(...)The most capable solution on a zero-day detection, according to the report, is F-Secure with 27 per cent of detections, followed by Kaspersky Lab and McAfee with 22 per cent each. Symantec comes next with 21 per cent and Sophos with 20 per cent.
It claimed that as it takes an average of 11.6 days to 'catch up' with malware, and that "users should not rely on the AV industry as their only line of defence".(...)
Source and full article: SCmagazine Australia

"Microsoft is aware of a new vulnerability report affecting Windows Shell, a component of Microsoft Windows.  (...) An attacker who successfully exploited this vulnerability could run arbitrary code as the logged-on user. (...) An attacker could then install programs; view, change, or delete data; (...)"

Source: Microsoft

Learn the most important settings
to protect the USB drives!

S P A M

Botnets exploit Linux owners' ignorance
A lack of knowledge and awareness about how to use Linux mail servers could be contributing to the disproportionately large number of Linux machines being exploited to send spam, according to new Symantec Hosted Services research.
The firm's latest monthly MessageLabs Intelligence Report found that Linux-based computers are five times more likely to send spam than Windows PCs. (...)
Source and full article: SC magazine Australia

Three people indicted in $100m scareware operation - Authorities attempt to reclaim cash from Ukrainian bank.
US federal prosecutors have filed charges against three men for tricking internet user into buying over $100 million of fake security software.
The three men are alleged to have set up a company called Innovative Marketing, which sold software such as 'DriveCleaner' and 'ErrorSafe,' for around US$50 per user (AU$59). The software, dubbed scareware by security experts, scans a user's system, purports to have found malware and then offers to remove it for a price. (...) Users clicking on the adverts were redirected to a web site which initiated the scareware selling process (...)
Source and full article: SC magazine Australia

What photocopier have you used again?
Photocopiers could be used against you.
Your Identity is at risk.  VIDEO 
Source: CBSNEWS.com

 'Tabnapping' Attack Simplifies Phishing
With a bit of malicious JavaScript code, Web browser tabs can be altered when hidden from view.
Mozilla's creative lead for Firefox, Aza Raskin, has developed novel phishing attack that Firefox engineers will need address.
Raskin calls the attack "tabnapping" because it can replace the content of a Web page that's open in an inactive browser tab -- and thus isn't visible at the moment it's being changed -- with a page designed to capture personal information.
While the user of a Web browser is looking at an active tab, malicious JavaScript code on one of the hidden, inactive tabs that happens to be open can replace the loaded page with new content, such as a fake Gmail login page. (...) The result is a phishing page that is very easy to mistake for a legitimate Gmail login page. (...)  It's certainly avoidable, if the user is alert.
Source: InformationWeek
 

IBM unleashes virus on AusCERT delegates
Malware-infected USB key the culprit.
Delegates to AusCERT, Australia's premier information security event held this week on the Gold Coast, have taken home a little of the stuff they spent the week agonising over - a virus.
In an email this afternoon, IBM advised visitors to its AusCERT booth that its complimentary USB key was infected with a virus. An IBM spokesman and conference organisers confirmed the email was genuine. (...) "Unfortunately we have discovered that some of these USB keys contained malware and we suspect that all USB keys may be affected."
Source and full article: ITnews.com.au

J A V A

Zero day Java flaw opens up all users to attack
Oracle's view is that it's no big deal.
Security researchers have warned of a flaw in Java that could allow malware writers to inject code onto user's machines. (...)
Source and full article: SC magazine AUstralia

 Major 'botnet' busted: 13m PCs infected
Spanish police have arrested three men accused of masterminding one of the biggest computer crimes to date - infecting more than 13 million PCs with a virus that stole credit card numbers and other data. (...)
Mariposa had infected machines in 190 countries in homes, government agencies, schools, more than half of the world's 1000 largest companies and at least 40 big financial institutions, according to two internet security firms that helped Spanish officials crack the ring. (...)
Mariposa was programed to secretly take control of infected machines, recruiting them as "slaves" in an army known as a "botnet." It would steal login credentials and record every key stroke on an infected computer and send the data to a "command and control center," where the ringleaders stored it.
"Basically they were going after anything that would make them money," Davis said. (...)
"Mariposa's the biggest ever to be shut down, but this is only the tip of the iceberg. These things come up constantly," said Mark Rasch, former head of the U.S. Department of Justice computer crimes unit.
He said he suspects there were more than three people behind Mariposa, and that any ringleaders who were not arrested could soon put the network back online."
Source and full article: smh.com.au