<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Latest Security News &#124; SecurityExtra.com &#187; Virus and Spyware</title>
	<atom:link href="http://www.securityextra.com/category/virus-and-spyware/feed" rel="self" type="application/rss+xml" />
	<link>http://www.securityextra.com</link>
	<description></description>
	<lastBuildDate>Mon, 06 Feb 2012 21:54:42 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=</generator>
		<item>
		<title>Spam in October 2011: More Countries Getting in on the Act</title>
		<link>http://www.securityextra.com/spam-in-october-2011-more-countries-getting-in-on-the-act.html</link>
		<comments>http://www.securityextra.com/spam-in-october-2011-more-countries-getting-in-on-the-act.html#comments</comments>
		<pubDate>Wed, 07 Dec 2011 19:20:53 +0000</pubDate>
		<dc:creator>secExtra</dc:creator>
				<category><![CDATA[Security News]]></category>
		<category><![CDATA[Virus and Spyware]]></category>
		<category><![CDATA[Kaspersky Lab]]></category>

		<guid isPermaLink="false">http://www.securityextra.com/?p=1240</guid>
		<description><![CDATA[Kaspersky Lab has published its review of spammer activity in October 2011. This month witnessed mass mailings exploiting high-profile events, a shift in phishing targets and spam sources were spread more evenly over more countries. October was rich in sensational events which, as usual, the spammers exploited to the full. Mass mailings were registered that referred to the death of Apple founder Steve Jobs, the majority of them containing malicious code. Spammers also reacted to another death, that of former Libyan leader Muammar Gaddafi on 20 October, with some classic ‘Nigerian’ letters. Users received emails allegedly sent by Gaddafi’s “relatives” and his “former officers”, who had allegedly inherited part of his “countless treasures”. All the letters contained offers to share some of the wealth. There were also messages with a Christmas or New Year twist adding a seasonal flavour to October’s spam. They tended to contain adverts for presents and trips during the festive season. The problems with the global economy clearly had an effect on phishing activity, with fraudsters demonstrating a preference for real money instead of virtual funds. As a result, banks and financial services became more attractive targets in October, with social networks and online games receiving [...]]]></description>
		<wfw:commentRss>http://www.securityextra.com/spam-in-october-2011-more-countries-getting-in-on-the-act.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>IT Threat Evolution in Q3 2011: From Malware in QR Codes to Targeted Attacks on Corporations</title>
		<link>http://www.securityextra.com/it-threat-evolution-in-q3-2011-from-malware-in-qr-codes-to-targeted-attacks-on-corporations.html</link>
		<comments>http://www.securityextra.com/it-threat-evolution-in-q3-2011-from-malware-in-qr-codes-to-targeted-attacks-on-corporations.html#comments</comments>
		<pubDate>Sun, 04 Dec 2011 12:37:42 +0000</pubDate>
		<dc:creator>secExtra</dc:creator>
				<category><![CDATA[Security News]]></category>
		<category><![CDATA[Virus and Spyware]]></category>
		<category><![CDATA[Kaspersky Lab]]></category>

