Mar 312012
 

“We face threats posed by nuclear weapons. Tens of thousands remain in global arsenals, many on high alert…”  – UN SecGen Ban Ki-Moon, Jakarta, 21 March 2012

MANILA, ,Philippines — The threat of weapons of mass destruction – which has really never disappeared – has intensified with the flip-flopping of young North Korean dictator Kim Jong-Un. According to experts, these are still thousands of nuclear weapons, some under the control of mavericks or neophytes like the rulers of Iran and North Korea, respectively.

This means there exists the ever-present danger of “mutually assured destruction,” or mass suicide on the global scale. After all, it really takes the explosion of just one nuclear warhead by a high-strung or desperate Commander-in-Chief to trigger an unceasing series of devastating counter-fires across borders, and thus set the world aflame.

As Reuters reported (25 March), the US is poised to cancel planned aid to North Korea over the latter’s announcement that it will soon launch a long-range missile, thereby “overshadowing” the summit of world leaders committed to nuclear security which President Obama attended in Seoul this week.

Earlier, the US President had bluntly urged China to use its influence to persuade North Korea to refrain from further provocations and for the hermetic state to show its sincerity – if the stalled “Six Party” aid-for-disarmament talks are to re-start.

Nuclear tensions

In North Asia, tensions have escalated in recent weeks after NoKor announced it would launch a long-range rocket in April, which the US believes is intended to test a missile capable of delivering a nuclear warhead.

Obama also warned North Korea directly from the DMZ on the 38th parallel to abandon its nuclear ambitions, declaring that its erratic behavior and war-mongering would not be rewarded with goodwill or material aid.

In Jakarta last 21 March, UN Secretary General Ban Ki-moon expressed his disappointment with current efforts for nuclear disarmament. He stated: “Billions of dollars are being squandered in modernizing arsends, despite pressing social needs.

“Nuclear weapons do nothing to protect humankind from 21st century threats. Their very existence itself is destabilizing. We must do more to control nuclear materials and crack down on proliferation financing.”

SecGen Ban complained: “There is a growing impatience with the slow pace of nuclear disarmament. I urge the members of the UN Conference on Disarmament to redouble their efforts. It’s unacceptable that during the last 12 years, they have not been able to agree even on a work programme…”

Protecting against further global recession

At the 2012 Jakarta Defense Dialogue last week, FVR discussed the non-military threats to human, national, regional and global security due to economic recession.

He urged Asia-Pacific nations “to protect our still-fragile economies from contagion by future global financial crises. Our region should now actualize preliminary efforts to set up an “Asian Monetary Fund.”

The Japanese proposed such a step during the 1997 Asian financial crisis. Tokyo offered US$100 billion as “seed money” for such a regional reserve system to backstop the IMF (whose policy prescriptions all too often reflect Western bias).

Because of intense Western resistance, the East Asian governments eventually shelved the “Asian Monetary Fund” idea. But, three years later, ASEAN-10 and three powers – China, Japan, and South Korea-signed the “Chiang Mai Initiative” in their meeting in Thailand.

In effect, they agreed to hold each other’s national financial assets in reserve – as the beginning of a cooperative arrangement to strengthen their collective ability to withstand future economic crises.

Our countries also need to work together to shore up the authority of the G-20 economic grouping, which reflects the rise of the “emerging countries” in the global economy.

It is in Asia’s collective interest that the G-20 – of which China, India, South Korea, and Indonesia, are now major players – should become the premier institution for global economic governance – superseding the Western-oriented IMF and World Bank.

In fact, we must do no less than construct a new global balance of economic power, in response to the way the center of global gravity is shifting, away from the Atlantic Ocean toward the Pacific.

Implications of cyber warfare

Very little is still publicly known about “cyber warfare” which can target military organizations, financial institutions, and even private banking accounts and copyright holdings.

