Unknown to the general public, Adobe Flash uses local cookies to store various types of user sensitive information. This was the conclusion of a study supported by TRUST (Team for Research in Ubiquitous Secure Technologies) and conducted by various US universities.Most people already know that Internet cookies are used to store personal data after accessing a website, but fewer are aware that Adobe Flash has been doing the same thing as well. Even more dangerous is the fact that Flash cookies seem to resurrect after being deleted, as the study has shown in various tests. This issue poses a big problem in cases were sensitive data was sent t... [read more >>] One of the security industry's worst nightmares, a gigantic botnet of Chinese origin, might become a reality if the government in Beijing goes ahead with its plan to deploy the Green Dam Youth Escort censorship software on all new PCs sold in the country, starting next month. Security researchers warn that the content-filtering application suffers from critical design flaws, which can allow attackers to take control of computers. The Green Dam Youth Escort is part of the Chinese government's efforts to control what its citizens can access over the Internet, and serves as an extension to the already functioning nation-wide firewal... [read more >>] Malware researchers from security vendor Prevx have come across a new Mebroot version, which they claim to be, by far, the most sophisticated rootkit out in the wild today. The threat is completely memory-resident, does a very good job at avoiding detection and has already infected thousands of people. The original Mebroot variant was first detected in the wild somewhere between the end of 2007 and the beginning of 2008 and was considered to be one of the most intriguing and complex pieces of malware to come out in recent years. The rootkit hides itself in the Master Boot Record (MBR), the first sector of a partitioned data-storage device,... [read more >>] Researchers from various security firms have discovered a new mobile threat that targets Symbian phones. The worm features a signed Symbian certificate and propagates by sending malicious links via SMS to all numbers in a phone’s memory.F-Secure's Antivirus Research and Response team notes that this new threat, which it identifies as Trojan:SymbOS/Yxe.A, is rather new in nature for the S60 3rd Edition platform. “This is something we don't see very often. There are spy tools and other privacy threats directed at S60 3rd Edition phones, but malware is still mainly an issue on S60 2nd Edition phones,” the team says.... [read more >>] Researchers from the anti-virus vendor BitDefender have come across an innovative piece of malware that hides itself and functions as a Firefox extension. The malicious add-on is a trojan that monitors user activity on numerous banking sites and steals the login credentials. In order to fly under the radar, this trojan, identified by BitDefender as Trojan.PWS.ChromeInject, registers itself to the browser as “Greasemonkey.” Greasemonkey is actually the name of an advanced and legit Firefox extension that allows users to modify the appearance and rendering of visited web pages, through local JavaScript files. The malware consists... [read more >>] |