Archive for 2010

Angry Birds Trojan

December 17, 2010 - Angry Birds is the top-selling mobile game at the moment. Available for Apple, Nokia and Android devices, the game has been downloaded millions of times.An application (continue reading...) Read more

Automatic photo tagging: Facebook friendships get creepier

December 16, 2010 - The latest enhancement - or, at least, the latest new feature - announced by Facebook is increased automation for photo tagging. Unlike graffiti tagging, where you spray-paint your name (continue reading...) Read more

Controlling Wikileaks Hactivism

December 16, 2010 - Wikileaks is a whistle-blower website that’s been publishing sensitive and often classified documents belonging to governments and large corporations since 2006. From the start, they’ve had no shortage of both allies and enemies, but recently the intellectual debate has turned (continue reading...) Read more

Free farm cash from Zynga? No, it’s another viral Facebook scam

December 16, 2010 - Scams continue to be a nuisance on Facebook, with the latest posing as a way to get free cash for your farm in the popular online game FarmVille. If you've seen messages like the following, don't click on the link: (continue reading...) Read more

U.S. outlaws “negative option” deceptive online selling

December 16, 2010 - The U.S. Federal Trade Commission has issued a press release detailing the consumer protections in the Restore Online Shoppers Confidence Act just passed by Congress. “Congress has passed the 'Restore Online Shoppers’ Confidence Act' to combat deceptive online (continue reading...) Read more

Spam and Phishing Landscape: December 2010

December 16, 2010 - The volume of spam continues to drop.  We have been monitoring the decline in overall spam volume over the last few months, and the downtrend continued in November.  The average daily volume in November dropped 17.4 percent month-over-month.  Compared to (continue reading...) Read more

(Not Very) Advanced Evasion Techniques

December 16, 2010 - Advanced Evasion Techniques (AETs) were disclosed by CERT-FI in October. While reading about the disclosure and related information and subsequently working on them, I wonder whether there is really anything “advanced” about these. Layer 3 and 4 network protocols such (continue reading...) Read more

Internet Kill Pill in 2011: Placebo or Poison?

December 16, 2010 - Much of the latter half of 2010 has had the cybersecurity community abuzz over congressional talks to give the executive branch the authority to shut down all or parts of Internet connectivity to public or private entities in (continue reading...) Read more

Support Scams: Even More Personal

December 16, 2010 - It must be be my lucky month. I've been getting lots of calls offering to save my PC from system errors. (Sadly, this is an instance where regional "don't cold call" lists don't help, since the calls are being routed (continue reading...) Read more

Win a robot, and help Sophos’s study of social networking threats

December 16, 2010 - Every year we run an investigation into how many of you are being hit by threats (such as spam, malware and phishing) on social networks. Well, it's that time again! This year, to encourage you to help us, we're offering (continue reading...) Read more

Dancing Snowman storms its way across Facebook

December 16, 2010 - Right now, many Facebook users are seeing messages from their online friends saying: wow I just got a Free Dancing Snowman for my farm grab yours from If you click on the link you (continue reading...) Read more

Burglar uploads his picture to Facebook victim’s account

December 16, 2010 - Do you recognise this man? If so, Marc Fisher, a reporter and editor at the Washington Post would probably like to hear from you. The photograph shows a man, wearing Marc's brand new winter coat, and holding (continue reading...) Read more

Targeted webmail phishing attacks

December 16, 2010 - When most people hear the term "phish" in relation to email, they tend to think of big banks and financial institutions, or services like PayPal and eBay. The (continue reading...) Read more

Twitter used for Rogueware Distribution

December 15, 2010 - Cyber criminals are using social media more frequently to distribute their malicious creations. Pft! As if Blackhat SEO, fake advertisements, and hacked websites weren’t enough?! Today we’ll take a look at a Rogueware campaign using Twitter for distribution.  Several fake (continue reading...) Read more

Lost and Stolen Wallets Lead To Identity Theft

December 15, 2010 - A friend called me in a panic because she had lost her wallet, which contained her driver’s license, credit cards, debit card, store cards, and her Social Security card. (You should never carry your Social Security card or Social Security (continue reading...) Read more

Allegations suggest OpenBSD has US crypto backdoor

December 15, 2010 - OpenBSD is the poster boy of secure operating systems, which is why it was an enormous surprise when allegations were leveled yesterday that the FBI had planted backdoors in the source (continue reading...) Read more

Chinese phishing sites: stocks and government lottery

December 15, 2010 - I find Chinese phishing sites particularly interesting. For starters, they don't seem to attract too many security researchers. I have found that very few Chinese sites are blocked by Phishtank or Google Safe Browsing. Additionally, the type of phshing (continue reading...) Read more

What’s really in the drugs you buy over the Internet?

December 15, 2010 - The  “alarming variety” of chemicals includes rat poison (the blood thinner warfarin) The U.S. Food and Drug Administration has sent a letter to manufacturers and trade groups seeking their help in preventing distribution of tainted drugs (continue reading...) Read more

Gawker Media Compromise – Lessons Learned

December 15, 2010 - This past weekend, Gawker Media began notifying more than 1.3 million users, across its variety of website properties, that their user databases and other information assets had been compromised. A complete dump of the user database was being distributed via (continue reading...) Read more

Opt Out isn’t Just for One Day

December 15, 2010 - Recently there was a lot of news around an “opt out day” with respect to the American TSA using scanners to take nude pictures of travelers. The idea was that if people opted out on one of the busiest travel (continue reading...) Read more

Copyright © 2012 The Security Blog. All rights reserved.