Tech--for Everyone

Tuesday, September 30, 2008

It Said I Was Infected

There is an epidemic of fake anti-malware software on the Internet-- which is collectively called "rogue anti-malware"

Marketed under hundreds of different names, such as VirusRemover 2008 and Antivirus XP 2009, this type of rogue software scares people by giving false alarms, and then tries to deceive them into paying for removal of non-existing malware.

This video (produced by the good folks at WOT*) shows what happens when a legitimate site gets infected and redirected to one of these bogus anti-malware scams.
Yes, folks, legitimate websites.

The people behind this scourge use many different ways to try to entice you to click-- realistic pop-up windows appear, offers of "free trials" arrive in e-mail, and "free scan" buttons on legit-looking 'fight malware' websites, etc..

As this video shows, the user is tricked into (scared into, really) providing their credit card # (oops.. might want to cancel that card..) to clean infections that weren't there before they clicked.
* The 'false positives' are not "cleaned" BUT, more adware and spyware is installed.
* A good percentage of my calls at Aplus Computer Aid are folks needing help with getting rid of these rogues, because they use the latest techniques to combat removal, and can be quite tough.. if not impossible.. to remove them.
* Is that anti-spyware program really spyware?
* A Website dedicated to combating this epidemic is Spyware Warrior. It has a pretty good list of known rogues, and much more detailed information.

Today's free download: WOT is a free Internet security addon for your browser. It will keep you safe from online scams, identity theft, spyware, spam, viruses and unreliable shopping sites. WOT warns you before you interact with a risky Website. It's easy and it's free.

Ratings for over 20 million websites
Downloaded 1 million times
The WOT browser addon is light and updates automatically
WOT rating icons appear beside search results in Google, Yahoo!, Wikipedia, Gmail, etc.
Settings can be customized to better protect your family
WOT Security Scorecard shows rating details and user comments

Monday, September 29, 2008

PayPal -- Your account has been violated !!!

New, scary e-mail subject line.. Same bogus scam. (This one can slip past filters)

Clicking the link will take you to a realistic-looking but completely fake PayPal login page.

I'm Really Looking For New Friends

There is a *new* phishing method being employed on chat clients such as Skype. The cyber-criminals really, really, really want you to click on the links they send, so...

They spam messages posing as young men and women who are "really just looking for new friends".
It is similar to a "make a new Buddy" request

This is just a 'sex' twist on the 'fear' social engineering ploy I warned you about here, Skype- "Windows Requires Immediate Attention!"

I am too tired of this game to backtrack this hyperlink, so I can't tell you if responding to this chat will try to install spyware on your machine, try to sell you a "rogue anti-malware program", or both..
I will simply say -- once again -- never click the link.

I got six of these this weekend.. Wow! I'm popular, all of a sudden.

Saturday, September 27, 2008

Block IFRAME For Added Protection

If you are interested in Tech, and visit Websites such as this one, it will not be very long before you read about Firefox. (In fact just this week I posted an article.) And, it won't be long before you see NoScript mentioned. Odds are, you already have.

NoScript is a small program you download and add 'into' Firefox to enhance its functionality (these small programs are known variously as "add-ons", "plug-ins", and "extensions"-- different words for the same concept.)

NoScript gets mentioned in the Tech media a lot because it is a security tool that automatically "blocks" (prevents from running) certain web page 'elements' (scripts) -- Java, Flash, JavaScript, and XSS-- from running unless you click the Option button and select "Allow", or "Temporarily allow".

Which puts you in control, and goes a long ways toward preventing "drive-by downloads", and other malicious Internet attacks and activity from occurring should you happen to visit a Website which has been "poisoned" by a hacker.
(I don't mean to depress you, but the current state of the Internet is so insecure that this can be, literally, any Website.)

By default, NoScript is a powerful tool (to read the NoScript "About" page, click here) and for many people is the primary reason they have made the switch to Firefox.
(I'll let you in on a little secret; it is one way to measure a user's "savvy".. look for a Firefox icon.)

Tip of the day: Enhance your NoScript protection by turning on the IFRAME blocker feature.
IFRAMES are another dynamic Web element that cyber-criminals are now using as an "attack vector" (aka "method") with great success. Like the scripts mentioned above, IFrame attacks can happen invisibly and automatically. Oh, the joys of Web 2.0!

1) In Firefox, click on "Tools", then "Add-ons"

2) Scroll 'till you find NoScript, and click the "Options" button. (If you have not yet installed NoScript, click the "Get Add-ons" icon in the upper-left.)

3) Click on the Plugins tab. Place a check in the "Forbid <IFRAME>" checkbox.

That's it. You're done. Now when you visit a site that uses IFrames, you will have to approve them (aka "whitelist") before they'll appear.

[Note: the scripts and tools (Web 2.0 "features") mentioned in this article are NOT in themselves bad or dangerous, and it is thanks to them that the Web is such a rich and interactive environment.. but, in the wrong hands they can and are being used with evil intent.]

Today's free link: One of the more disturbing (outright alarming, if you ask me) hacker uses of IFrame attacks is the alteration of Search Engine results (Yes, you can't truly trust Google, Yahoo!, or MSN anymore) and Internet Security blogger Bill Mullins has posted an excellent article on this subject, Fake/Redirected Search Results - Consequences for You

* Firefox users: Update to 3.0.3 today.

Friday, September 26, 2008

Fraud Prevention Tips

Follow these tips to help protect yourself from fraud.

Carry only necessary information with you. Leave your social security card and unused credits cards at home in a safe and secure location.
Make photocopies of vital information you carry regularly and store them in a secure place, such as a safety deposit box.
Do not provide your Social Security number unless absolutely necessary.
Replace paper invoices, statements and checks with electronic versions, if offered by your employer, bank, utility provider or merchant.
Shred documents containing personal or financial information before discarding. Most fraud and identity theft incidents happen as a result of mail and garbage theft.
Review your credit report at least once a year, looking for suspicious or unknown transactions. You can get a free credit report once a year from each of the three major credit bureaus at www.annualcreditreport.com. For a small fee you can obtain a copy at any time directly from:
- Equifax: 1-800-685-1111 or www.equifax.com
- Experian: 1-888-397-3742 or www.experian.com
- TransUnion: 1-800-916-8800 or www.transunion.com
Place outgoing mail in a U.S. Postal Service mailbox to reduce the chance of mail theft.
Promptly retrieve incoming mail to limit the opportunity for theft.
Know your billing and statement cycles. Contact the company’s customer service department if you stop receiving your regular bill or statement.

Today's free download: I found this list on the Wells Fargo Fraud Information Center. This site is a valuable public service that contains much useful advice, such as "How Fraudsters Operate", "How To Protect Yourself", and "Online, Mobile, Computer and Email Security Tips". It is a free education, so check it out.