running on the newly updated Chrome OS. And the bottom line is that it's better than the last version, but still not all that impressive. (Especially since the Chromebook has limited capabilities and costs more than a tablet.)

The Nextel network will officially be killed-off in June of 2013, and Sprint is pushing Nextel customers to use Sprint Direct Connect devices.

There's a new … Read more

'60 Minutes' profiles threat posed by Stuxnet

Stuxnet took the world by storm two years ago.

The worm was different from previous viruses: it wasn't designed to steal money, identities, or passwords. Instead, the malware targeted the controls at industrial facilities such as power plants, inspiring talk of a top secret, government-sponsored cyberwar.

At the time of its discovery in June 2010, the assumption was that espionage lay behind the effort, but subsequent analysis uncovered the ability of the malware to control plant operations outright--specifically an Iranian nuclear facility.

In addition to showing that a cyberattack could cause significant physical damage to a facility, it also … Read more

Worm steals more than 45,000 Facebook logins

A nasty bit of malware making the rounds on Facebook has reportedly made off with the usernames and passwords of more than 45,000 users.

Most of those affected by the worm--called Ramnit--are from France and the United Kingdom, according to a bulletin issued by security researchers at Seculert. It is capable of infecting Windows executables, Microsoft Office, and HTML files, according to McAfee.

"We suspect that the attackers behind Ramnit are using the stolen credentials to log-in to victims' Facebook accounts and to transmit malicious links to their friends, thereby magnifying the malware's spread even further," … Read more

Performance targeted in AVG Free 2012

The bottom line: AVG Free 2012's renewed focus on performance keeps scans zippy, but struggles with slowing down your boot time and too many false positives.

Review: The never-ending mantra chanted by security suite vendors sounds a lot like "faster scans, easier to use, better performance," and AVG has released a new version that it says accomplishes all three. Certainly, the scans are faster, it does install more quickly, and some tweaks to the interface have made it easier to view. Two new core security changes will make you safer, too.

Editors' note: Portions of this review … Read more