In the eyes of experts like William Lynn, US Deputy Defense Secretary, “cyber warfare is the new domain in national security which is just as critical to military operations as land, sea, air, and space.” CW is a form of information warfare through which sabotage, espionage and disruption are conducted against the assets of a country, institution, or individual. Already, according to 2010 US Congressional reports, “key sectors of the US along with other nations are currently at risk, among them public/private facilities, banking/finance, transportation/communications, manufacturing/logistics, and individual assets – all of which are dependent on computers for daily operations.

The theft of intellectual property by hackers, the leaking out of fiction disguised as fact, and the uploading of propaganda and other libelous “blind shots” are now common occurrences. In fact, of boring frequency are reports of losses of bank deposits because of one’s carelessness in the use of ATMs, credit cards, and other documents constaining biometric information.

In May, 2010, the Pentagon set up its new US Cyber Command under the National Security Agency to defend American military networks. The EU has set up the European Network and Information Security Agency, while the UK has organized a cyber-security centre based in its Government Communications Headquarters (equivalent of the NSA). The US Cyber Command, however, is designed only to protect the military, whereas government and corporate infrastructures are primarily the responsibility of the Department of Homeland Security and private companies, respectively.

“The Economist reports that “China has plans of winning informationised wars by the mid-21st century, and notes that Russia, Israel, Iran and North Korea likewise are organizing for cyberwar.”

Constructing a new balance of power

Since the end of WWII, the United States has been the fulcrum of the Asian power balance because of its military presence. Pax Americana (American Peace) has given East Asian states – principally China – the breathing spell to put their houses in order, considering that it is the American market that enabled them to grow their economies at the world’s fastest rate.

Now, our collective task in the Asia-Pacific is to replace the American Peace with a Pax Asia-Pacifica by building a new power structure that integrates emerging powers into the existing regional system. We must construct an Asia-Pacific power balance that acknowledges both America’s claim to being a Pacific power and gives rising China and other emerging powers a role in writing the rules of the new regional order.

Over the foreseeable future, the US will still wield the greatest influence on global affairs – whether militarily, economically, or culturally. But even America cannot act unilaterally any longer, because other poles of economic and military power are rising.

Washington has vowed to refocus American military power on threats rising in the Asia-Pacific. For the US, its military presence on the peripheries of the China Mainland may be a kind of “forward defense.”

But for the Chinese, this may represent a vestige of colonialism; and the humiliation they endured under the great powers for 150 years.

We must expect this state of affairs to generate greater tensions in East Asia. So, too, will China’s extravagant claims to the totality of the South China Sea.

As a framework for dealing legally with these competing claims, we of the Philippines look to the United Nations Convention on the Law of the Sea for the peaceful resolution of such disputes. Basically, UNCLOS declares the high seas as open to all innocent passage, and not subject to the monopolistic claims of any single state.

Our region has many other sources of future tensions. A resurgence of Japan-China historical wounds – the absence of North-South Korea rapport – China-Tibet problems – border disputes – intrusion by resource-hungry neighbors, etc. – any of these could generate dangerous shooting conflicts.

Maintaining The Strategic Balance

For second-tier states like our ASEAN-10, the essential and urgent need is to help maintain the strategic balance, and not to fall under any one great power’s sphere of influence. To his credit, our AFP Chief of Staff Jessie Dellosa did a masterful presentation of Philippine Civil-Military operations at 2012 JIDD.

ASEAN’s basic task must be to organize a concert of powers to regulate and manage military rivalries or arms build-ups through deepened bonds of “caring, sharing and daring” for each other in order to attain enduring peace and sustainable development for all.

Such a concert of powers must take the lead in establishing the institutions, binding commitments and multilateral agreements that are our best hope of channeling the growing influence of emerging countries towards peaceful and humanitarian purposes.

Please send any comments to fvr@rpdev.org. Copies of articles are available at www.rpdev.org.

Article source: http://www.mb.com.ph/articles/355942/global-threats-last-two-parts

 Posted by at 7:52 pm
Mar 312012
 

Card Terminal photo courtesy of Shutterstock

Card Terminal photo courtesy of ShutterstockBrian Krebs is reporting that MasterCard and Visa are warning member-banks of a payment processor breach that may impact more than 10,000,000 credit cards.

