It’s an illuminating line-up, bringing home to computer users the high levels of risk and danger that they face in their everyday dealings with computers.

Let’s take one day in particular, when McAfee drew our attention to three new Trojan viruses. On the 26th October, 2006, McAfee added to their list of viruses to look out for the following three names:

• Generic Dropper!bei!1938a8cf8776;
• Generic.dx!gcq!4894f6dd2862;
• Generic PWS.y!bce!eac18f0df91a.

All are trojans and before we take a quick look at the first one in the list, the Generic Dropper!bei!1938a8cf8776, lets remind ourselves what a trojan is.

Named for very apt reasons after the Trojan Horse in Greek mythology, a trojan is malware which appears to have a desirable, or necessary function, but in reality allows unauthorised access to a user’s computer. In other words, just like the Trojan Horse which was presented as a gift, only to conceal soldiers that gained unwanted access.

What distinguishes them from viruses and worms, is that they are not self-replicating. What’s more, to fulfil their evil deeds, they require a degree of interaction from the hacker, or cybercriminal. And trojans need not be faithful to their creators; hackers can, by using a port scanner to scan network computers, be on the hunt for an available trojan which will give them access to a vulnerable machine.

Because they don’t self-replicate, they have to be spread manually by unwitting computer users, or hackers. They are most commonly activated executing programmes distributed by e-mail, malicious or hacked Web pages, Internet Relay Chat (IRC), peer-to-peer networks, etc.

Infection symptoms of the detection are the files, registry and network communication detailed in the McAfee virus characterisation section. Here McAfee provides bares the Generic Dropper!bei!1938a8cf8776 to the public, including file name (in this case virus.exe), its length (81,920 bytes) and its CRC (2581E782).

It’s known by other computer security companies as:

• Avast - Win32:Malware-gen;
• Avira - TR/Drop.Agent.AP;
• Dr.Web - BackDoor.IRC.Sdbot.4889;
• Eset - a variant of Win32/Injector.AEH;
• FortiNet - W32/VB.AD!tr;
• Kaspersky - Trojan-Dropper.Win32.VB.mwb;
• Sophos - Mal/VB-AD;
• Symantec - W32.SillyFDC.

Guest Article by Neil Camp

Related posts:

1. Virus Detection and Prevention Top Tips
2. Avoiding Spam Top Tips
3. Popular Viruses and McAfee Removal Tools

Take a look at the list below and if your PC is infected with one of these, then McAfee can help:

• Sasser (virus name) – McAfee Avert Stinger (removal tool);
• Bagle – McAfee Avert Stinger;
• Zafi – McAfee Avert Stinger;
• Mydoom – McAfee Avert Stinger;
• Lovsan/Blaster – McAfee Avert Stinger;
• Klez – Klez Removal Tool;
• Bugbear – Bugbear Removal Tool.

Let’s take a look at one of the best known of the suspects above: Sasser. This can be removed using the McAfee Avert Stinger tool. With the Sasser, the indication that you have been infected comes with the prescence of the file avserve3.exe and registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "avserve3.exe" = C:\WINDOWS\avserve3.exe.

The Sasser, which is known in the trade as a worm, spreads by exploiting a Microsoft software vulnerability and it spreads from machine to machine with no user intervention needed.

It employs a propagation mechanism which has been used many times before. Basically, Sasser spends its time scanning random IP addresses in the hope that it will spot an exploitable system. When it comes across such a system, the worm exploits it by overflowing a buffer in LSASS.EXE. And it creates a remote shell on TCP, port 9996.

Once that’s been achieved, it creates an FTP script which is named cmd.ftp on the remote host and executes it. Then the FTP.EXE application, via the FTP script, is used to retrieve the worm back to the remote host, from the infected machine. After that particular process, the worm is then executed. What happens then is that the FTP script instructs the victim computer to download and execute the worm from the infected host.

Sasser come sunder many guises, including Sasser.G, W32. Sasser and Worm.Win32Sasser.g. (this often depends on which anti-virus programme has labelled a particular virus).

The McAfee Avert Stinger is a stand-alone tool which is used when a particular virus needs to be detected and then removed. McAfee make it clear that it is not to be used instead of anti-virus protection software, but as a specific tool when dealing with a particular type of virus attack.

Guest Article by Neil Camp

Related posts:

1. McAfee Supports Windows 7
2. Virus Threat Activity

In a situation which will undoubtedly play out across the whole business scene, cutting back on IT security is a false economy, and say McAfee, is often justified by the companies thinking that the cybercriminal is only interested in larger companies. This say McAfee is the Security Paradox and is the title of a comprehensive research report on mid-sized companies and their approach to IT security.

