Skip to Content

AOL Tech

trojan posts

Web, Social Networking

Fake Facebook 'Password Reset' E-Mails Hiding Malware


Facebook's good name is being leveraged for yet another brutal round of malware dispersal. The trojan, Bredolab, is being distributed via e-mails with the subject line "Facebook Password Reset Confirmation". The message generally reads:
Hey (insert username),
Because of the measures taken to provide safety to our clients, your password has been changed.
You can find your new password in attached document.

Thanks,
The Facebook Team
The attachment, a .zip file, will have the name "Facebook_Password_" followed by a short sequence of random numbers and letters. Inside, there is an identically named file, except that it's an .exe (or executable) file instead of an archive. Run that file and you'll be kick-starting a torrent of malware downloads, including a fake anti-spyware program. Bredolab is able to hide by injecting its own code into existing Windows components, and by automatically shutting down if it detects another program (such as an anti-virus package) investigating its activities.

Read more →

Computers, Web

Clampi Virus Targets Users at Banks and Credit Card Sites

Keeping up with the latest Web security threats is a daunting task, because viruses and trojans emerge, evolve, and spread at an alarming rate. While some infections like Nine Ball, Conficker, and Gumblar have hit the scene and immediately become the scourge of the cyber security world, others take their time -- quietly infiltrating more and more computers before revealing the true depth of the danger they pose.

One such slow grower is Clampi, a trojan that made its debut as early as 2007 (depending on who you ask) but is only now raising hairs outside professional security circles. Clampi primarily spreads via malicious sites designed to dispense malware, but it's also been spotted on legitimate sites that have been hacked to host malicious links and ads. Using these methods, Clampi has infected as many as half a million computers, Joe Stewart, of SecureWorks, told a crowd at the Black Hat Security Conference in July, USA Today reports.

Read more →

Computers, Web

Here Comes Nine Ball, Another Major Web Threat

Nine Ball, Another Major Web ThreatAnother day, another massive attack that compromises the security of thousands of users. Just as we were getting ready to declare victory over Conficker (and settling in for a long battle with Gumblar), along comes Nine Ball, another difficult-to-defeat offensive that hijacks Web sites and tries to load malware onto a user's PC. The worm has a trick up its sleeve; repeat visitors to infected sites are dumped to Ask.com, a sneaky move that prevents security experts and investigators from being able to discover too much about the host of the malware.

According to Internet security firm Websense, Nine Ball has already compromised over 40,000 Web sites. The attack redirects visitors to an infected site that attempts to install malware and keyloggers (applications that can track your keystrokes) onto a PC, all intended for stealing personal data and passwords. The infected site will search the user's browser, Quicktime, and Adobe Reader for vulnerabilities that it can then exploit to load the malicious software.

Read more →

Computers

Got a Computer Virus? Here's What to Do (and Not Do)


Sometimes even the most cautious of us slip up, our PCs ending up with a nasty virus like the dreaded Conficker that's making its way around the Web right now. But even if you fall victim to a program written by a ne'er-do-well half way around the world, all hope is not necessarily lost. It all depends on what you do next (which sometimes means not doing something). We've come up with a handy checklist of things you should do (and not do) if you suddenly find that your computer is infected with a virus.

Most of the advice is applicable to Macs, as well; although the number of known viruses for OS X is exactly zero, there have been limited cases of just-as-threatening Trojans reported. And the Mac's relative immunity to viruses likely won't remain true forever, as more and more hackers are liable to target the increasingly popular computer from Cupertino.

Get started with the first "Do" by clicking on "Next" below.

Computers, CES 2009

iWork '09 Trojan Virus Infects at Least 20,000 Machines?

Quite a number of no-goodniks who thought they'd save a few bucks by downloading a pirated version of iWork '09 have gotten more than they'd bargained for -- in the form of a Trojan Horse called OSX.Trojan.iServices.A. This guy installs itself in the computer's startup as root, and once in place it can connect to a remote server and broadcast its location, allowing malicious users to take charge of the machine remotely. And since it has root access to the OS, the trojan can not only install additional components but can also modify existing apps, making this thing extremely difficult to remove.

According to a white paper released by Intego, at least 20,000 people may have downloaded the infected software -- which they'll get around to installing as soon as they finish those episodes of 'Celebrity Rehab' they grabbed at the same time. [Via Macworld]

Read more →

Computers

Paris Hilton's Web Site Hacked, Distributing Viruses



If you're a Paris Hilton fan, you may want to avoid visiting the glam gal's site for a few days and go elsewhere to find out where she's been partying. Apparently, the starlet is a little loose with her Web security, leaving the site open to attack. Someone has taken advantage, turning ParisHilton.com into a distribution channel for viruses.

