HowToWeb, http://howtoweb.com
HowToWeb.com

Advertising
Feedback
Homepage
Linking to Us
Our Blogs
WWFeeds.com




Add to MyYahoo

Add to MyMSN

Add to Bloglines

Add to NewsGator






Google
Web howtoweb.com

Blog Categories

Affiliate Programs
Amazon
AOL
Apple
Blogging
Broadband
Browsers
Classifieds
Computers
Convergence
Domain Names
Downloads
Ebay
Ecommerce
Education
Email
The Future
Gadgets
Google
Internet
ISPs
Make Money Online
Media
Microsoft
Miscellaneous
Oddity
Online Fraud
Online Storage
Payment Systems
Photography
Privacy
Programming
Robots
RSS
Search Engines
Security
Selling on eBay
Social Software
Spam
Tech Work
Technology
Virtual Worlds
Web Advertising
Web Design
Web Hosting
Yahoo
HowToWeb.com
Index

Advertising
Book Reviews
Computer Center
Discussion Forums
Gadget Search
Homepage
Linking
News Headlines
RSS Feed
Web Classifieds
Webmaster's Corner





Homepage | Online Fraud and Malware

Yahoo Working on Anti-Spam Technology
The BBC reports that Yahoo is working on a new email technology to battle spoofed email message called DomainKeys. The technology could help fight email fraud tactics where fraudsters send email that pretends to be official email from an online bank or auction website. eBay's auction website and payment system PayPal have been plagued by these phising tactics.
The firms are supporting the emerging standard known as domain keys, which block fake e-mails by validating the sender with a digital signature.

Spammers hide their identity by using a false, or spoofed, address in the millions of messages they send out.

The technology, called the DomainKeys Identified Mail (DKIM), will be available to millions of Yahoo Mail users worldwide in the coming weeks.

It is a big step forward for consumers in defence against the bad guys," John Kremer, vice president of Yahoo Mail, told Reuters news agency.
DomainKeys relies on the use of encrypted digital signatures to prove that an email come from the domain it claims to come from. Both the sender and the recipient need the DomainKeys Identified Mail (DKIM) specification for the technology to work effectively. A faq on Yahoo's DomainKeys website explains how this technology could help stop spam.
Several ways. First, it can allow receiving companies to drop or quarantine unsigned email that comes from domains that are known to always sign their emails with DomainKeys, thus impacting spam and phishing attacks. Second, the ability to verify sender domain will allow email service providers to begin to build reputation databases that can be shared with the community and also applied to spam policy. For example, one ISP could share their "spam vs. legit email ratio" for the domain www.example.com with other ISPs that may not yet have built up information about the credibility and "spamminess" of email coming from www.example.com. Last, by eliminating forged From: addresses, we can bring server-level traceability back to email (not user-level - we believe that should be a policy of the provider and the choice of the user). Spammers don't want to be traced, so they will be forced to only spam companies that aren't using verification solutions.
The BBC article says Yahoo developed the technology and they are backed by AOL, Google, IBM, Sendmail and Verisign. More information about DKIY can be found here. The BBC also says there is another email technology called Sender Policy Network (SPF) that is backed by Microsoft, Amazon and eBay.

Posted on October 4, 2007
Permalink | Digg this | Blogs linking to this post: Google | Technorati



Google Adds Malware Warning to Search Results
Google is now flagging pages that may contain harmful malware that could damage your search results. The malware message links to this help document on Google.
Why do some of my search results say "This site may harm your computer?"

This warning message appears with search results that we've identified as sites that may install malicious software on your computer. We want our users to feel safer when they search the web, and we're continuously working to identify such dangerous sites and increase protection for our users.

Malicious software is often installed without your knowledge or permission when you visit these sites. Some examples of malicious software include programs that delete data on your computer, steal personal information such as passwords and credit card numbers, or alter your search results. For more information on these types of sites, please visit http://www.stopbadware.org/home/help
Google Operating System says Google also won't let people visit the website.
Even if you click on the title, you won't be able to visit the site: Google explains you once again that the site could be dangerous and recommends you to visit another search results or to change your query. The only way to visit the site is to copy the URL and paste it in the address bar, which is not an obvious or a trivial task for an ordinary computer user.
If Google can spotlight enough viruses and keep people from getting infected maybe it will help reduce the number of infected PCs and keep some of these viruses from spreading around.