The McAfee report shows that half of mid-size companies surveyed globally have seen more security incidents in the past year. Indeed, one mid-sized company alone lost $43,000 on average to security incidents. Yet the majority of these same companies are nevertheless reporting spending freezes on their IT security budgets.

But mid-sized companies mistakenly believe that cybercriminals will overlook them for bigger targets. The McAfee report showed that 43% of mid-sized companies questioned believed that companies with 501+ employees are most at risk for a security attack.

Whereas, in reality, on average companies with less than 500 employees actually suffer from more attacks.

Darrell Rodenbaugh, senior vice president of global midmarket for McAfee, said:
“An organization’s level of worry and awareness about increasing threats has not overcome the downward pressure on budgets and resources. But this creates a vicious cycle of breach and repair that costs far more than prevention. Our research shows that organizations that put more effort on preventing attacks can end up spending less than a third as much as those that allow themselves to be at risk.”

The McAfee report goes on to say that 65% of midi-size organisations surveyed worldwide spend less than four hours a week on IT security proactively, but nearly the same amount (67%) spend more than a day recovering from IT security attacks. The report also highlighted the varying approaches in countries across the world. Interestingly, the countries where companies invested the least time on prevention, Canada and France amongst them, suffered the greatest financial losses and downtime from cybercrime. And they required a week, or longer to recover from their most recent cyber-attack.

Other facts that the report also revealed include:

• in 2008, US mid-sized companies spent a total of $17.2 billion fixing IT security incidents;
• last year, on average, a single US mid-sized company spent more than $75,000 a year on IT security incidents;
• the mid-sized company has seen, on average, a 322% increase from 2008 to 2009 of average cyber-attacks;
• over half (56%) of mid-sized companies globally have seen more security incidents this year than last, and 29% suffered a security breach in the last year;
• in the past there years, of the mid-sized companies that have had security breaches, those with 101 to 500 people have had about 24 incidents compared to only 15 incidents for organizations with 501 to 1,000 employees.

Guest Article by Neil Camp

Related posts:

1. McAfee and Verizon Get Together
2. Intel joins McAfee Initiative to Fight Cybercrime
3. McAfee Launches New Unlimited Capacity Online Backup Service

And it also makes a note of the top ten subject lines that spammers use and the current most popular span categories.

Top ten spam subject lines first. But don’t just remember these and hope you’ve got a way out of the problem. There are literally millions of variations that can be used and the top spam lines are usually quickly picked up by the spam filters, so many not stay around for long. Here’s the list:

1. You’ve received a greeting ecard
2. Virtualization Webinar
3. Masters degree with no efforts.
4. Career Advancement Opportunities – July of 2009
5. Webinar: Think Big: Create Efficiencies With an Enterprise-Wide
6. Non-profit job from home
7. Administrative Certification: Increase Productivity with Superior Organizational Skills
8. Administrative Certification: Gain Credibility by Maximizing Your Productivity
9. you can wear tag heuer watch now
10. you can wear cartier watch now.

From the above, its easier to spot the most cunning of spam subject lines. The first, “…you’ve received a greeting ecard…” is pretty low, but you can see why its used so frequently. Most people’s innate reaction would be to open it up and see which kind person has sent them an ecard. But if you do, felicitations from a friend, or loved one could be the last thing you get.

The thinking behind “…virtualization webinar…” is a little harder to figure out, but maybe that’s the point. The third should deceive no-one; a masters Degree usually requires a lot of effort and there’s no such thing as a free lunch, or say they say. And so they can; their invidious aim is simple, to trap people into paying them attention and potentially giving away the family silver. Always be alert for such attacks.

And when it comes to current spam categories, McAfee has revealed that the recently received spam falls into the following areas:

• Russian spam (42%)
• products and services (26%)
• adverts (20%)
• IT related (4%0
• stock (4%)
• financial (2%)
• news (1%)
• adult services (1%).

Guest Article by Neil Camp

Related posts:

1. Avoiding Spam Top Tips
2. Virus Detection and Prevention Top Tips

Spam is a waste of everyone’s time, clogs up the ether with its pointlessness and is it a major carrier of computer viruses. It serves no purpose whatsoever and if the world were rid of it, then 80% of the email traffic would drop overnight.

So what can you do to avoid spam? Here’s some top tips.

Top tip is do not spread your email around. Never post your e-mail address in an unobfuscated form on the Internet. But if you have to post your internet address, make sure you obfuscate it in such a way that it cannot be harvested. Better still, create a small graphic image that contains your email address, as the harvesters cannot read this. Bear in mind that spammers play the numbers game. They trawl for millions of addresses out there and guess others with specially created computer programmes. Don’t make their life easy.

