Orbital Decay: the dark side of a popular file downloading tool
Orbit Downloader by Innoshock is a popular browser add-on often used to download embedded videos from sites such as YouTube. But the popular add-on has disturbing hidden functions.
Malware
Avatar rootkit: the continuing saga
In this blog post we confirm that the Avatar rootkit continues to thrive in the wild, and disclose some new information about its kernel-mode self-defense tricks. We continue our research into this malware family.
“Dr Jekyll” apps can sneak into App Store by hiding their dark side, researchers claim
Apps with a hidden “dark side” could sneak past Apple’s approval process, according to researchers at Georgia Tech. The researchers proved this theory using a malicious app which was approved and downloaded via App Store in March this year.
YouTube download plug-ins hijack browsers to deliver malware-laced adverts
Two video plug-ins for YouTube hijack users visits to the site and insert extra adverts - some of which are being hijacked by “malvertisers”, sending users to fake adverts which attempt to infect their PCs.
Blackout warning: Philips “Smart lightbulbs” can be switched off by malware – and won’t come back on
Philips Hue lighting system is vulnerable to attacks which can cause a “perpetual blackout” in the homes of users, according to a security researcher. The Hue wireless system – on sale in Apple store – controls wireless LED light bulbs in the home via a wireless bridge, and can be controlled by iOS and Android
Stop using Windows, Tor Project advises users after malware outbreak
The Tor Project has advised users of the anonymous browser to stop using Windows, in the wake of a malware attack which exploited a Firefox vulnerability in the Tor Browser Bundle.
“Worst of the worst” abuse images may be being used to spread Trojan, charity warns
Websites for businesses such as furniture stores have been hacked to host child pornography images - and the likely motivation is to spread malware, an internet charity has warned.
Identity-exposing malware on Tor “could be work of FBI”
A malware outbreak which reveals the IP addresses of computer users has struck sites on the anonymous Tor network, including some said to host child pornography - with forum users suggesting that the outbreak might be the work of the FBI.
My Back Pages* – Virus Bulletin papers and articles
I recently completed my 14th Virus Bulletin conference paper, co-written with Intego’s Lysa Myers, on “Mac hacking: the way to better testing?” to be presented at the 23rd VB conference in October, in Berlin. The paper itself won’t be available until after the conference, but the abstract is on the Virus Bulletin conference page here.
Revealed: How a “malicious charger” infects iPhone with spyware in under a minute
Borrowing an iPhone charger - or using one in a public place - might be more risky than you think. Researchers from Georgia Tech showed off an attack this week which used a modified iPhone charger to infect an iPhone 5 with spyware in under a minute.
New ransomware uses webcam and Homeland Security threat to scare victims
A new ransomware infection scares its victims by invoking the name of the Department of Homeland Security, and the National Cyber Security Division - and frightens users further by posting a webcam picture.
Versatile and infectious: Win64/Expiro is a cross-platform file infector
Recently, our anti-virus laboratory discovered an interesting new modification of a file virus known as Expiro which targets 64-bit files for infection. File-infecting viruses are well known and have been studied comprehensively over the years, but malicious code of this type almost invariably aimed to modify 32-bit files. One such family of file viruses, called
Android spyware “on rise” as snooper apps multiply
Spyware is a growing threat on Android phones, according to research by Kindsight Labs, a division of Alcatel-Lucent.
Is your new app what it seems? How to spot the latest Android scams
Spotting “bad” apps on Android is not always easy - with cybercriminals finding new tricks every month to fool phone and tablet users into downloading malware.
“Hugely significant” SIM card vulnerability leaves millions of cellphones at risk
Millions of SIM cards in use today are vulnerable to hacking - allowing for attacks where SIM cards could be cloned remotely, or voicemail numbers could be changed, according to a German security researcher.
New ransomware uses Organized Crime unit threat to scare users
New “ransomware” attempts to terrify users into paying up by using the name of Britain’s SOCA crime unit - the Serious Organized Crime Agency, dealing with drugs, people smuggling, human trafficking, major gun crime, fraud and computer crime.
Hacked signal-boosters let cybercriminals “listen in” on cellphones
A $250 signal-boosting device for cellphone users can be hacked, two researchers claim - offering total access to phone calls, internet use and text messages on devices connected to the “femtocell”.
“Warning fatigue” means browser users ignore up to 70% of security alerts
Browser security warnings can work to protect users from phishing and malware sites - but “warning fatigue” means important alerts over site security can be conmpletely ignored.
“Bug bounties” are cheap way to keep companies secure, Berkeley study finds
“Bug bounties” paid out for finding and reporting bugs and vulnerabilities are a cheap and effective way for companies to bolster their security, an independent study by UC Berkeley researchers has found.
U.S. Government destroys $170,000 of PCS in malware scare – even mice and keyboards
A U.S. Government department threw away IT components including printers, computer mice and keyboards in an effort to root out a “sophisticated” and “persistent” malware threat - which did not exist.