malware Archives

Home » malware » Page 9

Firefox disables out-of-date Java plugins

Dave Farquhar security April 4, 2012firefox, JRE, malware

Firefox is advising users to disable vulnerable Java versions on Windows. I actually saw this in action on a machine yesterday–a machine that has to run a slightly dated version of the JRE because a vendor hasn’t certified their product with the current version yet. Read more

Dave Farquhar

David Farquhar is a computer security professional, entrepreneur, and author. He started his career as a part-time computer technician in 1994, worked his way up to system administrator by 1997, and has specialized in vulnerability management since 2013. He invests in real estate on the side and his hobbies include O gauge trains, baseball cards, and retro computers and video games. A University of Missouri graduate, he holds CISSP and Security+ certifications. He lives in St. Louis with his family.

dfarq.homeip.net

Macintosh malware continues to evolve

Dave Farquhar Macintosh, security April 3, 2012April 15, 2017apple, mac os x, macintosh, malware, os x, pc world, STIG, vulnerability

Security experts have long warned that [Apple’s] delay in delivering Java patches on Mac OS could be used by malware writers to their advantage, and the new Flashback.K malware confirms that they were right. — PC World magazine

Last week I argued that a Macintosh-based botnet currently being distributed via Word document would likely change distribution methods, perhaps to a PDF document, in order to spread itself more effectively.

That, to my knowledge, hasn’t happened, but today I learned of the above example of Mac malware doing exactly that, jumping from Java vulnerability to Java vulnerability. Read more

Dave Farquhar

dfarq.homeip.net

End of the innocence for Mac security

Dave Farquhar Macintosh, security March 30, 2012Adobe Acrobat, Adobe Reader, antivirus, apple, firefox, mac os x, macintosh, malicious code, malware, Malware Domains, microsoft word, office 2007, os x, pdf files, spyware, trojan horse, vector, vulnerability, yahoo

Antivirus vendor Kapersky has identified a new trojan horse targetting Macintoshes. It spreads a botnet based somewhere in China via an infected Microsoft Word document, typically sent as an e-mail attachment.

The spin is that if you don’t use Word on your Mac, you’re safe. That’s true–this week. But going forward, it’s going to take more than that. Read more

Dave Farquhar

dfarq.homeip.net

Securing wi-fi isn’t about price gouging

Dave Farquhar security March 28, 2012October 11, 20191990s, firewall, john c dvorak, Love Letter, malware, Missouri, New Madrid Fault, spam, WEP, wi-fi

The so-called wi-fi golden era is over, and apparently being glad about it makes me an absolutist.

But John C. Dvorak is wrong. This isn’t about making people pay for Internet access. It’s pure security. Toilets and drinking fountains are free because the majority of people don’t abuse them. The Internet can’t be wide open and free like a public restroom because when it was totally wide open and free in the 1990s, too many people abused it. Read more

Dave Farquhar

dfarq.homeip.net

Apply your monthly patches just as soon as you can

Dave Farquhar security, Windows March 14, 2012excel, malware, net view, Patch Tuesday, SQL, terminal server, vulnerability

There are only six patches in this month’s edition of Patch Tuesday, and only one of them is critical, but it’s a big one.

The critical patch fixes a flaw in Remote Desktop Protocol, something typically only present in the business-oriented flavors of Windows. But if you don’t know whether you’re affected, it behooves you to let Windows update whatever it wants to update. Read more

Dave Farquhar

dfarq.homeip.net

The old days of viruses

Dave Farquhar security, Viruses March 8, 2012August 12, 2018antivirus, CIO, CISM, cissp, computer security, firewall, intel, John Dominik, journalism, Love Letter, malware, Missouri, public internet, spam, symantec, university of missouri, VBS

Blogging pioneer John Dominik, inspired by my Michelangelo memories, wrote about his memories of viruses later in the decade. So now I’ll take inspiration of him and share my memories of some of those viruses. I searched my archives, and at the time it was going on, I didn’t write a lot. I was tired and angry, as you can tell from the terse posts I did write.

Dave Farquhar

dfarq.homeip.net

Remembering Michelangelo

Dave Farquhar security March 7, 20121990s, amiga, boot floppies, certifications, IBM, macintosh, malware, MBR, McAfee

Yesterday was the 20th anniversary of the Michelangelo virus. If you don’t remember, on March 6, 1992, Michelangelo was programmed to overwrite the first 100 sectors of a hard drive–not quite as destructive as formatting a drive, but to the average user, the effect is the same. It was a huge scare–John McAfee predicted five million computers would be affected–but largely was a non-event.

Those of you studying for security certifications would do well to remember that Michelangelo is a prime example of a virus and a logic bomb. Viruses replicate; logic bombs do something when an event triggers. Malware doesn’t always fit neatly into specific categories–crossovers are common.
Read more

Dave Farquhar

dfarq.homeip.net

Customize Firefox before it hits the ground on a new PC

Dave Farquhar Software March 5, 2012firefox, Keep Firefox, malware, Malware Domains, ramdisk, Vacuum Places

Here’s a nifty-looking program: Firefox Addon Maker, which allows you to create customized Firefox installer packages.

This is helpful if you install Firefox a lot, whether in corporate or home settings.
Read more

Dave Farquhar

dfarq.homeip.net

This is why you disable stuff you don’t think you need

Dave Farquhar security December 28, 2011malware, RIAA, vulnerability

This is going to sound like gloating, so I’m going to apologize for that right up front. A few weeks ago, I recommended you keep WPS disabled except for brief intervals for convenience. I had no specific reason in mind. Just in case. Just in case, you know, a vulnerability in WPS got discovered.

Well, one got discovered.

Dave Farquhar

dfarq.homeip.net

Adblock Plus adds an option for allowable ads

Dave Farquhar Software December 14, 2011android, malware

Adblock Plus, starting with version 2.0, is going to start allowing acceptable ads, something I see as a good thing.

I’m not against advertising–I use it on my own site. I’d prefer not to have an all-or-nothing approach to ad blocking. In fact, I only started blocking ads when I started getting malware that I expected was coming from booby-trapped ads. I stopped getting the malware when I started blocking all ads, so draw your own conclusions.
Read more

Dave Farquhar

dfarq.homeip.net