The latest varient of the Zeus trojan is perhaps the most mainstream Trojan I have come across.  You literally buy a software package that updates itself, tkaes bug reports, and has customer support.  

https://krebsonsecurity.com/2012/01/citadel-trojan-touts-trouble-ticket-system/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed%3A+KrebsOnSecurity+%28Krebs+on+Security%29

In the following excerpt, taken from a full description of Citadel’s innovations, the developers of this malware strain describe its defining feature as a social networking platform for malware users that is made available through a Web-based portal created by the malware itself.

“We have created for you a special system — call it the social network for our customers. Citadel CRM Store allows you to take part in product development in the following ways:

- Report bugs and other errors in software. All tickets are looked at by technical support you will receive a timely response to your questions. No more trying to reach the author via ICQ or Jabber.

-Each client has the right to create an unlimited number of applications within the system. Requests can contain suggestions on a new module or improvements of existing module. Such requests can be public or private.

-Each client has a right to vote on new ideas suggested by other members and offer his/her price for development of the enhancement/module. The decision is made by the developers on whether to go forward with certain enhancement or new module depending on the voting results.

-Each client has the right to comment on any application and talk to any member. Now it is going to be interesting for you to find partners and like-minded people and also to take active parts in discussions with the developers.

- You can see all stages of module development, if it is approved other members. We update the status and time to completion.

 

- You may pay a deposit, if module is approved (50%). After the deposit is paid by the members, the project starts moving forward, so that the money is paid directly to coders and there will be no laziness or inaction. Everything is clear: every stage of development is thoroughly shown.

-Easy jabber [instant message] notification of new member or developer comments, or the availability of new custom applications.

 

 kissimmee saint cloud osceola county 192 34769 34744 34772 34771 34743 34746

A nice little review of malware on the OSX platform last year:

http://www.f-secure.com/weblog/archives/00002300.html

Brod, a researcher on our Threat Research team has been tasked with tracking emerging Mac based threats. Microsoft Excel is one of the tools he uses to chart variants. From April to December 2011, there have been several dozen new Mac threats.

Well, that's nothing when compared to Windows malware — but it's definitely something when compared to the number of Mac threats seen prior to 2011.

Keep in mind that by "new", we're referring to unique variants, and not the raw number of unique binaries that we've seen. We prefer a more conservative approach when counting malware. The more generic and family based, the better.

kissimmee saint cloud osceola county 192 34769 34744 34772 34771 34743 34746

http://nakedsecurity.sophos.com/2012/01/11/turn-facebook-pink-red-or-black-dont-fall-for-online-scams/?utm_source=Naked+Security+-+Sophos+List&utm_medium=email&utm_campaign=83c11391d8-naked%252Bsecurity

So what happens if you click on one of these links? Well, typically, are you are told that you must take multiple steps to receive your differently hue of Facebook.

Firstly, you are told to share the link with your online friends. This should be the first indication that something is amiss - after all, what legitimate feature or organisation would require you to share news of it *before* you have actually experienced what - if anything - it can do for you?

 

Secondly, you are asked to leave a comment - extolling the wonderfulness of your new pink or red Facebook. Remember - at this point your Facebook is still decidedly blue. Any comment you leave will, of course, act as an endorsement and could be seen by your online friends and encourage them to also participate.

Predictably, the point of all of this sharing is to drive more traffic to the scammers' link where an online survey will pop-up. The more people who take the survey, the more commission that the scammers will earn.

 

kissimmee saint cloud osceola county 192 34769 34744 34772 34771 34743 34746

http://facecrooks.com/Internet-Safety-Privacy/hoax-alert-with-the-new-fb-timeline-on-its-way-hover-over-my-name-above-this-doesnt-work.html

 

With the new Timeline being implemented, another hoax is spreading misinformation and confusion among Facebook users. The following message has gone viral and is showing up on Newsfeeds everywhere:

“With the new ‘FB timeline’ on its way this week for EVERYONE…please do both of us a favor: Hover over my name above. In a few seconds you’ll see a box that says “Subscribed.” Hover over that, then go to “Comments and Likes” and “Games” and un-click it. That will stop my posts and yours to me from showing up on the side bar(ticker) for everyone to see, but MOST IMPORTANTLY it LIMITS HACKERS from invading our profiles. If you re-post this I will do the same for you. You’ll know I’ve acknowledged you because if you tell me that you’ve done it I’ll ‘like’ it. Thanks”

Sadly, this won’t do anything to protect you from hackers or improve your privacy. A very similar message was circulated when the Facebook ticker was introduced back in September. It caused quite a stir at the time, and it took a day or so for bloggers and social media gurus to get it all sorted out. If you are interested in reading why the message doesn’t work, then we recommend you read this post from our friends at Sophos.

To make a long and confusion story very short, the information in the message is erroneous. The best thing you can do to protect your privacy and that of your friends is to set all of your privacy and sharing settings to ‘friends only.’ Also advise your friends to do the same.

Spreading false information doesn’t really help anyone, and it can give your friends a false sense of security. Always spend a few minutes and check the facts before passing warnings along to your friends.

 

kissimmee saint cloud osceola county 192 34769 34744 34772 34771 34743 34746

Over the past few months we have noticed a very very sever increase in the number of active viruses.  There are currently a number of entry points all of which seem to be cross browser attacks mostly exploiting JavaScript.  We have also notice a very sharp increase in the number of phishing e-mails and Trojan e-mails.   User need to avoid clicking on any links sent to them in an e-mail attachment.  Even if it appears that the e-mail is from a friend or company with which you have a relationship.  Our tests show that within seconds of opening one of these the PC is infected with a number of viruses.  Again these attacks affect all browsers and seem to be able to circumvent every security package.

If your PC becomes infected it is important to bring it to us immediately.   Attempting to repair the PC on your own can cause irreversible loss of data.  In particular if you have an infection that removes desktop icons and Start Menu items DO NOT attempt to repair this on your own.

kissimmee saint cloud osceola county 192 34769 34744 34772 34771 34743 34746