A visit to the site now shows a pop-up that installs a Trojan Horse onto your computer. Once installed, it runs in the background and can capture the information you enter (including information about your bank accounts) and can also turn your machine into a so-called "zombie" to turn around and attack other machines. Even worse news is that most virus scanners aren't even able to identify the trojan at this point, seeing it as just a normal application.

So, again, you'd better stick to the tabloids for the next few days! [From: PC World]

Computers

McDonald's and Other Big Brands Used to Spread Computer Viruses

McDonald's and Other Familiar Brands Used for Viruses
Yeah, we know, it always seems like another day, another virus around these parts, but we feel it's our duty to keep you informed of any threats to your security (ID theft, computer viruses, etc). So, we hope you're paying attention to yet another warning of a nasty virus that uses some seriously deceitful means to trick you. The latest is a series of trojan viruses that show up in your e-mail in-box purporting to be coupons, but, in reality, are just another means to install malicious software.



As seen in the above picture, one of those says it's from McDonald's and is delivering you "FREE giveaways and AWESOME savings." Actually, all it's giving is a file that, if you run it, will give hackers control of your machine and access to your data. According to CNET, similar e-mails are appear to come from Coca-Cola and Hallmark as well -- the latter even including a goofy-looking holiday card! It, too, is just another delivery means for corrupt software. So, update that anti-viral software and, as always, watch where you click! [From: CNet News]

Computers

Latest Facebook Fake-Video Virus Takes Over Your Profile

Facebook's Fake Video Viruses Getting More ProblematicWe've talked about viruses hitting Facebook before, but it seems they're getting a little more serious now. A new one is making the rounds, W32.Koobface.A, which not only installs itself into the background on your PC, but takes over your profile on the site and sends itself to all your friends!

The virus uses the same trick we've seen before, the fake-YouTube page that says you're missing a plugin. It prompts you to download something and, if you do, you're infected. The virus will then e-mail your friends and also update your profile to include links back to the virus, hoping they'll do the same.

For its part, Facebook says it is working to remove the links, but even if it manages to quash this virus, surely another one will pop up shortly. As always, watch where you click. [From: NEWS.com.au]

Computers

Beware the Fake Microsoft Patch E-Mail -- It Contains Malware

Beware the Fake Microsoft Patch E-Mail

Updating your computer to have the most recent software patches from Microsoft is almost always a good idea -- it doesn't take long for a system flaw to go from new discovery to critical exploit. However, as with everything else online, you have to be careful where you get those patches. Some malware pushers are currently doing their best to trick you into downloading a fake patch that, go figure, installs malicious software instead.

The patch is delivered as an attachment to an e-mail purportedly coming from Microsoft itself (shown above) indicating that you need to run the file to fix some system flaws. Instead of fixes, you'll get yourself a Trojan capable of capturing -- and broadcasting -- your personal info.

As we always say, don't run attachments to e-mails unless you're absolutely positive they're clean, and now we'll add that if you're going to be updating your Microsoft software, make sure you do so from the Windows Update site. [From: ZDNet]

Computers

Fake Obama Sex Video Contains Computer Virus



Like Megatron's Decepticon minions from 'Transformers,' spyware and malware keep finding new ways to hide themselves in an effort to infect your home computer. The latest attempt is a supposed video showing Barack Obama engaged in some sort of sinful act. It's all a lie -- it's just another piece of malicious software looking to hide itself on your machine.

In this case, the malware is a trojan called Mal/Hupig-D. It runs in the background and, as with most malware, steals passwords, credit card numbers, bank account information, and can pretty much do whatever it wants once installed. That's no fun, of course, so as with every other example we keep posting about, watch what you click, and keep that virus scanner up to date! [From: Yahoo! News]

Computers

Watch Out: Fake News Phishing E-Mails Are Getting More Official-Looking


Last month we reported on a new tactic being used by phishers, those shameless people wanting your private info and access to your PC. They were sending out spam that looked like stunning news headlines in the hopes that you'd be suckered into clicking. Now, they're getting a little more cunning, going for somewhat less sensational headlines and more official looking e-mails that are even catching some security-savvy users off guard.

Valleywag received one such e-mail claiming Microsoft had purchased AOL and looked to be an official dispatch from MSNBC. It linked to a page that was appeared to be hosted at MSNBC.com, but behind the scenes routed clickers to a bogus Web site that prompted users to install a new version of Adobe's Flash plugin for Web animations. In actuality, the users were installing a Trojan Horse that gave attackers access to their PCs. More proof that everything you read on the Internet isn't true -- and that most people are definitely out to get you. [From: CNET News and Valleywag]

Computers

Latest Malicious Software Targets Macs, Takes Your Picture, Passwords

Latest Malicious Software Targets the Mac, Takes Your PictureMore or less since the inception of the Macintosh OS, users of Apple computers have felt invulnerable to the threats that their Windows-using counterparts have faced. Viruses and other malicious bits of computer software that regularly affect Microsoft's platforms are very rare on the Mac. But contrary to popular belief, they're not absent altogether, and a new one making the rounds is a real doozy, as it disables your security software, steals your passwords, and even takes your picture using the MacBook or iMac's built-in camera.