It is important to note that MasterCard and Visa’s own networks were not involved in the attack, it appears to be related to payment processor Global Payments.

Reuters is reporting that Global Payments stock was suspended for trading after falling more than 9% on the Nasdaq stock exchange.

Krebs reported that one of the financial institutions he spoke with had to cancel 56,455 credit cards, of which fraud was detected on 876, or 1.5%.

There is much speculation about the source of the breach as many are reporting that the majority of the fraud is occurring in the greater New York City area, yet cards are being cancelled around the country.

What is a payment processor? Payment processors provide merchants (stores) with access to payment brokering networks like MasterCard, Visa, American Express and Discover. The terminal that processes your card sends the details of the transaction to the payment processor to facilitate the purchase.

It is being reported that the attackers got “full Track 1 and Track 2 data”. This is very bad as it would allow for the attackers to fully produce cards including the CVV/CCV code you often need to enter for online transactions.

Strangely, law enforcement contacts told Krebs they believe the breach is related to a Dominican gang in New York and primary targeted corporate credit and debit cards.

Card statement image courtesy of Shutterstock

Card statement image courtesy of ShutterstockFortunately consumers don’t need to worry too much. Card issuing banks (Bank of America, Chase, etc.) are cancelling cards that are involved in the theft and card holders will not be held responsible for any fraudulent activity.

I wouldn’t cancel my card or ask for a new one, but it would certainly be prudent to keep a close eye on your statements to be sure nothing suspicious shows up.

As we find out more details on how this heist came about, we will post information here. From the sound of it the card information sounds like it may not have been encrypted or they wouldn’t need to cancel so many cards.

Credit card processing terminal image and card statement image courtesy of Shutterstock.

Article source: http://feedproxy.google.com/~r/nakedsecurity/~3/DYYKftyP6Dc/

Mar 302012
 

A call to action on cybercrime

<!– Share/Save/Bookmarka2a_linkname=document.title;a2a_linkurl=”http://www.securitypark.co.uk/security_article267430.html”;a2a_num_services=16;

–>

With two reports this week having shown the effects of fraud and cybercrime on both the FS industry and the UK economy as a whole, Pat Carroll, ValidSoft CEO, calls for commerce and financial services to ensure that fraud strategy is robust enough to deal will changing criminal methodologies.

“Two interesting stats have caught my eye this week:

- Fraudsters are costing the UK an estimated £73billion a year (National Fraud Authority, NFA)
- Cybercrime has now become the second most commonly reported economic crime affecting companies in the financial services sector (PWC)

While counter-fraud groups such as the NFA’s ‘Fighting Fraud Together’ and Get Safe Online are a positive step, and while it’s good to hear that the European Commission is going ahead with plans for a Cyber Crime Centre, what’s striking to me is the sense of “c’est la vie” that was picked up by PWC when it conducted the research.

There still seems to be a certain acceptance amongst commerce and financial services in particular concerning fraud and cybercrime – a cost of doing business, so to speak. What the figures from PWC show is that criminal methodologies around fraud are changing and that cyber attack is now the modus operandi, and that the criminals are successful on a massive scale. This NFA report is clearly a call to action.

Financial services firms’ fraud strategies need to take into account a “zero tolerance” approach to fraud. The amount of data attractive to cyber criminals is only going to increase as the use of apps, mobile wallets and online and mobile banking channels are used more and more by both consumers and businesses.

Security mechanisms must be robust enough to deal with the latest techniques and the only means of securing against cyber-based attacks is to take a multi-factor, multi-layer, out of band (OOB) approach, and, to my mind, one of these factors should be voice biometrics. This is something that we’re beginning to see happen, but as both of these stats show, there is still some way to go and time is not on our side.”

