 Your new post is loading...
|
Scooped by
Gust MEES
|
F-Secure Security Labs brings you the latest online security news from around the world. Ensure that you are up-to-date with the latest online threats to guarantee your online wellbeing. We have created a free tool that automates the detection and removal of the widespread Flashback Mac OS X malware.
|
Scooped by
Gust MEES
|
La firme de Cupertino a publié une page spéciale Flashback sur son site de support et indique préparer son propre patch. Apple aurait aussi contacté des FAI et des bureaux d'enregistrements pour tenter d'éradiquer le botnet. Apple sort enfin de son silence. Quelques jours après avoir poussé, sans faire référence à Flashback, une mise à jour de sécurité pour Java sur Mac (voir notre article sur le botnet Flashback), Apple hausse un peu le ton. Et publie sur son site de support une page spécifique au fameux malware qui, d’après Dr.Web, infecterait désormais quelque 655 700 machines. agrandir la photo ===> Une drôle de page tout de même qui n’explique pas comment faire pour savoir si l’on a été effectivement infecté par Flashback, ni comment supprimer le virus de sa machine ! <===
|
Scooped by
Gust MEES
|
Windows has been the target of malware for decades. This has resulted in a more hardened system and a better user awareness. On the other hand, OS X has not really needed to go through all the troubles of crime fighting until recently. ===> Now, with its growing market share and lower user awareness, it is clear that OS X is becoming more and more attractive to malware authors. <===
|
Scooped by
Gust MEES
|
OSX.Flashback initially arrived on the scene in late 2011. It has come a long way from its humble beginnings as a social-engineering scam trying to pass off as a fake Flash update using digital certificates purporting to come from Apple.
|
Scooped by
Gust MEES
|
In response to the recent discovery of the Flashfake botnet, Kaspersky Lab has announced the availability of its free Flashfake Removal Tool.
|
Scooped by
Gust MEES
|
Apple said Tuesday it's developing a solution to combat the Flashback malware that experts say has infected around 600,000 Mac computers around the world.
|
Scooped by
Gust MEES
|
Kaspersky Lab -- which is offering the free tool -- counted up to 670,000 infected OS X machines in the botnet last week; today has seen just 227,493 so far, up from 208,301 yesterday. Over the weekend, Kaspersky saw a major dip in the number of active infected Macs, from a head count on Friday, April 6, of 650,748, to 248,723 on Saturday, and then 237,103 on Sunday.
|
Scooped by
Gust MEES
|
|
Scooped by
Gust MEES
|
"Apple développe des logiciels qui détecteront et supprimeront le virus Flashback", a indiqué l'entreprise dans un message diffusé par un blog sur son site internet. Les pirates informatiques trompent les utilisateurs de Mac en les incitant à télécharger une fausse nouvelle version du logiciel de visionnage de vidéos Adobe Flash, qui est en fait un cheval de Troie.
|
Scooped by
Gust MEES
|
We all need to use anti-virus, but above all we need to use our common sense... The Flashback Trojan is a good example of how Mac users are now very much targets of cybercriminal gangs - no longer are these people a ragtag bunch of hackers simply looking to make a name for themselves but well-organised, profit-motivated gangsters - as was the MacDefender (and numerous variants) scareware campaign from last year. Don't be fooled into thinking that Apple necessarily has your back either - it seriously dropped the ball when it came to the Flashback threat, not issuing an update for Java for weeks after Oracle had made it clear that a vulnerability existed and had fixed the threat for Windows.
|
Scooped by
Gust MEES
|
Plus d’un demi-million de Mac auraient été infectés, selon Dr. Web, par un logiciel malveillant exploitant une faille Java. Celui-ci, surnommé Flashback, marque-t-il la fin d’une époque ? Force est de constater qu’Apple n’a pas manqué de travailler à répandre lui-même cette image. Début 2009, l’entreprise présentait même son système d’exploitation comme «un havre de paix.» Mais cette présentation était à tout le moins discutable. De fait, la division sécurité d’IBM indiquait à la même période que Mac OS X et Mac OS X Server comptaient chacun pour 14,3 % des vulnérabilités dévoilées en 2008. Pour un environnement hyper sécurisé, on a vu mieux. Par la suite, les démonstrations d’exploits sur Mac OS X n’ont pas manqué. De quoi donner de l’eau au moulin d’Eric Filiol, spécialiste de la cryptologie, qui rappelait alors que ===> «tous les environnements capables d’exécution [de code] sont potentiellement vulnérables.» <=== Et l’on ne saurait contredire cette affirmation aussi prudente que réaliste.
|
Scooped by
Gust MEES
|
After intercepting one of the domain names used by the Flashback/Flashfake Mac Trojan and setting up a special sinkhole server last Friday, we managed to gather stats on the scale and geographic distribution of the related botnet.
|
Scooped by
Gust MEES
|
At the moment, there are more than 100 million Mac OS X users around the world. The number has grown switfly during the past years we expect this growth to continue.