According to Mac anti-virus developer SecureMac, the malicious program is a Trojan, an app that installs itself pretending to be friendly and useful, but actually hides an unwanted payload. This particular one is distributed as a supposed game or utility and, after installing itself, exploits a vulnerability in Mac OSX versions 10.4 and 10.5 that enables it to take complete control over your computer. From there it can do whatever it likes, including montior every keystroke you make to capture passwords, deletes ystem logs to hide its existence, and take over your camera to monitor what you're up to.

The good news is that you'll have to actually agree to download and install this thing in order for it to get onto your computer. So, make sure you know exactly what it is that you're downloading and installing and you should be okay (be extra wary of random utilities or games that offer themselves up to your for download and install). In addition, you should install an anti-virus program onto your Mac and run it regularly.

This Trojan is a nasty one, that's for sure, and a reminder that even if you're using a Mac, you should be careful where you click that mouse! [Source: NewsFactor]

Computers

Valentine's Day e-Card Could Be Virus In Waiting

Storm Worm is coming this Valentine's Day.

Be wary when opening e-mail greeting cards this Valentine's Day if you don't know the sender. As Switched.com has been warning all its readers for a few weeks now, the message could turn out to be a computer virus, in this case known as a "botnet," which can take over your computer to send more viruses out, link to other computers doing the same, or even steal your personal information.

The FBI suggests not opening e-mail if you don't know the sender.

This particular e-mail baddy is known as the Storm Worm virus, and saw activity around several holidays last year. It takes advantage of people who let down their guard because an e-mail greeting card is often entertaining and seen as non-threatening.

Typically, the e-card arrives in a user's in-box, the e-mail is opened, and the user is directed to click on a link within the text to retrieve the full card. That's when the virus download occurs. The Storm Worm will be downloaded to that computer and begin its bad work, which ultimately is to deny service to a large network.

Storm Worm (so named because the subject line of the e-mail messages originally contained the line "Many Dead As Storm Batters Europe") was the most pervasive Internet attack last year.

Here are Switched.com's quick three tips to avoid Storm Worm and other viruses, trojans and malwares from being downloaded to your computer:
  1. Don't click on a link in an e-mail message from someone you don't know.
  2. Turn on your e-mail reader's spam prevention.
  3. If an advertisement you find on a Web page looks suspicious, type in the company Web address yourself instead of clicking directly on the ad (Sometimes Web ads are another way viruses and trojans get distributed.)
Are you looking for a safe way to send a Valentine's Day greeting card -- or a card for any other occasion? Try Hallmark, Bluemountain, or, of course, our parent, AOL, which has a whole site dedicated to just that.

From News.com.au.


Related Links:


Cell Phones, iPhone

iPhone Gets its First Virus

iPhone Virus Affecting Unlocked PhonesYou just had to figure this was coming. With phones getting smarter and more advanced, and with the popularity and hype surrounding the iPhone, a virus just had to be in the cards. And that's exactly what been released. But, breathe easy: if you're one of the vast majority of iPhone users who haven't unlocked your phone, you aren't susceptible to a virus -- at least not yet.

The virus is what's called a trojan, something that pretends to be something else to get you to install it. According to Macworld UK, this virus pretends to be an update to Erica's iPhone Utilities, a popular suite of tools for those who have unlocked their phone, enabling them to install whatever they like. This means, of course, that if your phone isn't unlocked you couldn't install the app anyway, so no virus worries for you.

As viruses go this one isn't a particularly bad one. If you're infected your iPhone will just show the text "shoes" rather frequently. Go to uninstall it, though, and it'll wipe out the installation of many of your system applications.

The kicker is: the thing was apparently written by an 11-year-old, making us wonder what will happen when a serious malicious developer decides to try his hand at killing some iPhones.

From textually.org and Macworld UK

Related Links:

Computers, MySpace

The FBI's Spyware: Is it Watching You?

Privacy advocates, prepare thy letter writing hands. A student at Timberline High School, outside Seattle, Washington, has recently been arrested for calling in repeated bomb threats. That, you should have no problem with.