Another top tip is checking to see how visible your email address is. Type it into a search engine and see if it has been posted into in any newsgroups, or discussions forum, and see if you can remove it, as this might be a good way to cut spam down.

Also consider using a number of email addresses, say one for friends and family, and one for business. This way you can greatly reduce your chances of spam. You could easily create an address that you only use for newsgroups and such places, and then, if it become burdened with spam, drop it altogether. Don’t be afraid of changing your email address as a way of avoiding spam.

Another good way of foxing the spammers is having a complicated email address made up of numbers, as well as letters, and a part of it made up of random sequences. This works against dictionary attackers.

When it come to completing web forms, always have a look at the website’s privacy policy, as avoid giving your email address, or indeed, any other personal details, to a site which admits that they sell them on to third parties. If you can, check the box which opts you out of third party mailings.

A very important rule this – never respond to spam, ever. Because a spammer lives for a reply and even if you innocently send a request saying you’d like to be removed from the list, this confirms to them that the address is valid, you have seen the email and indeed, you have replied. This means that your email address is basically in-play. Your name could then be added to a list of working email addresses which could be very valuable to the spammer and sold between them.

Along the same lines as the last point, never, ever buy anything from a spammer, or goods which have been brought to your attention via spams. Once sending spam become unprofitable, then it will die.

Get into the habit of as soon as you see the spam message, delete it. Do not open it. By using graphics within the spam email, spammers are able to track who received it and who opened. This is why many email providers give you the option of opening the graphic image within the email – resist that temptation. Simply bin it.

Do not use links within emails (always go to a site via your web browser, or your own bookmarks), and never reply to emails, purporting to be from a site you know, asking for financial information, or personal details. Guard such data vigorously.

Above all else, ensure that your anti-virus software is up to date and that your firewall (designed to stop people not only breaking in, but taking goods out), is also doing its job.

Guest Article by Neil Camp

Related posts:

1. Top Spam
2. Virus Detection and Prevention Top Tips
3. Popular Viruses and McAfee Removal Tools

Top of the tip list is beware of what you open. In other words, do not open any files that are attached to email, instant messages, or offered as downloads, unless you are completely confident about their origin.

Even if a file is from a friend, or from someone you know, still be careful as people can have their mailbox hijacked and emails sent from their computer without their knowledge. This means that an email might find yourself in your inbox from what you think is a trustworthy source, only for you to find out that it is far from trusty. Best thing to do is just check that your contact has indeed sent you an email with a file.

Keep an eye open for suspicious subject lines in emails. This is usually a dead giveaway that something is wrong. If it looks odd, it usually foretells trouble and its best to delete it without opening it at all.

Chain emails might seem charming to some, but they effectively are spam and go towards clogging up the ether whilst serving no real purpose. Delete and avoid expanding the chain. Bear in mind that over 80% of emails sent around the world are spam.

When it comes to downloading files off the internet, be very careful indeed. There are many free things on the internet and not all of these are good. Many screensavers, games, or seemingly useful bits of code can harbour nasty viruses that end up attacking your computer. So ensure you know where that file is coming from. Also watch out for innocent looking media playing devices which a site might say is necessary when downloading and watching film clips. These are often bits of code which do a lot more than let you watch some film. They often contain viruses that open up your computer for the cybercriminals to march around unhindered.

Okay, and this might seem obvious, but to many it’s not: get anti-virus software on your computer. Do not send, or receive emails, and do not surf the internet without very good protection from a credible anti-virus software programme. And be wary of any box that suddenly flashes up and warns you that it has detected a virus and you must download a programme to remove it immediately. These are usually tricks to get you to download malware – code that sits on your computer and opens you up to attack from cybercriminals.

McAfee anti-virus programmes, like all such good applications, continuously updates from the internet, meaning that you are protected from new viruses and sudden attacks.

Back-up your files on at least a weekly basis, if not a daily basis. Regular and proper back-up means that should you be unfortunate to catch a major virus, then you won’t lose all your files and work, as well as have an effectively useless computer.

Also, check with the developer of your operating system for any updates, or patches as they are commonly known. These are sent out to close holes – known as bugs – in software code which cybercriminals use to find a way into a system. Most updates or patches are automatic, but do ensure your system is completely up-to-date.

Above all, if you think it doesn’t smell right, then always err on the side of caution. Be suspicious and it might just save you a lot of time and money.

