Posted 10/16/08 at 04:07:25 PM by Mark Edward Soper

I know it, you know it, almost everybody that reads Maximum PC knows it - but that doesn't mean that your family, your co-workers, or your bosses know it. What's it? Simply this: Microsoft never - repeat never - sends out security updates via email.
Cnet reports that yet another fake security email purporting to be from Microsoft is busy delivering a nasty Trojan called Haxdoor to unwary emailboxes near you.
The email, ironically enough, claims that "Since public distribution of this Update through the official website http://www.microsoft.com would have result in efficient creation of a malicious software, we made a decision to issue an experimental private version of an update for all Microsoft Windows OS users." And, it's signed "Steve Lipner, Directory of Security Assurance, Microsoft Corp."
Well, at least the bad guys got Steve's name right. However, he's actually senior director of security engineering strategy in Microsoft’s Trustworthy Computing Group, according to a recent interview.
The message (minus the Trojan, of course), is available at the Microsoft Malware Protection Center blog, where you can see for yourself the classic hallmarks of a fake message: a shaky command of the English language, sentence construction that's so stiff it belongs on a Victorian-era calling card, and off-the-wall sentiments that show it was adapted from a different con job document: "We apologize for any inconvenience this back order may be causing you." Back order? Whaat? I didn't order any malware!
Already getting calls from frantic family, friends, or co-workers wondering why their PCs have slowed to a crawl or become infested by popups? Join us after the jump for solutions.
Posted 07/29/08 at 05:27:35 PM by Paul Lilly
You've been told money can't buy you love, but for $1,300, you can buy a Trojan guaranteed to screw the recipient without them ever knowing it's there. Apparently not completely fool proof, security company Prevx discovered the supposedly undetectable super virus now known as Limbo 2 and reports that hackers are selling custom variations of the Trojan. If a variation gets detected, the Trojan can be tweaked to fly under the radar without changing its payload.
Once infected, Limbo 2 not only logs your keystrokes, but it will set a trap by generating spoofed information boxes when victims navigate to certain login pages. Keystrokes, credit card information, and any other personal data it manages to harvest from the hard drive then gets transmitted back to Botnet Central.
These types of Trojans aren't new, but it's Limbo 2's speed and customization that has security vendors concerned. On a broader scale, it's all part of a seedy underground economy driven by stolen data. It's become so prevalent that hackers have had to lower prices and look for new types of stolen data to sell for bigger profits, including health care information and corporate emails.
How secure is your PC?
Posted 06/19/08 at 03:40:15 PM by Mark Edward Soper
Script kiddies, move over. Now there's a toolkit that can turn any executable file into a worm, and it's so easy "even a caveman could do it." Find out what makes this new malware creation kit so scary, where it might have originated - and why.
The Register.co.uk website ('Biting the hand that feeds IT') isn't just an industry gadfly: concealed beneath its British-accented snark is a lot of useful news – including this report about a new malware-creation tool that's point-and-click easy.
Posted 01/14/08 at 10:28:43 PM by Mark Soper
Malware writers never tire of attacking your bank accounts, and they're getting smarter. Here's a roundup of the latest threats to you and your money, and how to stop them.
Posted 11/12/07 at 04:02:01 PM by Mark 'Marcus Soperus' Soper
Have a Maxtor Basics hard disk? You may have connected a big security breach to your system. Learn what's at risk and how to protect yourself - now.





