Malware has been flagged by Trustwave that shows criminals sending out emails claiming to come from the World Health Organization. These emails request people to open an attached .RAR file that claims to have tips on how to protect themselves from Ebola. As you may have guessed, the .RAR file downloads malware onto the victim’s machine.
The full story on this can be found here:: Hackers use Ebola outbreak to trick users into downloading malware
[sc:mbta]
If you receive a .ppt file and don’t know where they came from DO NOT OPEN. There is a vulnerability in Microsoft Office that is currently being exploited by malicious Powerpoint slide decks. While nothing has been officially announced, Microsoft is likely going to take action on this before the next scheduled patch on November 11th.
Read the full article here:: Microsoft Zero Day OLE Vuln Being Exploited in Powerpoint
No business in this day and age can survive without an online element. Protection from trojans, malware, and hackers is imperative whether you’re in charge of payroll at a multi-level corporation or just a small business owner updating the Facebook page for your café. It is important that all workers take steps to ensure the cyber-safety of their place of work.
In large companies, obviously the brunt of the responsibility is on the IT security team but they can’t defend against everything alone. Management needs to discern what information they need and what information is the highest risk to the company if it’s tampered with or stolen in order to properly review and safeguard it. They also need to decide where to put restrictions on certain access for different levels and departments.
On the other end, employees need to adhere to the guidelines set for them regarding business confidential information. They also need to govern themselves and not share passwords with other coworkers or allow their subordinates access to confidential information. With everyone working together, it beefs up security for the entire company at all levels.
For more detailed information and insight, click here.
Cyber-espionage has put a new application to an old technique: malvertising. Reports have been given regarding “Operation Deathclick,†an advanced persistent threat targeting the United States Defense industry. Using malvertising, the attackers objective appears to be intellectual property threat and not the usual ad fraud that is usually associated with malvertising. For more details on this story and a full report, click here.
Trend Micro researchers have been following a “malvertising†trend that has been affecting more than 113,000 U.S. internet users each month. The criminal’s main target? YouTube visitors.
The criminals have been successful in their latest campaign by making their ads appear on the more popular YouTube videos. They get away with this not by directly leading to the malicious sites, but passing it through two advertising sites to keep a lower profile and not get fully discovered. In other words, the criminals bought traffic from legitimate ad providers.
Fortunately, if you keep Internet Explorer updated there should be a patch installed to block them and Google is aware and will likely put a stop to it. For more information, click here.