MarkRogersTV takes a look at a wide open Heisman race Read More….
Anyone who looks at the numbers and has played risk knows we need to drastically cut spending on overseas military, NSA, CIA, DHS and prisons – to compete. 11 countries including Mexico are forecast to exceed US economically based on […] ↓ Read the rest of this entry…
View full post on The Cyber Wars
By David Alexander WASHINGTON (Reuters) – A global cyber arms race is engulfing the Internet and the best way to counter the rapidly escalating threat is combining the efforts of U.S. agencies, private …
View full post on russia cyber attacks – Yahoo! News Search Results
View full post on National Cyber Security
By David Alexander WASHINGTON (Reuters) – A global cyber arms race is engulfing the Internet and the best way to counter the rapidly escalating threat is combining the efforts of U.S. agencies, private …
View full post on russia cyber attacks – Yahoo! News Search Results
View full post on National Cyber Security
A Georgia man faces a slew of charges after police say he stole credit cards from a race fan’s trailer at Daytona International Speedway in January.
The suspect, Steven G. Sanders of Macon, Ga., was arrested Thursday in Alachua County, where he is accused of stealing credit cards from people attending the Gatornationals races at Gainesville Raceway.
Sanders faces charges of grand theft, burglary and fraudulent use of a credit card in connection to the Daytona Beach case. More charges are expected, according to the Daytona Beach Police Department.
Sanders is accused of breaking into someone’s race trailer when it was parked in the infield garage at the Daytona International Speedway on Jan. 27 and stealing cash and credit cards. The stolen cards were used at Publix, Walmart and Dillards.
Cops obtained security video from the Walmart in Ormond Beach where the stolen cards were used. Sanders looked like the suspect in Walmart, cops said. The man in Walmart bought gift cards, which were used at a Walmart in Jacksonville. Sanders was captured on security cameras at the Jacksonville store, police said.
Sanders remains in the Alachua County jail on $45,000 bail.
View full post on National Cyber Security
Foreign policy still lags far behind the discussion of domestic issues as the Republican candidates continue debating each other. …
View full post on obama hacking government – Yahoo! News Search Results
View full post on National Cyber Security
ECU senior lecturer Murray Brand says a theoretical attack strategy he calls a malware rebirthing botnet would render existing antivirus measures obsolete by using different kinds of malware in a coordinated strike.
The attacker would first use a worm to create a botnet of infected slave computers, then upload a honeypot program to attract and capture other malware from the internet.
The captured malware would then be sent back to the attacker and altered in what Dr Brand calls a rebirthing suite, improving its defences against antivirus programs with anti-analysis tools and tailoring them for the coming attack before distributing them among the botnet.
The attacker now has an array of advanced, customised malware that are extremely difficult if not impossible for antivirus programs to detect that can be deployed against a target system from multiple angles.
Recognition of malware is dependent upon an analyst having already analysed the behaviour of the malware and extracted an identifying signature, Dr Brand says.
If the new malware is significantly different to any known malware, antivirus software is unlikely to recognise the threat until the malware has disabled it.
Dr Brand says antivirus software is already struggling to keep up with the growing volume of malware rapidly appearing on the internet, more than 75 million by the end of 2011.
He says one third of malware in existence was created in the first 10 months of 2010 and new threats are often not properly identified for 48 days, with another 48 hours to program new definitions.
Dr Brand says the processing power needed to scan for and delete malware my soon outstrip the capacity of most computers.
This could flood the target system with a massive volume of malware or hide malicious-looking code in good programs to force them or the entire system to be taken offline, or acting as a decoy for the real attack coming from another angle.
At the other end of the spectrum, customised malicious software that does have a coordinated objective could be used to take over control of critical infrastructure or network operations in a very stealthy manner, Dr Brand says.
He says most of the components for a malware rebirthing botnet exist and with cyber crime being more lucrative than drug trafficking it is likely that a similar model will be functional in the near future.
Source: ScienceNetwork Western Australia
<!–
–>
Article source: http://www.physorg.com/news/2011-12-malware-rebirthing-arms.html
View full post on National Cyber Security » Virus/Malware/Worms
The graph shows the number of sites involved in Social Engineering attacks compared to all sites hosting malware or exploits
In declaring that, “Like other service providers, we are engaged in an arms race with malware distributors,” Google has thrown down the gauntlet in the battle against malware distributors, and now it’s compiled four years worth of data that shows how its crafty adversaries have continued stealthy efforts to infiltrate lives and wreak havoc.
In a post yesterday on the Google Online Security Blog, Google Security Team members Lucas Ballard and Niels Provos laid out the highlights of the dense report, which “explores the evasive techniques that malware distributors employ” over about 160 million web pages hosted on approximately 8 million sites.
It’s an epic struggle that the search engine giant is thoroughly entrenched in, sending out “around 3 million malware warnings to over 400 million users whose browsers implement the Safe Browsing API.” The Safe Browsing API enables apps to automatically checks URLs against a constantly updated database of suspected phishing and malware pages. This tool gives developers a weapon to warn users before clicking on links that appear in their site that could lead to malware-infected pages. It can also prevent users from posting links to known phishing pages.
So users benefit, even when they don’t see what is happening. The code blocks the triggering mechanism that leads to an attack. But Google has made its defenses visible to users in other ways, with alerts to users about malware infections, flagging websites, and in search results, some sites may be flagged, “This site may be compromised” or This site may harm your computer.”
In “Trends in Circumventing Web-Malware Detection,” team members focused on “the four most prevalent detections techniques: Virtual Machine honeypots, Browser Emulation honeypots, Classi?cation based on Domain Reputation, and Anti-Virus Engines.”
While probably only developers can really make the most of this report, it does also give users insights on how many different ways those with malicious intent are trying daily to take advantage of innocent users.
To try to translate some of this to us ordinary folk: security experts can typically find malware by scrutinizing any new processes to an operating system; by making copies of browsers to pinpoint vulnerabilities; by flagging “domains as malicious weeks before they appear on public blacklists”; and by using more traditional anti-virus scans.
The study confirms the team’s hypothesis that “malware authors continue to pursue delivery mechanisms that can confuse different malware detection systems,” but that “adopting a multi-pronged approach can improve detection rates.”
The graph shows how many compromised sites include content from cloaking sites.
Social engineering is up, Google says. This malware distribution mechanism engages in tricking unsuspecting users into installing malware, which is usually disguised as an anti-virus product or browser plugin. But before panic sets in, the study cautions, “sites that rely on social engineering comprise only 2 percent of all sites that distribute malware.”
Another area where the study sees a rise in danger are drive-by downloads, which install malware after the exploit passes through a hole in a browser or plugin. IP cloaking is also another way malware distributors are getting through defenses, by showing one face (safe) to detection systems and another (malicious) to website visitors who stumble on the pages.
In this spy vs. spy world, Google is constantly trying to anticipate and outsmart its foes, which come at it from many fronts. It’s a war that has only added bad guys, at least when it comes to cloaking. From 2007 through 2008, 7.21 percent of sites had only a bad reputation signal. In 2009, this jumped to 36.5 percent and last year almost reached half at 48.5 percent.
The one thing that seems to emerge from this is clear: Be vigilant. Do not open any site you think may be compromised, and don’t download without scrutiny.
Google also offers these tips for users:
More stories:
Check out Technolog on Facebook, and on Twitter, follow Athima Chansanchai, who is also trying to keep her head above water in the Google+ stream.
Article source: http://technolog.msnbc.msn.com/_news/2011/08/18/7406333-google-engaged-in-an-arms-race-with-malware
View full post on National Cyber Security » Virus/Malware/Worms