<!–

[View all articles about ValidSoft]

–>

Related topics:

 Application and software security 

 Authentication and identity management 

 Computer and PC Security 

 Crime and Fraud Prevention 

 Data management and data security 

 Hacking and intrusion prevention 

 Internet and Web security 

Print version | Email to a friend | Related articles

Data breaches: Trends, costs and best practices gives you all the latest information on securing personal and corporate data, key recommendations for immediate action to improve data security, and how to respond to data breaches.

Other Security news and resources

IT Security white papers and research library

Access Control 
Authentication 
Data Management 
Data Security 
Digital Signatures 
Email Security 
Identity Management 
Internet Security 
Intrusion Prevention 
Network Security 
Remote access security 
Security Management 
Security Policies 
Security Software 
Security Threats 
Virus Detection Software 
Virus Protection 
VPN 
Vulnerability Assessment 
Wireless Security 

Security books, guides, standards and toolkits

RFID and Smart Cards books, guides and reference documents 
Biometric books, guides and reference documents 
CCTV books, guides and reference documents 
Intruder alarms and intrusion detection systems books, guides and reference documents 
Monitoring and surveillance books, guides and reference documents 
IT Governance, ISO 27001 ISO 17799 and BS 7799 toolkits 
Fire, Health Safety books, guides and reference documents

Article source: http://www.securitypark.co.uk/security_article267430.html

 Posted by at 7:50 pm
Mar 302012
 

Amazon’s Kindle Touch 3G e-reader will start shipping with free internet access on April 27. Users in 127 countries can preorder the device for around 250 dollars. It has  6-inch screen, can hold up to 3,000 books and has a battery life of 2 months.

The European Commission will get tough on cybercrime, but won’t target illegal file-sharing. It will set up a European Cybercrime Centre in the Netherlands. Research found that cyber attacks accounted for almost 40 percent of all economic crimes that finance companies experienced in 2011.

Flat panel TV shipments are projected to drop for the first time on an annual basis this year. It would end unbroken growth since the market formed. iSuppli predicts that the market will slip 5 percent to about 37 million units.Shipments are expected to weaken until at least 2015.

It’s like OpenTable for babysitters. UrbanSitters.com connects parents looking for caretakers in a number of cities across the US. Babysitters are introduced to prospective clients in in-person meetings and a Facebook Connect feature lets you see who they’ve worked for before.

Article source: http://www.pcadvisor.co.uk/videos/3348201/video-the-byte--kindle-touch-3g-european-commission-targets-cybercrime-flat-tv-shipments-urbansitterscom/

 Posted by at 7:50 pm
Mar 302012
 

Bird silhouette. Credit: Shutterstock

Bird silhouette. Credit: ShutterstockIf you’re careless about what applications you allow to access your Twitter account, don’t be surprised if you find the bad guys are spamming tweets out in your name without your permission.

Here’s just a small sample of the messages we saw earlier today, claiming to link to free iPhone 4 offers or tools to help you find out who had unfollowed your Twitter account.

Some of the messages posted from innocent users’ Twitter accounts have claimed that it’s easy to get your hands on a free iPhone 4:

Tweets made by rogue application

Tweets made by rogue application

Whereas others seem to suggest that they offer a way to easily monitor who has unfollowed you on Twitter. (Which is perhaps an attractive tool after Twitter acknowledge earlier this week that the service was suffering from an “unfollowing bug”).

Tweets made by rogue applications

Tweets made by rogue applications

Rogue applications we have seen sending these messages include:

Unfollow Monitor App v1.0
Who Unfollowed You v2.9
Tweet Statistics App v1.0
Unfollow Stats App v1.3
Tweet Info App 1.3
Twit Stats App v1.2
Unfollow Details App v1.1

If you were unfortunate enough to grant one of these rogue applications access to your Twitter account, revoke its rights immediately by going to the Twitter website, visiting the Settings/Apps option and revoking the offending application’s rights.

Revoke an application's access to your Twitter account

Revoke an application's access to your Twitter account

If you’re on Twitter and want to learn more about threats, be sure to follow me at @gcluley and the rest of the @NakedSecurity team.

