Subscribe to this page now.

Jimmy John's discovers malware-laden POS in July, all-clear given

09/24, 5:56pm

Assault detected July 30, all stores purged by September 5.

Sandwich chain Jimmy John's has reported a security breach, exposing information from customers of 216 locations. According to the chain, the company discovered at the end of July that an unknown assailant stole credentials from a vendor, and accessed the point-of-sale system. This action installed data-collecting malware at some locations between June 16 and September 5 of this year, with most infestations cleared out before the middle of August. The company reports that the security problem has been addressed, and it is once again safe to use credit cards at all stores.

more

Home Depot reveals more details on breach, 56M credit cards at risk

09/18, 8:19pm

Security steps, including terminal removal, outlined, malware evaded detection

More information on the breach of home improvement retailer Home Depot was announced today. While the company still says that only stores in North America are affected by the breach, it now adds that the information from 56 million unique payment cards was at risk. The company provided further insight into the steps taken since the breach, including adding stronger encryption, after the malware from terminals was completely removed.

more

Malware spreading over Twitch chat empties Steam account items

09/14, 3:08pm

Malware injected by raffle link sells items in Steam inventory, trades to specific account

Security firm F-Secure was recently alerted to a wave of malware targeting the Twitch game streaming audience as a way to turn a quick buck. The target of the Windows-based malware infection isn't aimed at stealing credit card information or joining into an click-through advertising botnet, but rather selling items of value that are associated with a Steam account.

more

Home Depot confirms data breach for United States, Canada stores

09/08, 7:18pm

Breach confirmed for April forward as investigation continues, no evidence of PIN theft

An initial investigation by Home Depot into an intrusion of its payment data systems has revealed that its systems were indeed breached. The home improvement retailer began looking into the breach of its systems after it noticed irregular activity and subsequent sale of its customer data last week. Home Depot was apparently hit by the same malware responsible for the breach of Target's systems.

more

Report: Eight high-profile sites hit by browser exploits last week

08/27, 11:45pm

Security firms says malvertising hit sites such as Java, DeviantArt and Photobucket

A "malvertising" campaign made the rounds last week hitting at least eight high-profile websites according to security firm Fox-IT. The firma noticed that the sites were redirecting their visits to other places, allowing it to discover that sites were using vulnerabilities in software like Java and Flash to inject malicious programs. The purpose of the "malvertising" was to infect machines with botnet malware involved in boosting advertisement clicks.

more

UPS Stores hit by 'malware intrusion,' customer data possibly exposed

08/21, 3:30pm

Stores in 24 states affected by breach, spanned up to seven months in some cases

The UPS Store chain of delivery and packaging facilities has reported that a number of its stores have been the target of a "broad-based malware intrusion," adding that customer data could have been accessed. The United Parcel Service (UPS) subsidiary became aware of the breach on July 31, the same day that the Department of Homeland Security sent out notices regarding a malware called "Backoff," according to the New York Times.

more

Synology unable to aid decryption of SynoLocker afflicted devices

08/06, 1:40pm

Malware strikes un-updated Synology NAS units

Synology product users affected by the SynoLocker attack may have lost their files to the cryptoware. Representatives from Synology have informed Electronista that at this time, they are unable to provide assistance recovering data that has been forcibly encrypted by the malware.

more

Android malware tool iBanking commands $5,000 price for attackers

05/21, 8:52pm

Evolving malicious tool adopts service model, grows increasingly complex

The market for malware tools is expanding, including the purchase of pre-made tools for a hefty fee from underground developers. One such tool aimed at Android, iBanking, promises to conduct a number of malicious actions including intercepting text messages, stealing phone information, pulling geolocation data and constructing botnets with infected devices. All it would cost to obtain the program is $5,000, even after its source code leaked earlier in the year.

more

Briefly: Facebook's anti-malware, Pinterest's new analytical API

05/20, 11:00pm

Facebook introduces free downloads of anti-malware software

Facebook has announced that it has added downloadable anti-malware software to its abuse detection and prevention systems. Provided in conjunction with F-Secure and Trend Micro, Facebook's new service is aimed at Windows users with infected devices. A pop-up notification appears upon signing into Facebook on an infected device; the app sends scan notifications within Facebook, and when the scanning is completed, the software uninstalls.

