Feeds

Mac security site littered with malware

Gamekeeper turned poacher

Combat fraud and increase customer satisfaction

A Mac security site has a forum full of links to actual malware which targets Apple computers.

Discussion forum posts on Macvirus.org seek to trick users into downloading the RSPlug-Gen Trojan, a type of malware capable of infecting Apple Macs. For good measure, the site also harbours posts designed to dupe prospective marks into downloading the Zlobar-Fam Windows Trojan.

Both the Trojans pose as fake codecs that are supposedly needed to view non-existent pornographic movie clips featuring troubled chanteuse Britney Spears.

The site serving the fake codecs detects the user agent in a browser in order to distinguish between Mac and Windows PCs before delivering the appropriate malware, anti-spyware firm Sunbelt Software reports.

As well as posts pointing towards malware, the forum on Macvirus.org (which describes itself as a site dedicated to "keeping an eye on Mac viruses") is also littered with actual pornographic entries.

An investigation by security researchers at Sophos suggests that the nom de plume GxxxxBxxxxxx used in the malware touting posts on Macvirus.org has also been used to publish links to malware on other "badly managed" forums - including a UK City Council, a wedding website, and numerous online gaming sites - since the start of February.

In most cases, either the attempts failed or the offending posts have since been removed. ®

SANS - Survey on application security programs

Whitepapers

Mobile application security study
Download this report to see the alarming realities regarding the sheer number of applications vulnerable to attack, as well as the most common and easily addressable vulnerability errors.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Securing web applications made simple and scalable
In this whitepaper learn how automated security testing can provide a simple and scalable way to protect your web applications.
Combat fraud and increase customer satisfaction
Based on their experience using HP ArcSight Enterprise Security Manager for IT security operations, Finansbank moved to HP ArcSight ESM for fraud management.