		<guid isPermaLink="false">http://www.securityextra.com/?p=1237</guid>
		<description><![CDATA[Kaspersky Lab announces the publication of its IT Threat Evolution report for the third quarter of 2011. The company’s analysts noted a continued growth in cyber-attacks against some of the world’s biggest corporations throughout the period. When it comes to attacking smartphones, there were clear signs that cybercriminals have made Android their platform of choice. Increasingly sophisticated operations by malicious programs were also noted in Q3 along with some tried-and-tested methods: innocuous QR codes are now being used to conceal malware and computers are facing threats even before their operating systems start as cybercriminals revisit BIOS infection methods. Corporate Network Attacks The third quarter of 2011 saw corporate networks targeted by unidentified hackers as well as attacks by the hacktivist group Anonymous. Targets included the Italian cyber police, several US police units, and FBI contractors. Hackers also targeted the defense contractors Mitsubishi Heavy Industries and Vanguard Defense. These, and numerous other similar attacks, resulted in malicious users gaining access to employee and customer data, internal documentation, correspondence and classified data. In July 2011, the DigiNotar certificate authority’s servers were hacked, resulting in 531 rogue certificates being generated by cybercriminals. By using fake SSL certificates for websites, the cybercriminals could access [...]]]></description>
		<wfw:commentRss>http://www.securityextra.com/it-threat-evolution-in-q3-2011-from-malware-in-qr-codes-to-targeted-attacks-on-corporations.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Angry Birds Know Where You Live</title>
		<link>http://www.securityextra.com/angry-birds-know-where-you-live.html</link>
		<comments>http://www.securityextra.com/angry-birds-know-where-you-live.html#comments</comments>
		<pubDate>Sat, 12 Nov 2011 20:59:30 +0000</pubDate>
		<dc:creator>secExtra</dc:creator>
				<category><![CDATA[Mobile Security]]></category>
		<category><![CDATA[Security News]]></category>
		<category><![CDATA[Virus and Spyware]]></category>
		<category><![CDATA[AdaptiveMobile]]></category>
		<category><![CDATA[apps]]></category>

		<guid isPermaLink="false">http://www.securityextra.com/?p=1225</guid>
		<description><![CDATA[AdaptiveMobile, the world leader in mobile security today reveals that 75% of the public may be giving away their physical location when downloading smartphone applications. According to AdaptiveMobile’s third Global Security Insights in Mobile report, polling 1024 consumers, 69% of smartphone users are adamant that such privacy breaches are totally unacceptable, yet three quarters fail to read the terms and conditions, which include access to data such as their physical location. “Consumers are outraged that their data may not be secure but are unwilling to protect themselves,” says AdaptiveMobile VP of Handset Security, Ciaran Bradley. “It’s like getting angry at the prospect of being burgled, but announcing publically when their house is unoccupied. We are downloading more apps than ever before, but people are unaware that their location and other information can be harvested by applications. This is comparable to half of the population being unaware that they need to lock their front door. Whilst mobile operators do have a role to play to protect users, both need to step up and take responsibility.” “Consumers and the wider mobile industry need to become savvier about the information which is shared by apps,” said Mike Hawkes, Chairman of The Mobile Data [...]]]></description>
		<wfw:commentRss>http://www.securityextra.com/angry-birds-know-where-you-live.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>One in nine Internet users surfing without protection</title>
		<link>http://www.securityextra.com/one-in-nine-internet-users-surfing-without-protection.html</link>
		<comments>http://www.securityextra.com/one-in-nine-internet-users-surfing-without-protection.html#comments</comments>
		<pubDate>Thu, 10 Nov 2011 20:50:37 +0000</pubDate>
		<dc:creator>secExtra</dc:creator>
				<category><![CDATA[Security News]]></category>
		<category><![CDATA[Virus and Spyware]]></category>
		<category><![CDATA[G Data Security Labs]]></category>

		<guid isPermaLink="false">http://www.securityextra.com/?p=1223</guid>
		<description><![CDATA[The number of new malware strains is continuing to rise; G Data Security Labs counted over 1.2 million new computer malware strains in the first half of the year alone. Despite this, one in nine Internet users globally do not use a comprehensive security solution, according to the results of the international G Data Security Survey 2011. With total UK broadband take-up now at 74% (source: Ofcom, The Communications Market 2011, Q1), this means that a significant proportion of the population is surfing the Internet unprotected. Although nearly half of UK Internet users have a paid for solution installed, 47% rely on free security software, which is not in all ways as effective as paid for solutions. Globally, four out of ten users consider free virus protection solutions as equal to paid security packages in terms of performance and the level of security technology. These results are worrying, because such Internet users are easy targets for cyber criminals. For more information about user behaviour and knowledge about online threats, see the G Data Security Survey 2011. &#8220;Internet users who do not use powerful security solutions to protect themselves from malware and cyber attacks are at risk of falling victim to [...]]]></description>
		<wfw:commentRss>http://www.securityextra.com/one-in-nine-internet-users-surfing-without-protection.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>At least 34% of Android malware is stealing your data</title>
		<link>http://www.securityextra.com/at-least-34-of-android-malware-is-stealing-your-data.html</link>
		<comments>http://www.securityextra.com/at-least-34-of-android-malware-is-stealing-your-data.html#comments</comments>
		<pubDate>Tue, 08 Nov 2011 21:39:14 +0000</pubDate>
		<dc:creator>secExtra</dc:creator>
				<category><![CDATA[Mobile Security]]></category>
		<category><![CDATA[Security News]]></category>
		<category><![CDATA[Virus and Spyware]]></category>
		<category><![CDATA[Android]]></category>
		<category><![CDATA[Kaspersky Lab]]></category>
		<category><![CDATA[malware]]></category>