more

Google updates Verify Apps, adds post-install malware scanning

04/10, 3:51pm

Verify Apps updated to check for Android malware regularly after installation

Google is attempting to improve the security of Android, by changing the way it monitors apps on mobile devices. The Verify Apps service, which protects smartphones and tablets by checking the apps for malware at the time of installation and warning over potentially harmful software, will be updated to provide constant on-device monitoring of apps after the installation.

more

Update: Apple pulls malware-ridden fake 'Tor Browser'

03/20, 9:22pm

Media attention succeeds where developer reports failed

Thanks to media attention, Apple has now pulled an adware- and malware-laced fake "Tor browser" app from the App Store, months after it was first reported to be a fraud. The Tor project team has repeatedly complained about the fake app since December, as it was neither submitted by the team nor in any way official, but only when iOS news sites like this one picked up on the story did Apple take action.

more

Target POS malware found, ignored on November 30, December 2

03/13, 10:58am

Malware identified before it sent any customer data outside Target

Reports are circulating that Target knew of its "Black Friday" data breach much earlier than it said it did. Allegedly, the company was alerted by security firm FireEye that there was a potential problem as early as November 30, but no action was taken. Additionally, auditors discovered that Target had disabled features of its security suite that could have removed the infection, prior to it purloining millions of sets of customer's payment method data.

more

Snowden: NSA used false Facebook servers for malware implantation

03/12, 2:04pm

NSA shifting from personal hack to 'industrial scale' widespread attacks

Recently-examined Snowden-leaked documents have shown that the NSA is looking at significantly growing its ability to install malware on a large scale, using automated systems and falsified websites. The documents detail efforts to fake a Facebook server, with the targeted population infected upon visitation of the spoof site.

more

New commercial Android RAT makes creating malware apps easier

03/08, 1:20pm

Remote access tool Dendroid injects malware code into APK files

A HTTP new remote access toolkit (RAT) that is cause for concern has surfaced, according to anti-virus/anti-malware program maker Symantec, which makes turning legitimate Android apps into malware easier than before. The program, Dendroid (tagged as Android.Dendoroid by the security company), offers an easy-to-use commercial solution to inject malicious code for trojan access into APK files for placement on Android marketplaces, bypassing security checks.

more

Report: trojan malware spreading, hiding in other Bitcoin apps

02/13, 12:51am

Now being spread through Bitcoin programs found on download.com

The newly-detected OS X malware dubbed "OSX/CoinThief.A," a "trojan horse" that disguises itself as a copy of a legitimate app, has spread to other Bitcoin applications. SecureMac, an anti-virus software seller, discovered the original implementation of the malware disguised as a pre-compiled version of an open-source Bitcoin tool. It has now been seen pretending to be other Bitcoin apps, some of which are available on Download.com.

more

Briefly: VirusBarrier blocks OSX/Crisis.B., MeteoEarth for Mac

01/09, 10:06am

Trojan horse Flashback botnet returns, Intego VirusBarrier includes protection

The Flashback botnet -- a malware attack which first appeared in 2011 -- has been noted as being still a threat in 2014, according to Intego. Beginning January 2, Intego studied command and control domains, and its sinkhole servers recorded all connections from Macs where Flashback is still active, trying to contact the command and control servers. This research, as of Tuesday, counted 14,248 unique identifiers of Flashback variants.

more

Schmidt claims Android 'more secure' than iOS, draws laughter

10/08, 1:53am

Claims 'real-world' security testing by users makes it better

In the face of security studies that show that more than 90 percent of new mobile malware is found on the Android platform, Google's Chairman Eric Schmidt raised eyebrows and drew laughter at a Gartner symposium and IT expo by refuting a presenter's statement that the platform has serious security and fragmentation issues, claiming both that Android is "more secure than the iPhone," and that access to Google Play eliminates the issue of Android fragmentation.

more

Webroot updates SecureAnywhere antivirus with phishing protection

10/07, 10:09am

More uniform cross-platform interface, offers iOS, Android security

Webroot has launched the latest versions of its SecureAnywhere range of home computer security suites. The new Webroot SecureAnywhere Antivirus, Internet Security Plus, and Internet Security Complete adds new detection technology for protecting against new malware and phishing attacks, along with a redesigned interface for easier monitoring.