Bird silhouette image, from ShutterStock

Article source: http://feedproxy.google.com/~r/nakedsecurity/~3/8-VT7wVI2mQ/

Mar 302012
 

Cecilia malmstrom 2012 03 28

LONDON, UK – The European Union has announced plans to set up a special, dedicated center to fight illegal online activity and protect its citizens from cybercrime.

Celia Malmstrom, the European Commissioner for Home Affairs, told a press conference in Brussels on Wednesday that the center should be up and running by January 2013, and “will bring together some of Europe’s best brains in the field of cybercrime.”

The EU’s executive arm, the European Commission, wants the center to be based in The Hague in the Netherlands, alongside Europol, the pan-European police force, according to the Associated Press. It will mainly focus on credit card and bank fraud.

More from GlobalPost: Anonymous, joining Wikileaks, hacks into the big time

“As the online part of our everyday lives grows, organized crime is following suit,” Malstrom said, according to Reuters.

The Commission says over a third of the EU’s 500 million citizens use online banking, with an estimated $8 trillion changing hands globally in e-commerce each year.

“Up to 600,000 Facebook accounts are blocked very day, after various types of hacking attempts,” Malstrom said, citing a study that puts the total annual cost of cybercrime worldwide at $388 billion, according to the BBC.

“In 2009, over 6.7 million distinct bot infected computers were detected,” she observed.

The Commissioner said the center will become a focal point for European-wide initiatives, adding that besides providing logistical support for investigations into fraud, it will also pay attention to social networks, the sexual exploitation of children on the Internet, and cyber-attacks targeting “critical infrastructures.” 

More from GlobalPost: Your body parts, made to order 

http://www.globalpost.com/dispatch/news/business-tech/120328/eu-set-center-fight-cybercrime

Article source: http://www.globalpost.com/dispatch/news/business-tech/120328/eu-set-center-fight-cybercrime

 Posted by at 1:50 pm
Mar 302012
 

The European Commission has proposed establishing a dedicated Cybercrime Centre as part of Europol, the European Police Office, based in The Hague.

Europe’s cyber crime fighters should be ready for action by January 2013.

Further reading

The proposal delivers on the promise to establish a co-ordinated cyber force that was made by the Commission back on 22 November 2010.

The centre will focus on illegal online activities carried out by organised crime groups, particularly those generating large criminal profits, such as online fraud involving credit cards and bank credentials.

“We can’t let cyber criminals disrupt our digital lives,” said Cecilia Malmström, European commissioner for home affairs.

“A European Cybercrime Centre within Europol will become a hub for co-operation in defending an internet that is free, open and safe.”

The announcement coincides with the release of a report from the UK’s John Grieve Centre for Policing and Community Safety revealing that at least 80 per cent of all digital crime committed now originates from organised gangs.

The centre is part of the EC’s ambition to build trust in a single pan-European digital market by cracking down on cyber crime.

Earlier this week, the European Parliament proposed a minimum two-year sentence for those found guilty of hacking crimes.

A focus of the new centre will be to protect social network profiles from e-crime infiltration and will help the fight against online identity theft.

It will also focus on cyber crimes that cause serious harm to their victims, such as online child sexual exploitation and cyber-attacks affecting critical infrastructure and information systems in the EU.

The centre will gather information to support investigations conducted by member states’ law enforcement agencies. This will allow the centre to identify the most dangerous, pressing cyber crime threats and networks in the EU.

Cyber crime crosses state borders. A breach of security at a bank in one country could be linked to similar incidents affecting the same bank in other countries. So the centre will develop a common standard for cyber crime reporting and will be able to alert individual police authorities.

The centre will also provide an early warning system for national law enforcement on new vulnerabilities or on how to handle technically challenging cases and provide specialist advice to investigators, prosecutors and judges.

Europol already deals with computer crime. However, it has limited resources, so cannot, for example, efficiently gather information from various sources as the new centre will.

