Hasta La Gadget!

We see a lot of scams and phishing attempts all the time, but a new one that was discovered by security research firm Webroot reveals a malware-infested email campaign that tricks users into thinking that they have received a $200 Apple Store gift card, when in reality, it’s an attempt to install malware on Windows […]

It was just over two years ago that the paragon of internet privacy, the Tor project, decided to build its own browser by forking Firefox. Wired reports that an exploit of that very same browser has been recently discovered that allowed a number of users’ Windows computers to be infected with malware. Once installed, the code delivered infected machines’ hostnames and MAC addresses to a remote web server in Reston, Virginia, a city located just outside Washington D.C. The browser exploit — a JavaScript vulnerability inherent to Firefox version 17, the version upon which the Tor browser was built — was enabled by a breach of Freedom Hosting servers. In this case, affected Freedom Hosting servers delivered web pages to users with the JavaScript exploit embedded in them.

There’s no direct evidence that the malware comes from the government, but the malware’s command and control IP address is registered to a governmental defense contractor. Plus, the data pulled from infected machines indicates it could be an example of the FBI’s computer and internet protocol address verifier (CIPAV) software first identified by Wired in 2007. CIPAV has been used by the FBI to help identify and catch terrorists, hackers and criminals since 2002, but the exact nature of the software has never been revealed. Regardless, the vulnerability in the browser has been identified and fixed, so users need only update to the newest version of the Tor browser to keep their web traffic away from prying eyes… for now, at least.

Update: To be clear, the Firefox exploit in question was fixed, along with the Tor browser well over a month ago, and any users who have updated since June 26th were not affected.

Filed under: Internet

Comments

Via: Wired

Source: Tor Project, Tor Blog

We’ve all done it. We’ve all clicked on a link that we probably shouldn’t have, confused a gremlin for a Mogwai. But if you ever click the mother of all suspicious links, you deserve whatever’s coming to you.

Read more…

We’re already well aware of the damage malware can do to your machine, but apparently, guilty consciences don’t fare all that well, either. At least not for one 21-year-old man who, after getting a fake pop-up demanding a fine for the child pornography on his computer, decided to take his laptop straight to the police—and was then promptly arrested on three counts of possession of child pornography.

Read more…

Everyone has had to deal with malware of some sort at one point or another, with some being unlucky enough to come across the FBI-themed “ransomware” variety that presents itself as being a government threat of criminal charges should one refuse to pay a fine. This kind of malware has typically been the domain of Windows users, but has made its way to OS X.

The information comes from Malwarebytes, an anti-malware company. According to the rundown they’ve provided, the FBI ransomware is presenting users with a page that, at a quick glance, looks official enough: the beginning of the URL starts with fbi.gov.id, and and it harbors the real FBI logo, as well as a fake logo stating “The FBI” cyber department has targeted the user.

The trojan targets the users by using the “restore from crash” feature in the browser, which prevents the user from getting rid of the page. Attempting to close the tab results in a popup stating “YOUR BROWSER HAS BEEN LOCKED. All PC data will be detained and criminal procedures will be initiated against you if the fine will not be paid.” The “fine” in question? $300.

Aside from the threats of criminal procedures and other such nonsense, the ransomware tries to scare the user into paying the amount by specifying specific criminal activities it accuses the user of committing, such as violating copyright laws regarding music, video, and software, as well as viewing “prohibited pornographic content.”

Causing Safari to force quit won’t do any good for the user, with the ransomware page reappearing the next time the browser is fired up. Fortunately, the issue is pretty easy to get rid of by simply resetting Safari, which can be done by clicking “Safari” from the menu. All the items must be checked under the reset options.

SOURCE: Malwarebytes

FBI-themed ransomware now affecting OS X users is written by Brittany Hillen & originally posted on SlashGear.
© 2005 – 2013, SlashGear. All right reserved.