|
|
Scooped by
Gust MEES
|
Fünf Jahre alte Samba-Lücke bedroht Mac OS X und Linux Ein Angreifer kann über die Schwachstelle Schadcode einschleusen und ausführen. Die Open-Source-Software, die anderen Betriebssystemen die Nutzung von freigegebenen Windows-Dateien und -Druckern ermöglicht, ist in vielen Linux-Distributionen und ===> Apples Mac OS X Server <=== enthalten. Problem: Betroffene Netzwerkdrucker und -speicher lassen sich möglicherweise aktualisieren.
|
Scooped by
Gust MEES
|
The new free tool adds to the growing community effort to help affected Mac users remove the malware from their systems. Read this blog post by Topher Kessler on MacFixIt. This new tool by F-Secure is another advancement by the Mac community against this threat that accompanies not only manual instructions and help from community members, but also swiftly updated definitions for Sophos, ClamXav, VirusBarrier, and other malware scanners for detecting the malware. On Apple's end, even though the extent of this infection stemmed largely from Apple's delay in issuing a patch for known Java vulnerabilities, the company finally released the patch and has further announced its own Flashback removal tool is in the works. It's hope that these, and the continuing efforts by the Apple community, will reduce the prevalence of this infection to a minimum.
|
Scooped by
Gust MEES
|
Nobody is safe, but you can stop the spread before it overtakes your precious. Mac fans recently got a little taste of what it's like to be a Windows user. That's right, a virus targeting Mac OS X is making the rounds. The latest stats from security companies tracking the virus put the number of infected Macs at well over half a million. That's nowhere near the level of some Windows viruses, but it's widespread enough to be a concern for Mac users. The virus is known as Flashback and it can hijack your Mac without so much as an administrative password. It manages to pull off its attack by exploiting a vulnerability in Java. Oracle, which makes Java, quickly issued a fix for the problem back in February. Unfortunately, because Apple ships its own version of Java (and therefore must provide its own patches), Mac users had to wait on Apple's fix, which didn't arrive until last week. ===> The slow fix from Apple gave Flashback time to propagate and led to well over half a million infected machines — one of which could be yours. <===
|
Scooped by
Gust MEES
|
A look at what the Mac Flashback Trojan could do to infected computers. So what is the worst it could do? Although the Trojan is now only conducting click fraud scam by hijacking people’s search engine results inside their web browsers, it has the potential to do greater damage, such as stealing banking or login credential. If the botnet remains connected to computers, cybercriminals could send new malware to their systems that cause bigger problems.
|
Scooped by
Gust MEES
|
Nach der Enttarnung des Flashback-Trojaners hat Apple nun die Sicherheitslücke geschlossen und arbeitet mit Hochdruck an einem Entfernungs-Tool.
|
Scooped by
Gust MEES
|
Apple is developing a tool to "detect and remove" a Trojan that is believed to have infected around 650,000 Macintosh computers. It said it is working with internet service providers (ISPs) to disrupt the command network being used by hackers to exploit the malware. Trojans are infections that can expose computers to control by hackers. It is Apple's first statement on the threat. It issued patches to prevent the malware's installation last week. The two security updates were released ===> eight weeks after Java's developer Oracle issued a fix for other computer systems. <===
|
Scooped by
Gust MEES
|
Apple a indiqué discrètement qu’il mettra bientôt à la disposition des utilisateurs Mac un outil de détection ...
|
Scooped by
Gust MEES
|
Dr. Web's chief executive Boris Sharov, who says Apple never responded when the firm shared its findings on the Flashback botnet. “They told the registrar this [domain] is involved in a malicious scheme. Which would be true if we weren’t the ones controlling it and not doing any harm to users,” says Sharov. “This seems to mean that Apple is not considering our work as a help. It’s just annoying them.”
|
Scooped by
Gust MEES
|
In KB article HT5244, Apple has - apparently for the very first time! - talked openly about a security problem before it has all its threat reponse ducks in a row. This is good news.
|
Scooped by
Gust MEES
|
Ein Entwickler hat ein kleines Tool für Mac-Rechner entwickelt, mit dem schnell überprüft werden kann, ob der Rechner vom gefährlichen Flashback-Trojaner befallen ist. Auch Kaspersky hat ein solches Tool mittlerweile veröffentlicht.
|
Scooped by
Gust MEES
|
Die Anzahl der mit Flashback infizierten Macs steigt weiter. Derweil haben die Antivirenhersteller kostenlose Test- und Entfernungsprogramme für Flashback-Trojaner verteilt.
|
Scooped by
Gust MEES
|
WHAT IS FLASHBACK/FLASHFAKE? It is a family of malware for Mac OS X. The first versions of this type of threat were detected in September 2011. In March 2012 over 600 000 computers worldwide were infected by Flashback. The infected computers have been combined in a botnet which enables cybercriminals to install additional malicious modules on them at will. Check for FREE online (Kaspersky) if your Mac is infected and learn HowTo... Also users can check if they’re infected with Flashfake by using Kaspersky Lab’s free removal tool http://support.kaspersky.com/downloads/utils/flashfake_removal_tool.zip
|