Various reports state that huge numbers of PCs throughout the world have been “zombified” during the last year. Still, the true number of hijacked computers is likely much higher than what's stated, making botnets a massive global security problem.
We've warned you before about websites that misrepresent themselves as Lavasoft affiliates and sell copies of our software that are not legitimate or supported by our company. It’s come to our attention that a site we issued a past word of warning on, oemlib.com, is operating under a number of other domains, all with a similar appearance, including:
Oemdatabase.net
Oemcheapsoftware.com
Fullversiondownloads.net
Oem-apps.com
Oem-x.com
While traveling in Asia, I recently experienced extremely low security levels at an Internet café. I went in to check my e-mail and made a security check on the Windows OS. I opened Windows Task Manager and looked for suspicious applications running, thinking that probably thousands of users must have used this machine.
The nature of malware infections has changed during the past years. A long time ago, malware and viruses were spread in much less sophisticated ways. (1) Times are not the same anymore because malware authors constantly invent new intellectual ways to compromise machines.
You may have seen the headlines last week about a series of worm attacks on Twitter. As we know that many of you use the site (and maybe even follow the team here at Lavasoft on it) we’d like to take a moment to clarify what it was and how you can stay safe.
While April 1 may have passed without the Conficker botnet activating an ‘armageddon-like’ payload, as some reports speculated, Conficker is still a threat that the world is watching.
Conficker is now not only making headlines for the malware’s latest actions and expectations, but it’s also making waves due to how computer users have responded to this threat and others like it.
It’s not the kind of record any of us working to help computer users’ combat security and privacy threats, like our team here at Lavasoft, hopes to see being set:
If you follow online security news, there’s little chance that you haven’t heard about Conficker – a new worm that has received extensive media coverage in the past weeks, due in part to Microsoft’s offer of a $250,000 bounty in return for information leading to the arrest of the malware’s perpetrators.
Be on the lookout: a new warning has been issued to consumers about economic stimulus scams via incoming e-mail and fraudulent websites.
Those located in the US will likely have tax preparation on their minds in the coming weeks…and, likewise, that topic will also be of major interest to spammers and scammers looking to exploit the upcoming April 15 filing deadline. Recent reports are already confirming a rise in phishing messages purporting to come from the U.S. Internal Revenue Service, aimed at tricking taxpayers into falling for a scam.
Waledac, a new threat currently being seen, is believed by many researchers to be the replacement for the notorious Storm Worm; similarities have been noted in both its technique and behavior. As Lavasoft researchers have reported, you may have seen Waledac's work first hand through an assortment of spammed messages (holiday greeting cards, messages exploiting the inauguration of U.S. President Barack Obama and, more recently, love-related notes taking advantage of Valentine's Day) - all of which bait the user into executing the malware.
[Visualization of Waledac courtesy of Sudosecure.net]
We took some commonly asked user questions about this threat to Jeremy Conway, an independent security researcher at Sudosecure.net who has been closely tracking Waledac. Read our Q & A below to learn more.
From what we now know, 2008 was a record year for data breaches. And, from what we've seen so far in 2009 - with news of the extensive Heartland breach and more compromised data on Monster.com - the outlook for this year does not look promising.