F-Secure security labs has found a phishing site is running on Sony's server in Thailand. The phishing site runs under hdworld.sony.co.th and targets an Italian credit card company, CartaSi. While the attack isn't as serious as the PSN hack, it still represents a flaw at a time when Sony needs it the least.
Researchers at Matousec have found malware that could potentially compromise nearly every Windows XP system using current antivirus software. KHOBE (Kernel Hook Bypassing Engine) takes advantage of the vulnerable System Service Descriptor Table to trick Microsoft's OS into accepting rogue code. It allows a safe code thread to be scanned by antivirus apps but immediately swaps in a thread containing a virus or other attack, giving the malware free rein.
The third-party antivirus software for Windows PCs is buckling under the load of advanced security threats, German computer magazine c't reports in its latest issue. A comparison of 17 different antivirus tools show that while a few programs are adept at picking up known trojans viruses, such as AVG and BitDefender, most have seen a degraded ability to recognize malware that does not fit existing patterns. With the exceptions of F-Secure and NOD32, most halved their detection rates of unknown from 40-50 percent in January to just 20-30 percent. This places most Windows PCs at risk of catching a 'wild' virus before the antivirus software firms have a chance to update their signatures to recognize it, c't warns.
