Malware Archives - Page 3 of 4 - Tech Prognosis Blog

“Windows license locked”: Ransomware Targets Windows

April 12, 2011 by techprognosis

“Windows license locked!”
“This copy of Windows is locked. You may be a victim of fraud or there may be an internal system error” – malware message

Mikko Hyppönen of F-Secure has warned of a new variant of what he calls “Ransomware” or ransom trojans. These are attacks by malware that takes a computer hostage and then tries to extort a payment in return for returning control of the computer or its files to the owner. Sometimes, the malware will encrypt files (using AES – Advanced Encryption Standard, for example) until some “ransom” is paid by buying a key to unlock the hostage computer.

APTs and Small Businesses: Hype or Real?

April 1, 2011 by techprognosis

A new buzzword seem to emerge every few hours these days. If it’s not “Cloud”, it is “DLP”. One of the latest, in the security field at least, is “APT”. For Debian-based Linux users, we think of Aptitude, the update tool when we hear the word Apt. This APT refers to Advanced Persistent Threat – a term that is argued to have been coined by Washington D.C.-based security firm Mandiant.

It is a new attempt at restating an old problem of information security. Think of the old telephone trap and trace, satellite imaging, the presence of undercover operatives on the enemy’s side of the fence etc. Just like “Cloud” and “DLP”, the phrase sounds catchy and has enough ominous ring to it that will make CEOs and CISOs perk up when it is thrown at them by master pitchmen of security providers.

Is Samsung Installing Keyloggers on Laptops?

March 30, 2011 by techprognosis

UPDATE: It has now been confirmed that Samsung laptops do not contain keyloggers or spyware.

UPDATE: Samsung has issued a statement saying that the finding is false. The statement says the software used to detect the keylogger, VIPRE, can be fooled by Microsoft’s Live Application multi-language support folder. This has been confirmed at F-Secure and two other publications, here and here.

UPDATE: GFI Labs, the maker of VIPRE, has issued an explanation and apology for generating the false positives that led to these articles: “We apologize to the author Mohamed Hassan, to Samsung, as well as any users who may have been affected by this false positive.”

UPDATE: A Samsung executive is said to have personally flown from Newark, N.J., to Burlington, Vt., carrying two unopened boxes containing new R540 laptop computers. These units were immediately put under seal and details recorded for chain-of-custody records. At 17:40, Dr Peter Stephenson, Director of the Norwich University Center for Advanced Computing and Digital Forensics, began the detailed forensic analysis of the disks. The results are expected by Monday.

Original post:
There seems to be a claim (false, as it turns out) that Samsung installs a commercial keylogger called StarLogger on its laptops before shipping them out, apparently to “monitor the performance of the machine and to find out how it is being used.”

This was reported by Mohamed Hassan, MSIA, CISSP, CISA who bought two different models of Samsung’s laptop – the R525 and R540 models. If the report is true, it will be like a rehash of the Sony Rootkit snafu a couple of years back.

Online Tracking & Spying is No Joke!

August 28, 2010 by Daniel Ihonvbere

You’ve heard about it and read tons of articles about it, but until you actually experience it, you do not realize how unnerving online spying can be. As a Computer Security Consultant, I spend a lot of time on the internet reading, researching and writing. Naturally, I subscribe to a lot of content providers for white-papers, research reports etc.

Recently, I started noticing a trend that did not initially ring an alarm bell.

Disney Sued For Spying With Flash Cookies

August 18, 2010 by Daniel Ihonvbere

We all love our web browsing and the internet has become a part of our daily existence. Unfortunately, the internet has also become a great tool for the invasion of our privacy by “marketing” companies who are doing everything they can to “stand out” and be “ahead of the curve”.

Astaro Releases Free Edition for Small Businesses

January 28, 2010 by Daniel Ihonvbere

Astaro Corporation, a leading network security vendor, recently announced the launch of the Essential Firewall edition of its flagship security solution Astaro Security Gateway (ASG), available for free to all organizations worldwide. The Essential Firewall edition is claimed to include all the necessary functionality that all organizations need to secure their networks and operate a successful business, but we found some limitations.