Computer Security Articles – Page 2425 – RSS Reader for Computer Security Articles

Credit to Author: Darlene Storm| Date: Wed, 01 Mar 2017 07:38:00 -0800

The Dridex Trojan, one of the most destructive banking Trojans, has been upgraded with a new injection method so the malware is even better at evading detection.

The newest version of Dridex, v4, is now the first banking Trojan to take advantage of AtomBombing, according to report by IBM X-Force. Unlike some of the more common code injection techniques, AtomBombing is meant to evade security solutions. Once one organized cybercrime gang successfully pulls off a slick trick, other cyber thugs are expected to adopt the method.

“In this release,” the researchers wrote, “we noted that special attention was given to dodging antivirus (AV) products and hindering research by adopting a series of enhanced anti-research and anti-AV capabilities.”

To read this article in full or to leave a comment, please click here

Fortinet Security

March 1, 2017 admin

Managed Security Service Providers, Choosing the Right Security Vendor

Credit to Author: Stephan Tallent| Date: Wed, 01 Mar 2017 08:38:41 -0800

Fortinet covers critical aspects of an MSSP’s business model like no other security manufacturer—offering the best in multi- tenancy, the most hardware flexibility, the highest performance through hardware acceleration, and the lowest total cost of ownership of any security vendor.

MalwareBytes Security

March 1, 2017 admin

Two new Mac backdoors discovered

Credit to Author: Thomas Reed| Date: Wed, 01 Mar 2017 15:00:33 +0000

On Valentine’s Day, Mac users got a special “treat” in the form of new malware. Now, just a week later, there are signs of yet another piece of malware looming. This brings the count of malware (as opposed to adware or other threats) discovered for macOS this year up to 4, in only two short months.

Categories:

Tags: Anti-Malware Apple iOS iPhone mac macOS malware XAgent XProtect

(Read more…)

The post Two new Mac backdoors discovered appeared first on Malwarebytes Labs.

Kaspersky Security

March 1, 2017 admin

Earth-2050: A glimpse into the future

Credit to Author: John Snow| Date: Wed, 01 Mar 2017 14:00:23 +0000

What will life look like in 20 years? In 30? In the Earth-2050 project, we make some predictions, and you can too!

Security Wired

March 1, 2017 admin

The Army Gets Back in the Ship-Killing Business

Credit to Author: Jeremy Hsu| Date: Wed, 01 Mar 2017 12:00:01 +0000

An Army missile converted into an anti-ship weapon could prove a powerful deterrent against China’s naval power. The post The Army Gets Back in the Ship-Killing Business appeared first on WIRED.

Security Wired

March 1, 2017 admin

The Army Is Converting Missiles Into Ship-Killers. Why? China

Credit to Author: Jeremy Hsu| Date: Wed, 01 Mar 2017 12:00:01 +0000

An Army missile converted into an anti-ship weapon could prove a powerful deterrent against China’s naval power. The post The Army Is Converting Missiles Into Ship-Killers. Why? China appeared first on WIRED.

ComputerWorld Independent

February 28, 2017 admin

This tool can help you discover Cisco Smart Install protocol abuse

Credit to Author: Lucian Constantin| Date: Tue, 28 Feb 2017 09:01:00 -0800

For the past few weeks attackers have been probing networks for switches that can potentially be hijacked using the Cisco Smart Install (SMI) protocol. Researchers from Cisco’s Talos team have now released a tool that allows network owners to discover devices that might be vulnerable to such attacks.

The Cisco SMI protocol is used for so-called zero-touch deployment of new devices, primarily access layer switches running Cisco IOS or IOS XE software. The protocol allows newly installed switches to automatically download their configuration via SMI from an existing switch or router configured as an integrated branch director (IBD).

The director can copy the client’s startup-config file or replace it with a custom one, can load a particular IOS image on the client and can execute high-privilege configuration mode commands on it. Because the SMI protocol does not support any authorization or authentication mechanism by default, attackers can potentially hijack SMI-enabled devices.

To read this article in full or to leave a comment, please click here

ComputerWorld Independent

February 28, 2017 admin

A better security strategy than ‘know your enemy’: Know your co-workers

Credit to Author: Evan Schuman| Date: Tue, 28 Feb 2017 08:51:00 -0800

Cyberthieves today know that it’s better to be sneaky and crafty than forceful. To be even more blunt, they know that it’s better to trick you into doing their work than to break in and do it themselves.

That trickery starts with ever-more-subtle ways to get you to click on an email attachment. A recent attack used an employee accomplice who was to flag any meetings with multiple people and note who was presenting. Within 30 minutes of one meeting’s end, the crooks sent an email attachment to everyone on the original email thread, with fake headers so that it appeared to be from the presenter. The email said, “Sorry, everyone. Here is the updated version of the slides from our 2 PM meeting.” Even an especially security-conscious person could get pulled into clicking on that one.

To read this article in full or to leave a comment, please click here