Nor does Europol have the capacity to respond to queries from law enforcement authorities, the judiciary and the private sector.

Article source: http://www.computing.co.uk/ctg/news/2164604/european-cybercrime-centre-aims-january-2013-launch

 Posted by at 1:50 pm
Mar 302012
 

House of Represenatives logo

House of Represenatives logoThe US House of Representatives on Wednesday voted down a bid to stop telecommunications companies from demanding Facebook logins from prospective job applicants.

The proposal [PDF], titled “Mind Your Own Business on Passwords,” came from Rep. Ed Perlmutter, a Colorado Democrat, as the House debated over an act that aims to reform the Federal Communications Commission (FCC).

Perlmutter proposed that the bill be sent back to committee amended with a paragraph allowing the FCC to bar telecoms from requiring the logins.

V3 quoted Perlmutter as saying:

“No American should have to provide their confidential personal passwords as a condition of employment. Both users of social media and those who correspond share the expectation of privacy in their personal communications.”

Many have shared his sentiment, particularly during the week following several reports of companies and government agencies who request Facebook login so that interviewers can have a look-see at anything a job applicant has marked private.

In fact, 91% of polled Naked Security readers agree that it should be illegal.

As the Associated Press noted, the legality of the practice is dubious indeed. Proposed legislation in Illinois and Maryland would forbid public agencies from asking for social network access.

Private property sign

Private property sign

Given that requiring Facebook logins of job applicants had nothing to do with the issue at hand, the House’s refusal to amend the FCC reform bill this week does nothing to clear up the question of legality.

In fact, as CBS News’s Declan McCullagh pointed out, Perlmutter’s was little more than “a transparent, if clever, delaying tactic.”

As McCullagh wrote, all Perlmutter had to do was suggest an amendment, not send the whole thing back to committee.

At any rate, McCullagh notes, it’s not companies regulated by the FCC that are being profiled as Facebook login requesters. Rather, the anecdotes regarding login demanders have mostly sprung from the actions of law enforcement agencies, which aren’t regulated by the FCC and wouldn’t be affected by the bill.

CBS News quoted Rep. Greg Walden, the Oregon Republican who chairs a communications and technology subcommittee, agreed with Perlmutter that “it’s awful” for employers to feel free to demand passwords and then “go snooping around.”

The problem is, Perlmutter’s amendment wouldn’t have protected anybody, Walden said during the floor debate:

“Your amendment doesn’t protect them. It doesn’t do that. Actually, what this amendment does is say that all of the reforms that we are trying to put in place at the Federal Communications Commission, in order to have them have an open and transparent process where they are required to publish their rules in advance so that you can see what they’re proposing, would basically be shoved aside. They could do whatever they wanted on privacy if they wanted to, and you wouldn’t know it until they published their text afterward. There is no protection here.”

Perlmutter’s delaying tactic says more about Democrats’ opposition to the Republican-backed bill to reform the FCC than it does about a sincere desire to protect Facebook users’ privacy.

The bill, titled the Federal Communications Commission Process Reform Act of 2012, would require the currently Democratic-controlled agency to be more transparent and to prepare economic impact analyses.

The House rejected Perlmutter’s amendment by a vote of 184 to 236. The FCC reform measure itself was approved by a vote of 247 to 174. It has not yet been approved by the Senate.

screenshot of White House statementscreenshot of White House statementThe White House released a statement [PDF] on Monday claiming that the GOP bill would prevent the FCC from exercising “its statutory duty to protect the public interest.”

This is not about privacy. This is a sideshow, a scuffle between the parties.

The question of privacy deserves to be more than a spurious footnote used to jam the gears of an unrelated bill. Let’s hope that the proposed legislation in Illinois and Maryland does the job by actually focusing on the issue at hand.