Guest Article by Neil Camp

Related posts:

1. Avoiding Spam Top Tips
2. Top Spam
3. Virus Threat Activity

As the newest member of The McAfee Initiative to Fight Cybercrime Advisory Council, Intel is said by the computer security company to be well-versed in the areas of cybercrime and defense, and is able to provide best practices from a real-world perspective.

McAfee created The McAfee Initiative to Fight Cybercrime Advisory Council to ensure its initiatives are sustainable by harnessing the insights and energy of leaders who have already made a difference in this critical area. Former White House Cybersecurity Adviser Howard A. Schmidt chairs the global group.

Representing Intel on the council is Steve Grobman, director of cybersecurity technology and initiatives at Intel Corporation. He leads a team responsible for all aspects of security related to Intel products which includes the development of platform technologies that address current and future security challenges, as well as security assurance and policy.

The McAfee Initiative to Fight Cybercrime was first announced in October 2008 as a wide ranging initiative aimed at closing critical gaps in the fight against cybercrime. It is anchored by a multi-point plan that includes calls for action from all the areas that are so badly affected by cybercrime, including: law enforcement, academia, service providers, government, the security industry and society at large.

The priority of The McAfee Initiative to Fight Cybercrime is to deliver more effective investigations and prosecutions of cybercrime.

More information is available at: http://www.mcafee.com/fightcybercrime.

Based in Santa Clara, California, McAfee Inc is the world’s largest dedicated security technology company.

McAfee strongly believes in its commitment to relentlessly tackle the world’s toughest security challenges and delivers proactive and proven solutions, and services, that help secure systems and networks around the world.

This allows users to safely connect to the Internet, browse and shop the web more securely. McAfee is backed by an award-winning research team which creates innovative products that advises businesses, the public sector, service providers and home users. It sets out to enable them all to prove compliance with regulations, protect data, prevent disruptions, identify vulnerabilities, and continuously monitor and improve their security.

Guest Article by Neil Camp

Related posts:

1. McAfee Awards More Cybercrime Grants
2. McAfee Warns Companies Against IT Security Cuts
3. McAfee To Launch Online Support Programme

Verizon Business, a unit of Verizon Communications, is one of the world’s largest providers of IT, communications, security and network solutions.

The alliance means that Verizon Business will offer McAfee’s entire line of enterprise security products and services. In return, McAfee will tap Verizon Business’ data center outsourcing and expert consulting and managed services capabilities. Working together on future projects, the two companies will jointly develop a suite of next-generation, cloud-based managed security services.

The basis of the agreement is to offer enhanced value to enterprise clients by providing comprehensive world-class security solutions and services, including new cloud-based offerings

Kerry Bailey, senior vice president of Verizon Business Global Solutions, said:
“This strategic agreement with McAfee enables us to drive even more complete and integrated IT solutions to enterprises across the world. Verizon Business will be able to expand and more fully touch every facet of enterprise security so that enterprises can confidently do business in this digital age. Our newly expanded and next-generation cloud capabilities will enable organizations to better use security as a strategic tool and business enabler.”

David Scholtz, senior vice president of worldwide strategic alliances at McAfee, said:
“This agreement underscores the importance of delivering comprehensive security solutions to meet the needs of business and government clients. The complexities of today’s threats and turbulent economic times call for agreements of this kind; where products from multiple providers are combined to help improve our customers’ investments and control their operational costs.”

The agreement between the two companies has several key components, including:

• Verizon Business will offer full complement of McAfee enterprise security solutions to its client base via Verizon’s customer premises equipment (CPE) catalog. The new security offerings broaden the choice of world-class security solutions available to the Verizon Business customer base. This will also help McAfee significantly expand its global distribution channel;
• from the autumn, Verizon Business will offer McAfee’s PCI (Payment Card Industry) compliance services to banks and other organizations that support merchants that handle fewer than 20,000 e-commerce transactions, or up to one million credit card transactions each per year;
• McAfee customers will have access to the Verizon Business network of 1,200 security professionals. This teams designs, implements and integrates holistic security solutions worldwide;
• McAfee and Verizon Business will together offer a comprehensive portfolio of managed security services (MSS) to enterprises;
• Verizon Business will provide comprehensive data center outsourcing services to McAfee and help it consolidate its data centers. This will enable McAfee to further improve the 24/7 management of its Web hosting operations and better position the company to deliver cloud-based solutions;
• the two companies will jointly develop and market a suite of next-generation, cloud-based managed security solutions.

Guest Article by Neil Camp

Related posts:

1. McAfee Warns Companies Against IT Security Cuts
2. McAfee Supports Windows 7
3. McAfee Wins Awards

Although there are thousands of variations out there, phishing scams are all based on one idea: the bogus email, or instant message, which requests personal information.

