Update: Duqu exploits zero-day flaw in Windows kernel

Computerworld – The Duqu trojan infects systems by exploiting a previously unknown Windows kernel vulnerability that is remotely executable, security vendor Symantec said today. Symantec said in a blog post that CrySys, the Hungarian research firm that discovered the Duqu Trojan earlier this month, has identified a dropper file that…

read more

Update apps, get malware

Takeaway: From the “Wow that’s cool, hope it doesn’t happen to me” files comes news that F-Secure has discovered an Android application that will update itself and install malware known as DroidKungFu. The technique used is to install an application free of the trojan, then once installed, immediately notify the…

read more

Zeus Trojan update adds P2P takedown resistance

The Zeus financial malware has been updated with P2P (peer-to-peer) functionality that makes it much more resilient to takedown efforts and gives its controllers flexibility in how they run their fraud operations. The new version of the infamous banking Trojan was discovered and analysed by Swiss security expert Roman Hüssy,…

read more

Microsoft security update treats Chrome as malware

Redmond releases same-day correction, but not before Windows Security purges Chrome from user systems Follow @tsamson_IW Microsoft issued today an update to its security software that wrongly identified Google Chrome as malware and purged it from users’ systems accordingly. The Redmond giant has since fixed the mistake, but it has…

read more

Apple malware update protects against PDF Trojan horse

by Dan Moren, Macworld.com   Update brings enhanced malware protection for Snow Leopard Inside Snow Leopard’s hidden malware protection Intego: Malware masquerades as Flash installer New Mac malware variant surfaces, poses as PDF Bugs Fixes: Troubleshooting Apple’s malware protection Lion: The Complete Macworld Review How to force your Mac to…

read more