Private property image courtesy of shuttershock

Article source: http://feedproxy.google.com/~r/nakedsecurity/~3/0zluqLbMD8c/

Mar 302012
 

Apple store. Image credit: pcruciatti / Shutterstock.com

Apple store. Image credit: pcruciatti / Shutterstock.comThe folks at AlienVault discovered an interesting new Mac malware attack this week.

A backdoor Trojan horse, which would allow a remote hacker to access your Mac computer without your knowledge and potentially snoop on your files and activity, has been discovered hidden inside a boobytrapped Word document.

The targeted attack relies upon a critical security vulnerability discovered in Microsoft Word back in 2009, which allowed remote code execution (MS09-027).

In a nutshell, if you open the boobytrapped Word document, a Trojan horse gets dropped onto your Mac opening a backdoor for remote hackers. Furthermore, a decoy document called file.doc is also dumped onto your drive.

Dropped decoy Word document

Dropped decoy Word document

The nature of the decoy document, which claims to be about Human Rights abuses in Tibet by the Chinese, is sure to raise some eyebrows.

Inevitably there will be speculation that this attack is related to ‘Ghostnet’, the alleged campaign by China to spy via the internet on pro-Tibet organisations, including the Tibetan government-in-exile and the private office of the Dalai Lama.

If that’s the case, then it would seem that ‘Ghostnet’ is now targeting Mac users inside organisations sympathetic to Tibet and banned Chinese groups.

And don’t be fooled into thinking that you are protected by Mac OS X itself, which will ask for an administrator’s username and password to install software. You won’t see any prompt for credentials when this malware installs, as it is a userland Trojan.

Neither the /tmp/ nor /$HOME/Library/LaunchAgents folders on Mac OS X require root privileges – meaning that software applications can run in userland with no difficulties, and even open up network sockets to transfer data.

Mac malware hex dump

Mac malware hex dump

Sophos anti-virus products detect the malformed Word documents as Troj/DocOSXDr-A and the Mac backdoor Trojan horse as OSX/Bckdr-RLG. The servers that the malware attempts to communicate with have been categorised by Sophos as malware repositories since at least 2009.

Once again, Mac users need to remember to not be complacent about the security of their computers. Although there is much less malware for Mac than there is for Windows, that is going to be no compensation if you happen to be targeted by an attack like this.

If you’re not already doing so, run anti-virus software on your Macs. If you’re a home user, there really is no excuse at all as we offer a free anti-virus for Mac consumers.

Image credit: pcruciatti / Shutterstock.com

Article source: http://feedproxy.google.com/~r/nakedsecurity/~3/hcv2DVzLuMw/

Mar 302012
 

Will you be in Brisbane, Queensland, on the evening of Tuesday 03 April 2012?

Are you interested in learning about security and meeting a bunch of like-minded people?

If so, you might like to sign up for a presentation I’ll be giving at the Brisbane chapter of OWASP entitled Search Engine Poisoning.

Find out how search engine poisoning works, and why it’s not just lazy or gullible users who fall for online scams such as fake anti-virus software.

This live demo will give you a quick look behind the scenes at how cybercrooks use legitimate websites to help them trick the major search engines and peddle their scareware.

(We’ll also see some Mac scareware in action, delivered by a poisoned search, just to act as an “existence proof” for those who still doggedly stick to the theory that malicious software is impossible on the OS X platform.)

If you’ve not heard of OWASP, it’s the Open Web Application Security Project, an open-source application security project. OWASP is technology-neutral, vendor-independent, not-for-profit, unaffiliated, and all those good things.

The event starts officially at 18:00, but there will be pizza available from 17:30. The session will end by 19:30.

The location is: RedHat Office, Level 1, 193 North Quay, Brisbane.

Attendance is free, but you must register in order to book a place.

By the way, the venue is not infinite in size (nor is there a limitless stash of pizza). So please don’t book a seat unless you genuinely intend to turn up.

As the official blurb points out, “there will be a social gathering at the local watering hole afterwards. Everyone is welcome to attend!”

Article source: http://feedproxy.google.com/~r/nakedsecurity/~3/Jay17PDyWJI/