		<guid isPermaLink="false">http://www.securityextra.com/?p=1220</guid>
		<description><![CDATA[The second half of 2011 has been an active one for cyber criminals, who have been increasingly looking for chances to set up new scams in the mobile device environment. According to recent Kaspersky Lab internal data, the Android platform has finally established itself as the most popular for malicious mobile programs, overtaking other platforms as well as ‘generic’ Java malware. In September 2011 alone, the number of newly discovered malware for Android-based devices increased by more than 30 per cent. Running parallel to this is another clearly visible trend in mobile malware: more and more, often malicious mobile apps, are targeting users’ personal data. And in October 2011 the share of particularly Android malicious apps trying to steal personal data went up to 34 per cent. This trend is of course alarming, especially if we take into account that such malicious mobile programs sometimes show up on Android Market. An example of a malicious app distributed through the official store is Trojan-Spy.AndroidOS.Antammi.b. This program, masquerading as a simple app for downloading ringtones, appeared on Android Market only to be removed after notification from Kaspersky Lab. The “cover” program is designed for users in Russia, who use it to send [...]]]></description>
		<wfw:commentRss>http://www.securityextra.com/at-least-34-of-android-malware-is-stealing-your-data.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Duqu: The Step-Brother of Stuxnet?</title>
		<link>http://www.securityextra.com/duqu-the-step-brother-of-stuxnet.html</link>
		<comments>http://www.securityextra.com/duqu-the-step-brother-of-stuxnet.html#comments</comments>
		<pubDate>Mon, 31 Oct 2011 11:18:49 +0000</pubDate>
		<dc:creator>secExtra</dc:creator>
				<category><![CDATA[Security News]]></category>
		<category><![CDATA[Virus and Spyware]]></category>
		<category><![CDATA[Duqu]]></category>
		<category><![CDATA[Kaspersky Lab]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[Stuxnet]]></category>
		<category><![CDATA[Worm]]></category>

		<guid isPermaLink="false">http://www.securityextra.com/?p=1214</guid>
		<description><![CDATA[The spread across the Internet of several versions of the malicious program Duqu has become a main news item in the IT Security industry. In no small part, this is due to some similarities between this new worm and last year’s infamous Stuxnet worm. What is alarming in this case however is that the ultimate objective of Duqu remains unknown. Anti-malware experts at Kaspersky Lab have carried out their analysis of the new malware, the main findings of which are as follows. The Duqu worm was first detected in early September 2011, after a user in Hungary uploaded one of the components of the malicious software to the Virustotal website, which analyses infected files with anti-virus programs of different manufacturers (including Kaspersky Lab’s). However, this first-detected sample of Duqu turned out to be just one of several components that make up the whole of the worm. A little later, in a similar way, the Kaspersky Lab anti-malware experts received a sample of another module of the worm via Virustotal, and it was specifically its analysis that permitted finding a resemblance with Stuxnet. Though there are some overall similarities between the two worms Duqu and Stuxnet, there are also significant differences. [...]]]></description>
		<wfw:commentRss>http://www.securityextra.com/duqu-the-step-brother-of-stuxnet.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>FraudSense Announces Cloud-Based Real-Time Anti-Phishing Software Platform</title>
		<link>http://www.securityextra.com/fraudsense-announces-cloud-based-real-time-anti-phishing-software-platform.html</link>
		<comments>http://www.securityextra.com/fraudsense-announces-cloud-based-real-time-anti-phishing-software-platform.html#comments</comments>
		<pubDate>Sat, 15 Oct 2011 19:07:05 +0000</pubDate>
		<dc:creator>secExtra</dc:creator>
				<category><![CDATA[Computer Security]]></category>
		<category><![CDATA[Virus and Spyware]]></category>
		<category><![CDATA[FraudSense]]></category>
		<category><![CDATA[phishing]]></category>