The scary part is the manner in which he was caught and convicted. Josh Glazebook, 15, taunted authorities via e-mail and even created a MySpace profile called Timberlinebombinfo (shown), which used the alias Doug. It's through this profile that the FBI was able to track down Josh. Using a fake profile, the FBI sent a message to Timberlinebombinfo that installed a hacker-style trojan horse on his PC. The FBI spyware collected a wide range of information including the computer's IP address, MAC address, open ports, a list of running programs, the operating system type, version and serial number, preferred Internet browser and version, the computer's registered owner and registered company name, the current logged-in user name, the last-visited URL and the IP Address of every computer it connects to. Phew...

The FBI was able to install this program without a suspect or wiretap warrant because "under a ruling this month by the 9th U.S. Circuit Court of Appeals ... Internet users have no 'reasonable expectation of privacy' in the data when using the Internet."

So note: Simply using the Internet disqualifies you from normal expectations of privacy and safety of your data.

See Wired for the full story.

Related Links:

Switched Video

Follow Switched on Twitter

Deals of the Day

Latest Reviews from CNET.com

CNET provides the latest tech news, unbiased reviews, videos, podcasts, software, and downloads, making tech products easy to find, understand and use.

Top Product Reviews

  • Home Audio Reviews

    9.0 out of 10

    Definitive Technology BPX
    Works great with Dolby Pro Logic and Dolby Digital. Full Review

    9.0 out of 10

    Denon AVR-4306 (black)
    Incredibly well-featured 7.1-channel receiver; excellent sound quality; three HDMI inputs; converts analog video to HDMI output; upconverts analog video to 720p/1080i HD resolution; iPod and USB MP3 player connectivity; Internet radio and MP3/WMA streaming audio via built-in Ethernet port; XM Satellite Radio compatible; touch-screen remote; multizone, multisource operation; browser-based control via home network; accurate autocalibration routine. Full Review

    8.8 out of 10

    KEF KHT3005 (black)
    The KEF KHT-3005 is one compact, beautifully designed speaker package with solid aluminum satellites that feature unique driver technology to produce incredible clarity. Meanwhile, the equally astounding dual 10-inch, 250-watt powered subwoofer delivers ultradeep bass. Full Review

  • Cell Phone Reviews

    8.7 out of 10

    SignalBoost Mobile Professional Amplifier Kit
    The Mobile Professional Amplifier delivers a powerful signal boost to your cell phone. Also, it offers a compact design and easy setup. Full Review

    8.6 out of 10

    Wi-Ex zBoost YX510-PCS-CEL cell phone signal extender
    The Wi-Ex zBoost YX510-PCS-CEL significantly boosts your cell phone reception and is easy to operate. Also, it uses a wireless connection to your phone. Full Review

    8.3 out of 10

    LG VX6000 (Verizon Wireless)
    Compact and stylish; impressive battery life; solid audio quality; sharp color screen; built-in camera; USB ready; affordable. Full Review

  • Digital Camera Reviews

    9.3 out of 10

    Canon EOS 1D Mark III
    Extremely fast, 10-megapixel continuous shooting; very low noise; highly customizable; well-designed body with weather sealing; 3-inch LCD; abundant optional accessories. Full Review

    9.3 out of 10

    Nikon D3 (body only)
    Full-frame sensor; well designed, pro-level weather-sealed body; very low noise, even at extremely high ISOs; fast. Full Review

    9.0 out of 10

    Canon EOS-1Ds Mark III
    Very low noise, high quality images; 21.1 megapixels; live view shooting; pro-level build-quality and performance. Full Review

  • Desktop Reviews

    8.9 out of 10

    Velocity Micro Edge Z30 (Intel Core i7)
    Best value among midrange gaming PCs; Velocity Micro's consistently high build quality; compact case makes few sacrifices; second graphics card slot previously uncommon at this price. Full Review

    8.5 out of 10

    Apple iMac (24-inch, 2.8GHz)
    A minor specification update results in some significant performance gains; graphics upgrade an option on this 24-inch model; sleek, polished design didn't receive an update, but we won't start clamoring for a new design until the current one is at least 12 months old. Full Review

    8.4 out of 10

    Velocity Raptor Signature Edition Gaming PC
    One of the fastest PCs we've tested; a PCI Express RAID card helps media encoding performance; typically immaculate Velocity Micro assembly; strong, three-year warranty. Full Review

Featured Galleries

Nissan Land Glider
Vintage Keyboards
Retro Computer Logos
Vintage Computer Festival
Motorola CLIQ
iPod touch
iTunes 9
Video iPod Nano
The Beatles: Rock Band

 

Switched Desktop

Get the New Switched Desktop

Latest tech news, Switched mail, and more.

AOL Tech Network

Resources

Autoblog

Daily Finance

Download Squad

Engadget

Joystiq

Urlesque

Fanhouse Main

WalletPop

Gadling