more

Feds: Overwhelming majority of mobile malware on Android

08/27, 1:20am

Apple's iOS seen to have 0.7 percent of threats targeting it

A memo written by the US Department of Justice and the Department of Homeland Security last year found that around 79 percent of mobile malware is designed to attack vulnerabilities in Android, with another 19 percent exploiting flaws in the discontinued but still widespread Symbian. Apple's iOS was seen to be threatened by 0.7 percent, while system such as Windows Mobile and BlackBerry drew only 0.3 percent of threats.

more

Researchers get malware app approved by Apple

08/19, 6:15am

More questions raised about Apple app approval process

The security of Apple’s App Store approval process has had its credibility challenged following revelations that it approved an app that was submitted by researchers with remotely assembled malware hidden in its code. According to Technology Review, the team from Georgia Tech monitored the app throughout the approval process and found that Apple only ran the app for a few seconds before approving it. This did give Apple the time to detect the malicious code which subsequently assembled into malware that could steal personal information, device IDs, photos as well as send texts and emails.

more

FBI able to remotely activate, record audio from Android devices, PCs

08/02, 1:14pm

Exploits, malware, tools purchased by FBI for remote surveillance hacks

The Federal Bureau of Investigation is able to listen into and record conversations through microphones connected to computers, as well as through Android smartphones, according to a report. The bureau is said to have used hacking tools, including spyware and other malware, that it has purchased from individuals and hacker collectives to gain access to mobile devices, in order to eavesdrop.

more

Fix coming soon for iOS 'power adapter' hack, says Apple

07/31, 11:12pm

Already in iOS 7 beta; hack demonstrated earlier today

Apple says it has already fixed an obscure security flaw that could have allowed hackers to access data on an iOS device through the use of a specially-designed custom USB device that looks like a charger but in fact contains a tiny Linux-powered computer designed to insert malware. The fix is already present in the most recent iOS 7 beta and will be incorporated into the OS when it is released to the public this fall, the company says, and involves notifying users whenever they connect to another computer, even through the power adapter.

more

New 'ransom' malware exploits JavaScript flaw to plague OS X users

07/15, 11:59pm

Until XProtect updated, only cure is to reset browser

A new bit of "ransomware" that has long been a plague to Windows users has been "ported" to work on Mac browsers, taking advantage of a flaw in JavaScript (not to be confused with Java) to prevent it from being easily dismissed or gotten rid of. The exploit takes advantage of the "restore from crash" to keep bothering the user, and scares them into thinking they must surrender payment information in order to "unlock" their browser and use it normally again, often under threat of persecution. There is a relatively easy fix, though inconvenient.

more

US Commission report: implant malware to stop IP theft worldwide

05/27, 4:54pm

US Government-sponsored report claims China biggest offender

The US Commission on the Theft of American Intellectual Property has released a report, calling for the use of malware and root kits to enforce US corporate-owned copyrights and media. As proposed, the report calls for the infringing file to be "rendered inaccessible and the unauthorized user’s computer could be locked down, with instructions on how to contact law enforcement to get the password needed to unlock the account."

more

New OS X 'KitM.A' malware discovered, mostly impotent

05/16, 4:01pm

App dumps screenshots into a folder, command and control servers inactive

A new semi-functional malware has been found for OSX. Discovered on a computer at the Oslo Freedom Forum by researcher Jacob Appelbaum, the OSX/KitM.A is a backdoor application which launches on boot and captures screenshots on a regular basis, which are then dumped in a folder.

more

Report: iOS app has accidental malware, but not a threat to users

05/07, 12:04am

Trojan horse points to non-functional webpage, part of sound file

A bit of malware -- a Trojan horse file that tries to redirect to a website -- has been found inside an iOS app, but the code has turned out to be harmless. The app in question is called Simply Find It ($2) and comes from a legitimate developer that has produced a number of legitimate games -- suggesting that the malware was probably inserted into the app accidentally. The bigger issue (since there is no direct threat posed by the bad code) is how Apple's testing procedure missed it -- and how two well-known anti-malware scanners couldn't pick up on it either.