Cybercriminals use phishing attacks to trawl for people’s IDs, username and passwords, so that they can copy an identity and breach someone’s bank, or shopping account.

The bogus email plays upon people’s natural inclination to answer an email which they believe at first sight comes from their bank, or online merchant. And phishing emails are becoming ever more sophisticated, becoming very good copies of the actual organisations they are pretending to be.

So take it from McAfee, there are a number of things you can do to avoid being trapped by such attacks.

Firstly, and most importantly, do not respond to emails – even if they appear to be from your bank, or online merchant – that ask you for personal information. In fact, never, ever send back your personal details in an email. Remember that banks and online merchants will never ask for such information via an email. They have it anyway and also, they are only too well aware of the trouble that phishing attacks create.

Secondly, never follow links in an email which appear to link you with your banking, or online merchants sites. Never follow these links, as they could take you onto a very good copy of an existing institution, but actually just be there to take note of your personal details, usernames and passwords.

Thirdly, when you want to visit your bank site, or online merchant, be sure to type the address that you know is correct into your web browser. This ensures that you go to the legimate site and not a bogus site, and you can conduct legimate business. You can also go in of course via a bookmark, or shortcut that you have created yourself.

Fourthly, don’t forget, that if you are ever unsure about an email, you can always telephone your bank, or online merchant, and check with them to see what they might have sent you.

McAfee provide constant updates on the top phishing scams and the top ten are currently (words in the subject line):

1. security alert!
2. account notification!
3. account notification
4. please confirm your data!
5. Chase Bank: online banking notification
6. Chase Bank: necessary to be read!
7. Chase Bank: important notice
8. Chase Bank: important security notice
9. Chase Bank: account secure confirmation
10. Chase Bank customer service: security alert.

And the top brands currently being exploited by phishing attacks are:

1. Amazon (72%)
2. Commonwealth Bank (14%)
3. eBay (9%).

Guest Article by Neil Camp

No related posts.

The beneficiaries this time are project proposals from Common Sense Media, a San Francisco-based non-profit organisation, and the Digital Security council of India. Last year, grants focusing on law enforcement training and coordination were awarded to the Council of Europe and the National District Attorneys Association.

The Cybercrime Grants programme is focused on fostering innovation and being able to give a measurable impact in key areas of educating, researching and introducing initiatives about cybersecurity issues.

Dave DeWalt, president and chief executive office of McAfee, said:
“As cybercrime continues to accelerate, we must find new ways to educate people and businesses about protecting their digital assets. We look forward to working with Common Sense Media and the Data Security Council of India, as we educate computer users around the world on avoiding the reach of increasingly sophisticated and ruthless cybercriminals.”

Based in San Francisco, Common Sense Media is a non-profit organisation which is focused on improving the media and technology lives of children and families through its up-to-date online information and education programs on digital literacy, digital citizenship, and cyber-safety.

It is there to serve over 4,000 schools and 600,000 households and draws in nearly ten million unique users. It boasts more than one million students with its educational resources and materials on digital media and technology.

The cybercrime grant from McAfee will be used by Common Sense Media to fund key elements of its cybersecurity and cyber-safety curriculum for middle schools.

James Steyer, CEO of Common Sense Media, said:
“We are very pleased to be working with McAfee to educate more young people and families about cyber threats and cybercrime, and about using computers and digital media in smart, safe and secure ways.”

Another non-profit organisation, the New Delhi-based Data Security Council of India focusses on developing best practices and training in India on data security and data privacy. It reaches out, via its Cybersecurity Awareness Initiatives, to a broad audience on a wide range of cybersecurity and cyber-safety issues. Money from the grant will help an education project funded through the McAfee Cybercrime Grant programme will reach computer users in Delhi, Mumbai, Chandigarh, Pune and Bangalore.

Dr. Kamlesh Bajaj, CEO of the Data Security Council of India, said:
“Education and awareness is the most important step in fighting cybercrime. Even as we create best security practices for industry, it is imperative for us to educate the general population in schools and colleges and with parents about Cyber Safety, Cyber Security, and Data Privacy. I’m sure DSCI together with McAfee can create useful training, and take it to a wider audience in major cities in India. I look forward to close cooperation with McAfee, and I believe this is just the beginning of a long partnership.”

Guest Article by Neil Camp

Related posts:

1. Intel joins McAfee Initiative to Fight Cybercrime
2. McAfee Wins Awards
3. McAfee Warns Companies Against IT Security Cuts