		<guid isPermaLink="false">http://www.securityextra.com/?p=1205</guid>
		<description><![CDATA[FraudSense, provider of the cloud-based anti-phishing software platform, today announced the availability of a public demo featuring its proprietary real-time anti-phishing detection algorithms. FraudSense’s next-generation anti-phishing technology is an innovative weapon in the fight against the ever growing threat of phishing attacks as it enables FraudSense-powered applications and services to identify, target and remove forged websites the moment they become active. Fraudulent websites are routinely deployed by phishers to lure unsuspecting users to submit their credentials and are key to most online scams. According to the recent report by IID , the number of phishing attacks in Q2 2011 grew 11% over the previous quarter. FraudSense identifies and disables fraudulent websites in real-time thus minimizing and even completely eliminating financial losses and integrity damage. FraudSense provides access to its real-time anti-phishing software platform through Web API without the need for client side deployment. Using the advantages of Cloud technologies, FraudSense enables seamless integration, flexibility and scalability and can work either alone or in conjunction with other security products and services.]]></description>
		<wfw:commentRss>http://www.securityextra.com/fraudsense-announces-cloud-based-real-time-anti-phishing-software-platform.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Morto Worm: Stay Alert and Take Precautions Now</title>
		<link>http://www.securityextra.com/morto-worm-stay-alert-and-take-precautions-now.html</link>
		<comments>http://www.securityextra.com/morto-worm-stay-alert-and-take-precautions-now.html#comments</comments>
		<pubDate>Thu, 13 Oct 2011 21:27:02 +0000</pubDate>
		<dc:creator>secExtra</dc:creator>
				<category><![CDATA[Money and Business]]></category>
		<category><![CDATA[Security News]]></category>
		<category><![CDATA[Virus and Spyware]]></category>
		<category><![CDATA[Morto Worm]]></category>
		<category><![CDATA[NetFort]]></category>

		<guid isPermaLink="false">http://www.securityextra.com/?p=1200</guid>
		<description><![CDATA[NetFort a leading provider of network traffic management solutions, today warns businesses that the Morto worm is still a major threat to networks. The worm, which spreads via the Windows Remote Desktop Protocol (RDP) has the power to consume excessive network bandwidth and carry out denial of service attacks. Organisations should take action now if they are not to face serious security breaches in the future. John Brosnan, CEO of NetFort comments: “Malicious worms historically targeted systems that were running software containing some flaw in the system logic, such as a buffer overflow. The Morto worm is different in that it targets systems that are vulnerable because of weak administrator passwords such as ‘letmein’ or ‘password’.” Although the worm does not seem to have caused widespread damage, it is still rated as a ‘severe’ threat by Microsoft, and organisations should take action to protect themselves. The Morto worm also shuts down security applications running locally, which will leave the network even more vulnerable to other kinds of attack. Consequently, NetFort recommends three main steps to prevent Morto from causing harm: 1. Every account should have a password, ideally with a minimum length of 16 characters including enforced complexity rules 2. [...]]]></description>
		<wfw:commentRss>http://www.securityextra.com/morto-worm-stay-alert-and-take-precautions-now.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Kaspersky Lab, Kyrus Tech and Microsoft Disable the Hlux/Kelihos Botnet</title>
		<link>http://www.securityextra.com/kaspersky-lab-kyrus-tech-and-microsoft-disable-the-hluxkelihos-botnet.html</link>
		<comments>http://www.securityextra.com/kaspersky-lab-kyrus-tech-and-microsoft-disable-the-hluxkelihos-botnet.html#comments</comments>
		<pubDate>Thu, 06 Oct 2011 18:52:07 +0000</pubDate>
		<dc:creator>secExtra</dc:creator>
				<category><![CDATA[Computer Security]]></category>
		<category><![CDATA[Security News]]></category>
		<category><![CDATA[Virus and Spyware]]></category>
		<category><![CDATA[botnet]]></category>
		<category><![CDATA[Hlux]]></category>
		<category><![CDATA[Kaspersky Lab]]></category>
		<category><![CDATA[Kelihos]]></category>
		<category><![CDATA[Kyrus Tech]]></category>
		<category><![CDATA[microsoft]]></category>