Posted on February 13, 2007
Permalink | Digg this | Blogs linking to this post: Google | Technorati

Malware Search Engine Created
Malware SearcheWeek reports that H.D. Moore, creator of the Metasploit hacking tool, has created a Malware search engine that will find live malware samples using Google search queries.
My Web interface will identify specific malware without the Google API. It directly searches Google using fingerprints from executables that we already have," he said.

Moore's project uses code strings, or fingerprints in malware samples, then runs a search on Google for those characteristics.

The search engine has been programmed with about 300 malware signatures and Moore said he plans to add another 6,000 signatures in a future bug fix update.
The Malware search engine comes with the following warning:
WARNING! The following links lead to executable programs that can harm your computer. Please be careful when accessing these files and make sure that you only run them in a restricted environment. The signature technique used by this search engine may result in non-malicious files being detected as malware, so be sure to use an updated virus scanner prior to filing a complaint with any web site.
eWeek's article says the Malware search engine found about 20 results for the Bagle worm virus with most of them residing on screensaver files.

Posted on July 24, 2006
Permalink | Digg this | Blogs linking to this post: Google | Technorati



Malware Becoming Impossible to Fight
An eWeek article cites Microsoft security officials as saying some malware is becoming almost impossible to remove.
Offensive rootkits, which are used hide malware programs and maintain an undetectable presence on an infected machine, have become the weapon of choice for virus and spyware writers and, because they often use kernel hooks to avoid detection, Danseglio said IT administrators may never know if all traces of a rootkit have been successfully removed.

He cited a recent instance where an unnamed branch of the U.S. government struggled with malware infestations on more than 2,000 client machines. "In that case, it was so severe that trying to recover was meaningless. They did not have an automated process to wipe and rebuild the systems, so it became a burden. They had to design a process real fast," Danseglio added.

Danseglio, who delivered two separate presentations at the conference-one on threats and countermeasures to defend against malware infestations in Windows, and the other on the frightening world on Windows rootkits-said anti-virus software is getting better at detecting and removing the latest threats, but for some sophisticated forms of malware, he conceded that the cleanup process is "just way too hard."

"We've seen the self-healing malware that actually detects that you're trying to get rid of it. You remove it, and the next time you look in that directory, it's sitting there. It can simply reinstall itself," he said.
The article said a Microsoft official suggested company's come up with an automated method for wiping hard drives and reinstalling the operating system. It sounds like a defeatist attitude but for some heavily infected machines there may not be a better option.

Posted on April 6, 2006
Permalink | Digg this | Blogs linking to this post: Google | Technorati

MiMail Virus Poses as PayPal Email
The latest version of the MiMail worm (W32.Mimail.H@mm) tries to steal credit card information by pretending that it is an official PayPal email. The email tries to con readers into completing a fake PayPal form (containing an actual PayPal logo) that then sends their credit card information to the people or organization behind the virus. Experts say the worm is another sign that viruses are becoming a tool of organized crime and much much more than a simple nuisance.

Source: Symantec, EcommerceTimes, ZDNet

Posted on November 14, 2003
Permalink | Digg this | Blogs linking to this post: Google | Technorati







Our Blogs

Bloggers Blog
Crafters Craft
Drivers Drive
Fantasy SF Blog
Gamers Game
Health News Blog
HowToWeb.com
The IWJ Blog
Lovers Love
Media Cynic
Petosphere
Pleasant Morning Buzz
Readers Read
Science News Blog
Shopping Blog
Singers Sing
Sportsosphere
Surfers Surf
Traders Trade
Video Nacho
Watchers Watch
Workers Work
The Write News
Writer's Blog
Text Ad Links




Free Newsletter

The HowToWeb® Update is a free email newsletter covering tech and gadget news. Writers Write, Inc. does not sell or distribute subscribers' email addresses to third parties.
Email:
Name:










HowToWeb®  www.howtoweb.com
Copyright © 1997-2007 by Writers Write, Inc. All Rights Reserved.