more

Report: Android, Symbian liable for for most mobile malware

03/07, 6:17am

BlackBerry, iOS, Windows Mobile have fewest and most innocuous threats

(Updated with Phil Schiller Twitter post) For years, Mac owners have gently rebuffed the myth that the Mac is so resistant to viruses because of "security through obscurity." No, they'd say, it's because the OS is better hardened against threats. Now the malware discussion has moved on to mobile, and that case is being debated anew: the most popular and one of the fastest-fading current cellphone OSes are responsible for a whopping 89 percent of all mobile device malware, while three of the most well-known smartphone platforms -- iOS, Blackberry and Windows Mobile -- have the fewest issues.

more

Adobe issues 'emergency' Flash update to stop new malware

02/07, 10:00pm

Exploits affect both platforms, one targets the Mac specifically

Adobe has issued a patch to update Flash on both the Mac and Windows platform in order to fix two new vulnerabilities already being exploited "in the wild" to spread malware. One of the targeted attacks using the exploit works equally well against Mac users as it does against Windows users. Visitors are tricked into downloading and opening MS Word files that contain malicious Flash content, while the other vulnerability users a similar technique but only affects Windows users.

more

Microsoft, Symantec take down central Bamital botnet servers

02/07, 1:36pm

Users of infected machines warned about malware

Microsoft and Symantec have shut down the Bamital botnet, after obtaining a court order to seize the network's controlling servers. The network, dedicated to redirecting users of computers infected with malware to incorrect search results and online advertisements, is estimated to have earned around $1 million per year for it's operators.

more

Microsoft Security Essentials fails anti-virus security test

01/17, 6:09am

Security program manager challenges test results

Security Essentials, the anti-virus and anti-malware software supplied by Microsoft has failed in anti-virus certification tests. Out of 25 consumer antivirus programs tested by independent laboratory AV-Test in late 2012, only three failed to pass muster, with Microsoft Security Essentials 4.1 being joined by PC Tools Internet Security 2012 and AhnLab Internet Security 8.0.

more

Java zero-day exploit seen in malicious advertising

01/10, 4:29pm

Vulnerability found in Java 7 Update 10

A previously unknown vulnerability in Java is being used online by hackers, according to security researchers. The 0-day exploit has also reportedly been included in two malware toolkits used by hackers, with the best form of protection currently being to turn off the Java plug-in for all browsers until the hole is patched.

more

Report: new Mac malware hides as fake software installer

12/12, 1:50am

Uses 'SMS activation' to hide subscription charge on cell bill

A Russian security firm with a mixed track record is warning about a new malware threat for the Mac, which masquerades as an installer for various types of software. Doctor Web, who claimed to have discovered the malware, says it is widely available on various sites -- though at present it is targeting Russian Mac users. The Trojan is apparently a Mac variation on a widespread Windows and Android trickware ruse that asks users for their cell number in order to send an activation code by SMS.

more

Adobe reveals details of two-month-old server intrusion

09/27, 10:04pm

Authentication server penetrated; code signed as Adobe-authentic

Adobe warned today that an internal digital code signing server was hacked by "sophisticated threat actors" focusing on Adobe. The early-July hack led to the compilation of a minimum of two malicious files that were digitally signed and authenticated as Adobe genuine software. The hack gave the attackers the means to build malware that the operating system views as legitimate Adobe-created software, making it that much harder for security packages to detect and eliminate the threat.

more

Intego unveils iOS version of VirusBarrier as preventative

09/27, 1:29am

Stops infected email, files from passing on Mac or Windows malware

Although iOS is widely considered to be all but completely malware-free, Mac security company Intego has created an iOS version of its malware scanner VirusBarrier that works with all iOS 4.0 and higher devices. The program is mainly used to scan email attachments for potential Windows viruses, but can also detect any Mac or UNIX malware, adware, keyloggers and Trojan Horse-type programs. The program can also scan ZIP archives and files stored in some cloud locations such as Dropbox, FTP and websites or WebDAV disks.

