Spamzy

Ferrychi is a downloader trojan. It is very dangerous because its purpose is downloading and running additional computer parasites. The malware brought by Ferrychi may vary from adware toolbars to rogue security tools. Ferrychi is not able to steal information or corrupt system files on its own. However, it may install parasites that are able to spy on computer owner and steal money or data this way.

Ferrychi infects computers using vulnerability in MS Word 97. Keep your software updated in order to avoid Ferrychi trojan. It infect every MS Word file, so when file is opened on another computer, the trojan spreads further.

Ferrychi hides from user and it is hard to delete. It changes registry entries in order to run automatically on boot. Ferrychi connects to on1000000.cn in order to download malwares. Block this website in advance to avoid problems.

See original here:
Ferrychi

The Consumerist recently posted a story about a Filipino call center that was inundated from a would-be ID Thief, and whose security center was not equipped to properly investigate and nab the guy.

Fortunately, the call center was small, and the ID Thief was obvious, so workers got to know his voice and mannerisms, and were able to forward him to security with every call. Unfortunately, it turned out the Filipino security staff was unprepared to properly handle the scam, because they didn’t know some of the cultural nuances (like the name “Angela” is female) and they had no access to LexisNexis, the U.S. security database of personal information.

Once the ID Thief caught on to the right answers to the security questions, the security staff refused to deal with him –and told the call center staff to deal with him as a verified account holder and give him account access. Eventually the guy was caught–in the U.S. by someone else — for successfully committing fraud.

Such a shame when this could be easily prevented. Companies want to cut costs, but they’re cutting security also.

Read the full article here.

Go here to read the rest:
The Security Problem in International Call Centers

Real Antivirus is ironic name of new malware. RealAntivirus (also known as Real AV) doesn

New research in the Netherlands uses cameraphone images to generate biometric data, in order to authenticate users on ad-hoc mobile networks. If you want to use a PDA or other device, just take a couple pictures, the system scans your face and you’re set to go.

Biometric data is generally regarded as being ill-suited for cryptography: each measurement, even when taken by the same device, of the same feature on the same person will differ slightly. This noise in the data makes it difficult to extract a cryptographic key in the traditional sense. Other recent work has shown that it’s possible to use just the noise in a biometric measurement to generate a cryptographic key—the new method relies on this principle.

Researchers put together a system that can be implemented on any device equipped with a camera. Facial recognition software is then used to produce biometric measurements of a person’s face, which should stay constant through changes in hairstyle, makeup, etc. Users take a picture of themselves, then uses a random string that, combined with the biometric information, forms the equivalent of a public key.

When two people need to establish a connection between their devices, they exchange these public keys, and each then takes a picture of the other device’s owner. The biometric data from this new picture is used to try to extract the random string from the public key.

It sounds a little like social networking in the cryptography world — and a bit hairier than just using a password. Do you think it’s a good idea?

Read the full article here.

Read the original here:

Malware creators Innovagest 2000 have just presented new scam named Antivirus Sentry. It

Antispy Knight is rogue security tool distributed by trojans. The main goal of this program is milking money from people that care about computer security. Antispy Knight is advertised as anti-spyware. Some people might fall for misleading advertising because AntispyKnight is promoted very aggressively and in very annoying ways.

AntispyKnight is usually installed by trojans. It slows down the infected computer and makes it impossible to browse the web. Antispyknight.info becomes the only website that can be accessed. This malware loads tons of pop-ups as well. Both the website and the pop-ups urge people to buy a full version of Antispy Knight. Do not trust messages loaded by Antispy Knight! This application is pure malware and it is a part of scam. Don

Active-scanner.com is pesky browser hijacker. It keeps redirecting web browser to the same fraudulent website. The website is the same as hijacker

The new RSA wireless security survey was released today. It reveals that while New York has a very dense concentration of hot spots, Paris is growing dramatically, with its hot spots up 300% from last year. But what does the report say about security of those spots?

Adrian at Securosis has this comment:

If your [sic] an IT manager, you have very little way to assess risk from this report, so just assume wireless hotspots are compromised and that you need to deploy a system to thwart these attacks on externally accessible corporate WiFi. And as an end users, if you think you are safe just because you have established an encrypted connection at Starbucks, think again. The guy in the tiny corner apartment overlooking the store makes his living by sniffing personal information and passwords.

Good advice, I’ll be checking my bank accounts from home and not Starbucks.

Thought it might be interesting to find a report about ID Theft — what percentage is caused by data breaches, versus internal data theft, versus wifi hot spot sniffers, versus other methods, I wonder?

See original here:
That Guy Above Starbucks, Stealing Your Passwords

Antivirus VIP is promoted as a security program, but it only brings troubles. It is installed via trojans that come through spam emails or illegitimate downloads. Antivirus VIP is promoted on several websites, but antivirusvip.com in the main source of this fraud. Websites that distribute AntivirusVIP are malicious; they are able to automatically install Antivirus V.I.P. once user visits one of them. Avoid websites that advertise Antivirus VIP and better yet block antivirusvip.com and others using HOSTS file.

Antivirus VIP may present itself as AntivirusVIP or Antivirus V.I.P.; all these names hide the same software and none of them should be trusted. The main goal of this fraud is making people purchase full version of AntivirusV.I.P.; unfortunately the âfull versionâ is just a mirage. This malware works really hard to convince people that they need a new anti-virus. Antivirus VIP imitates system scan and reports various infections that supposedly can be removed with Antivirus VIP and Antivirus VIP only. It loads the fake scanner all the time and it makes using a computer impossible. It also limits internet speed and computer performance.

View original post here:
Antivirus VIP

Antivirus Plus is new and dangerous malware. It uses fraudulent tactics to push users into buying useless program. AntivirusPlus is promoted as it was great security tool, but anyone could recognize the scam if they took a closer look to this application and its advertising techniques.

Antivirus Plus infects computers with help of trojans. The trojans are usually downloaded accidentally together with video codecs or software installs from malicious websites or downloads from p2p networks. AntivirusPlus is also advertised on fraudulent websites and people may download it voluntarily. The means of Antivirus Plus distribution reveals dubious nature of the software; however, it uses other misleading tactics to convince people that it is a reputable tool.

Antivirus Plus is able to modify user