Cyber Security is Evil! F-Secure is Evil!

*still waiting for my advisory to be approved.. will post some links soon*

Hahaha.. Dont get me wrong.. I didn’t mean the companies are bad.. Its the rogue security software 😉

Rogue security software is a form of computer malware that deceives or misleads users into paying for the fake or simulated removal of malware. Rogue security software, in recent years, has become a growing and serious security threat in desktop computing

[source: wikipedia]

Lets see some screeny:

Yo! Cyber Security in da haus!

Google search lead to rogueware

Captain Obvious to the rescue! I’m in Linux and don’t have Windows installed 😉

Moral of the story:

• do not simply trust free stuffs
• keep your AV up to date
• it is worth it to have antispyware installed (Malwarebyte’s Anti-Malware is not bad)
• find anything suspicious? keep a copy of it.. share the sample with me 😛

*still waiting for my advisory to be approved.. will post some links soon*

New SSL Spam Trying to Spread Malware

Here is my short writeup on the latest ZBot malware..

Nothing much with the malware, but nice trick on the way of spreading it

Link: Honeynet Blog

Microsoft Security Essentials is Finally Released

Microsoft Security Essentials provides real-time protection for your home PC that guards against viruses, spyware, and other malicious software.

Microsoft Security Essentials is a free* download from Microsoft that is simple to install, easy to use, and always kept up to date so you can be assured your PC is protected by the latest technology. It’s easy to tell if your PC is secure — when you’re green, you’re good. It’s that simple.

Microsoft Security Essentials runs quietly and efficiently in the background so that you are free to use your Windows-based PC the way you want—without interruptions or long computer wait times.

(Microsoft, 2009)

To me, it is a “better have than not” security product.. I thing that attract me is the browser (only IE) exploitation shield.

Download and install now

For more info, click HERE

*Update*

“MS Security Essentials test shows 98% detection rate for 545k malware samples” (ZDNet)

New Year – 2009

** full update will be posted later **

I’ve spent the whole new year night to prepare :-

• Image or platform (aka sandbox) for malware analysis purposes.
• Automate migration tool from CMS Made Simple to WordPress.

But here are the results :-

• I gave my Microsoft Window$ XP’s CD to my brother and the backup (ISO) that I have with me is CORRUPTED. I’ve tried with VMWare Server 2 and 1.0.8 and I thought the problem was due to Virtual Machine Disk Format (VMDK) incompatibility, but after using VirtualBox, then only I know that the problem actually came from the ISO file. Haaaihh… What a waste…
• The automate migration tool from CMS Made Simple to WordPress is finally finished and surprisingly it is 98.33% compatible BUT suddenly I’ve found that WordPress doesn’t have ‘content inheritance’ functionality like CMS Made Simple did… So I have stick with CMS Made Simple… Again… Haaaihh… What a waste…