more

Microsoft seizes partial control of Chinese 3322.org botnet

09/14, 1:10am

Hundreds of strains of malware hosted on 70,000 domains

Microsoft announced Thursday that it was granted permission by the US District Court for the Eastern District of Virginia to wrest control of the "Nitol" botnet. In the filing, Microsoft described how it purchased computers from several districts in China, and approximately 20 percent of them came pre-infected with the malware. Titled "Operation B70" by Microsoft, the seizure of the botnet hubs is the latest attack that the manufacturer has undertaken in an attempt to derail large-scale internet crime operations based off of its operating system.

more

Second Mideast energy company struck by unknown virus

09/03, 12:21pm

Energy production not affected, no estimated time of recovery

Another Mideast energy firm has been infected by malware, the second in as many weeks, with energy firm RasGas forced to disconnect itself from the Internet as a precautionary measure after an "unknown virus" overcame countermeasures. Natural gas production has thus far not been affected. Both attacks have been intended for data destruction rather than theft, and spread around internal networks by lurking on shared hard drives.

more

Forum roundup: trouble with malware, Mac minis and more

08/31, 12:26pm

Possibly infected MacBook Pro and more

This week in the MacNN forums one forum member is trying to see if it's possible to install and run Mac OS X on a computer that previously ran Windows, click here to give advice. One disgruntled forum goer is concerned about a MacBook Pro possibly infected with malware, and seeks help to solve the problem.

more

Flame malware extinguished by creators

06/08, 6:56pm

Code auto-uninstalls using newly-sent command

The originators of the accidentally-discovered Flame malware may have sent commands to the controlled machines to delete and overwrite itself. Interestingly, rather than use a pre-existing command in the code, aptly titled SUICIDE, the controllers sent a whole new directive file that assisted in the auto-uninstallation.

more

'Flame' cyber-attack aimed at Middle Eastern countries

05/29, 3:51pm

Complex data vacuum likely government-backed

Russian security firm Kaspersky has uncovered a massive malware attack, referred to as Flame, that is believed to have gathered sensitive data from a wide array of countries, including Israel and Iran. The malware is said to be modular and expandable in a manner reminiscent of a smartphone app library. The BBC reports that the complexity of the malware has led experts to believe that it could only have been developed with the assistance of a government entity.

more

Malware charges for free Android apps through Google Play

05/21, 6:00pm

Android.Opfake reemerges, now pushing fake free apps

Symantec has discovered a novel implementation of the Android.Opfake malware, one that takes users through a fraudulent app-download process before charging them for what was initially billed as a free app. The malware is notable because it actually directs users through the Google Play app store in the process of defrauding them of money.

more

Android malware strikes again, this time via hacked sites

05/03, 7:05am

Android hit by first mobile drive-by attack

Mobile security firm Lookout has issued an update alerting Android users to a new drive-by malware attack. In a first for mobile devices, the latest exploit uses hacked websites to target Android users. Users who have been affected have navigated unsuspectingly to a compromised website that has a hidden iframe at the bottom of each page triggering the NotCompatible Trojan to download to their Android device.

more

Flashback.K-infected Macs dropping rapidly, Symantec finds

04/18, 3:00am

Now under 100,000 units, falling fast

The Java-exploiting malware OSX.Flashback.K variant has ceased to be a meaningful threat to Mac owners, and the number of infected Macs has dropped to one-sixth its high point in just over a week, reports utility vendor Symantec. The malware, which was the most successful attack thus far in the Mac world due to a slow updating of Java, was never much of an actual security threat but did manage to reach around one percent of installed base, a record for malware penetration.

more

Avira launches free Mac Security anti-malware app

03/28, 6:00pm

Helps stop accidental passing of PC viruses

Windows anti-virus software maker Avira has released a free version of the software for Macs, called Avira Free Mac Security. It is available for consumers and businesses alike who may wish to guard against malware downloads and the accidental acquisition and passing on of Windows viruses. While Mac OS X is not affected by viruses and malware aimed at Windows, Mac users can inadvertently e-mail or otherwise share infected files.

