Apple's much hyped iPhone press event has brought the Web's worst out of the woodwork (we're talking about hackers, not Apple fanyboys, in case that's not clear) who are trying to get gullible users to click on malicious links. The email appears to come from Apple and seemingly provides details about "the new Apple iPhone 5GS," and that alone is a dead giveaway that something's fishy. Apple announced the iPhone 4S today, not the iPhone 5GS.
It sucks, but malicious apps are beginning to be a common occurrence on Android phones. Studies have shown that malware-ridden Android apps have been on a meteoric rise throughout the year. A new report says the havoc is spreading; many of us know better than to click on a link from an untrusted source, but scammers have started working around that by offering scannable QR codes that link directly to malware.
Symantec noticed an uptick in social engineering attacks in September, a trend the security outfit attributes to a rise in polymorphic malware in email, the company said in its recently released "Symantec Intelligence Report: September 2011." Spam levels dipped slightly in September to 74.8 percent of all email, a decrease of 1.1 percent from August, but a "deluge of malicious email-borne malware" more than made up for the drop in spam.
As antivirus programs and end users alike become more adept at identifying badware, malware authors are getting even sneakier in their quest to infect your computer. Social engineering is the name of the game now – just ask the NBC News exec who clicked on an infected Christmas tree attachment from an unknown sender. A new report says that scammers have begun using a novel trick to get users to open malicious files; they send emails that claim to be from the office’s printer/scanner, which is actually pretty friggin’ clever.
Security firm Webroot is taking great interest in a new BIOS rootkit discovered by a Chinese company called Qihoo 360. It's called "Mebromi" and it's a particularly nasty piece of code that targets Award BIOSes, but that's not all. It also contains an MBR rootkit, a kernel mode rootkit, a PE file infector, and a Trojan downloader all rolled into one.
Ruh-roh Shaggy, peer-to-peer file sharing just became a little more dangerous. Hackers up to no good (and no, those two don't always go hand-in-hand) set their sights on BitTorrent.com and uTorrent.com, sneaking in the back and replacing legitimate downloads with tainted copies brimming with malware.
How many times have you been told that when one door closes, another one opens? Probably a whole bunch, but what no one ever bothered to disclose is that this idiom isn't always an inspirational motivator to carry on with life and can sometimes apply to those with less scrupulous intentions. Case in point: a security firm warns that the Koobface worm is no longer spreading through social networks and is now slithering its way across BitTorrent sites.
Apparently Microsoft's Internet Explorer browser leads the pack in more ways than just market share. With regards to IE9, socially engineered malware (SEM) barely has a chance of wreaking havoc, according to a study put together by NSS Labs. The study's data has IE9 way out in front of all other browsers tested with a better than 99 percent protection rate.
When someone says the word "Zombies," we immediately mutter the word "Cool" in a low voice and think back to the fun zombie-killing action in Shaun of the Dead or Dead Rising 2. But while zombie movies and video games may strain the outer edges of awesome, zombified computers just suck. If you live in the US or UK, we have bad news: a recent report studying malware distribution claims that your computers are the most valuable compromised computers in the world.
There has been an alarming increase in scareware over the last couple of years. Google, which in 2010 ascertained 15% of all malware to be of the scareware variety, has begun notifying search users about a new strain of malware, which is thought to have been delivered to around a couple million PCs hidden inside fake antivirus software. According to the company, the said malware “causes infected computers to send traffic to Google through a small number of intermediary servers called ‘proxies’”. Hit the jump for more.