		<guid isPermaLink="false">http://www.securityextra.com/?p=1191</guid>
		<description><![CDATA[In their ongoing assault against botnet operators and the hosting companies that allow anonymous domain registrations which facilitate them, Kaspersky Lab, Microsoft and Kyrus Tech have successfully worked together to take out the Kelihos botnet, originally named Hlux by Kaspersky Lab. Kelihos was used for delivering billions of spam messages, stealing personal data, performing DDoS attacks and many other criminal activities, via an estimated 40,000 computers. Microsoft has also taken legal action against 24 individuals in connection with the infrastructure behind the botnet, in a civil case that enabled the takedown of the domains being used to command and control the botnet. Microsoft’s legal action included declarations submitted to court, to which contributions were made by Kaspersky Lab, and also a direct declaration from Kyrus Tech, providing detailed information and evidence regarding the Kelihos botnet. Kaspersky Lab has played a pivotal role in taking down the botnet, tracking it since the beginning of 2011, when it started collaborating with Microsoft in tackling Kelihos, including sharing its live botnet tracking system with the US company. Kaspersky Lab has also ensured that the botnet cannot be controlled anymore, and continues to make sure that this is the case. Its specialists reversed-engineered the [...]]]></description>
		<wfw:commentRss>http://www.securityextra.com/kaspersky-lab-kyrus-tech-and-microsoft-disable-the-hluxkelihos-botnet.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>How to deal with the problems of SPAM</title>
		<link>http://www.securityextra.com/how-to-deal-with-the-problems-of-spam.html</link>
		<comments>http://www.securityextra.com/how-to-deal-with-the-problems-of-spam.html#comments</comments>
		<pubDate>Sat, 01 Oct 2011 18:52:00 +0000</pubDate>
		<dc:creator>secExtra</dc:creator>
				<category><![CDATA[Computer Security]]></category>
		<category><![CDATA[Security News]]></category>
		<category><![CDATA[Virus and Spyware]]></category>
		<category><![CDATA[The Internet Group]]></category>

		<guid isPermaLink="false">http://www.securityextra.com/?p=1186</guid>
		<description><![CDATA[Over the past five years, the amount of spam being delivered to email servers around the world has increased dramatically; currently over 90 percent of emails delivered worldwide are spam emails. This means that whilst you may be able to effectively filter emails in house, it will require increasing resources, to manage and maintain. Consider this; your enterprise receives 20,000 emails per day. That’s 18,000 emails that must be analysed and inspected by your anti-spam software each day; then another system must scan each email and its attachments to ensure that they do not contain malicious software. At this point, an organisation should start to think about implementing a gateway type anti-spam server on separate hardware to deal with this burden. Whilst there is nothing wrong with this type of solution, it has its limitations. First, it’s another piece of hardware to run, cool and keep secure – the server must be licensed and up to date at all times. It also must be monitored and kept under warranty. All of these costs can be avoided by moving to services that filter and deliver email in the cloud. Moving these services into the cloud can also have other benefits. In [...]]]></description>
		<wfw:commentRss>http://www.securityextra.com/how-to-deal-with-the-problems-of-spam.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

