* Online videos may be conduits for viruses * Patches from Apple, Mandriva, rPath, others * Web's 'dark corners' are everywhere, and other interesting reading
Today’s malware news:
Lewd celebrity photos mask Trojan payload
Angelina Jolie and Halle Berry were unwilling vectors of a massive spam campaign last month, in which naked pictures of the two actresses obfuscated a Trojan payload. Computerworld, 10/03/07.
Malware authors are seeking money mules for their illegal activities. Symantec Security Response blog, 10/02/07.
Online Videos May Be Conduits for Viruses
Online videos aren’t just for bloopers and rants _ some might also be conduits for malicious code that can infect your computer. As anti-spam technology improves, hackers are finding new vehicles to deliver their malicious code. And some could be embedded in online video players, according to a report on Internet threats released Tuesday by the Georgia Tech Information Security Center as it holds its annual summit. WashingtonPost.com, 10/02/07.
**********
Today’s roundup of bug patches and security alerts:
According to the Apple advisory, “A command injection issue exists in QuickTime’s handling of URLs in the qtnext field in files with QTL content. By enticing a user to open a specially crafted file, an attacker may cause an application to be launched with controlled command line arguments, which may lead to arbitrary code execution. This update addresses the issue through improved handling of URLs. This issue does not affect Mac OS X systems.”
**********
Two new updates from Mandriva:
mPlayer (heap overflow, code execution)
libsndfile (heap overflow, code execution)
**********
Four new fixes from rPath:
OpenSSL (buffer overflow, code execution)
qt-x11-free (denial of service, code execution)
rMake (code execution, elevated privileges)
**********
Four new patches from Debian:
elinks (information disclosure)
quagga (null pointer, denial of service)
OpenSSL (buffer overflow, code execution)
Linux kernel 2.6 (multiple flaws)
**********
From the interesting reading department:
Malicious code infects Chinese security site
The Web site of one of China’s Internet security organizations has been laced with malicious code. At least three pages on the Chinese Internet Security Response Team’s (CISRT) Web site are rigged with a malicious “iFrame,” a hidden window on a Web page that can allow code such as JavaScript to run on a visitor’s PC, according to Trend Micro’s malware blog. IDG News Service, 10/03/07.
Web’s ‘dark corners’ are everywhere, group says
It’s getting harder and harder to know who to trust on the World Wide Web, according to online safety advocates StopBadware.org. On Tuesday, the group released its 2007 Trends in Badware report, saying the bad guys are finding new ways to place their malicious software on our computers — often by compromising Web sites that we trust. IDG News Service, 10/03/07.
Data on Gap job applicants exposed in laptop theft
Gap said on Friday that a laptop storing personal information on 800,000 job applicants was “recently” stolen from the offices of a third-party vendor that manages job applicant data for the retailer. Computerworld, 09/28/07.
Feds bust alleged botmaster who attacked antiscam site
A 21-year-old man has been arrested and charged with launching a distributed denial-of-service (DDoS) attack against CastleCops, an online forum and Web site that specializes in rooting out Internet scams. Computerworld, 10/03/07.
The October State of Spam report
With the housing market taking a continued hit in September, in-boxes also took an increased hit as spammers exploited the recent market slowdown and subsequent interest rate cut by the Federal Reserve in the U.S. As noted in the October State of Spam Report, Symantec has seen a marked increase in spam directed towards homeowners and prospective homeowners offering refinancing, home equity loans, and actual houses. Symantec Security Response blog, 10/03/07.
Hackers post techniques for reversing iPhone upgrade
Owners of hacked iPhones have begun posting instructions on how to roll back a recent Apple firmware upgrade that rendered their mobile phones unusable. IDG News Service, 10/02/07.
Paid-for ‘zero footprint’ browser launches
A U.K. security company has launched a ‘zero footprint’ browser it claims will protect users from the security problems that regularly afflict popular browsers. The work of London-based EISST (Enterprise Information Security Systems & Technology), the XP and Vista-compatible e-Capsule Private Browser, to give it its full name, uses a mixture of techniques to protect a Windows user’s identity and keep browsing data away from prying eyes. TechWorld, 10/02/07.
Consumers only think they’re cyber safe
Most U.S. consumers believe they’re protecting their computers against cyberattacks, but their actions indicate they aren’t as safe as they think, according to a study released Monday. IDG News Service, 10/01/07.