more

Intego: new Flashback variant masquerades as Software Update

03/08, 1:35am

Malware may sniff for user names, passwords

A new malware threat dubbed Flashback.N, is actually a variant of an older one, claims anti-virus software maker Intego in a new blog post. Users who visit hacked or maliciously-crafted websites may see a delay, followed by a false password-request dialog box claiming to be from "Software Update." If accidentally installed, the malware inserts code into Safari's resources and will attempt to search network traffic for user names and passwords.

more

New Android malware affecting users, connects to botnet

02/10, 7:40pm

Android malware, RootSmart, infecting phones

A new piece of Android malware is afflicting thousands of users. North Carolina State University professor Xuxian Jiang, who documented the nature and behavior of RootSmart last week, believes that between 10,000 to 30,000 user devices are connecting to a botnet without their knowledge everyday. Most of the affected users thus far are located in China and have installed the GingerBreak root access tool for Android 2.3 (Gingerbread).

more

F-Secure: 'Several dozen' malware threats to Mac in 2011

01/19, 1:40am

More than before, but not consummate with growth

The Mac platform saw a modest increase in malware outbreaks in 2011 over years past, but still "a small fraction" when compared to Windows, said security firm F-Secure. It added that while malware attacks were increasing, the rate of increase was not commensurate with the growth of the platform, suggesting that most exploits tend to come from programs rather than flaws in the OS itself. In all, the company identified 58 separate threats in 2011, most stemming from a handful of vulnerabilities.

more

Alert: New Mac malware hiding in pirated graphics software

10/31, 9:05pm

Steals GPU time, tries to capture passwords, more

Anti-malware makers Sophos and Intego have warned of a new Mac OS X Trojan Horse that hides inside pirated software, specifically GraphicConverter v7.4. The malware, known as OSX/Miner-D or "DevilRobber," steals GPU time to generate counterfeit Bitcoins (part of anonymous digital cash system) and also attempts to steal usernames and passwords through periodic screen captures. It also sends information about the Mac's security setup and browsing history to a remote server.

more

Android 'fee' malware hidden in legitimate apps

05/31, 9:35pm

Malware spotted in 20 titles in Android Market

Several months after Google pulled a long list of titles from the Android Market to help protect users against Malware, the platform has reportedly been targeted by a fresh scam. Security software company NetQin claims to have found malware contained in over 20 Android apps, causing devices to auto-dial phone numbers or send text messages that lead to unwanted fees.

more

Intego revamps Mac anti-malware programs

04/26, 6:30pm

Introduces Plus version, more frequent updates

Intego today updated its free VirusBarrier Express anti-malware program to version 1.1, improving and simplifying the program's malware definition update system. The company will now update malware definitions at least once a month, and without charge (a change from the previous system) and will now limit itself to Mac malware definitions (another change). The company also introduced a new product, VirusBarrier Plus, also sold exclusively through the Mac App Store, that guards against both Mac and Windows malware so that Mac users don't pass on Windows viruses or malware (which won't affect the Mac) on to Windows-using friends accidentally.

more

Google culls 21 Android apps to curb malware spread

03/02, 5:40am

Current model leaves users vulnerable

Google has taken steps to address the rising malware problem that threatens to plague the platform. According to a report from Mashable, Google has pulled 21 apps from the Android Market that have been identified as being aimed at gaining root access to a user’s personal data. While proponents for Google’s platform often deride Apple’s iOS platform for being “closed” and for Apple’s App Store approval process, Google’s stance has seemingly left its users vulnerable to serious security threats.

more

Electronista Sponsor

Electronista Newsletter

Free Technology and Gadgets Newsletter

  • We will not share your email address with anyone.

    toggle

    Most Popular

    Sponsor

    Recent Reviews

    ActvContent Sync Smartband

    Smartbands of all sorts are hitting the market. Some build on the buzz around fitness trackers, while others offer simpler features fo ...

    RocketStor 6324L Thunderbolt 2 eSATA bridge

    Like it or not, the shift to Thunderbolt is underway. The connection is extremely flexible, allowing for video and data to co-habitate ...

    Patriot Stellar Boost XT 64GB USB 3.0 drive

    A vast selection of USB memory sticks means that consumers can often find exactly the size drive they need in a configuration that can ...

    Sponsor

    toggle

    Most Commented

     
    toggle

    Popular News