Archive for the ‘Phising Information’ Category
Silon Malware Steals your Credentials
Trusteer, a company that protects customers doing online businesses, warns the people on a new Trojan called Silon which can intercept user’s web login activities targeting Internet Explorer users.
Silon identify the user's login session, reads and encrypts the details, and transmits them to a remotely located server that commands and controls the Trojan. This server is used to store the stolen identification data of other victims. Silon also attacks online banking customers doing financial transactions. Since the transactions are protected with validation tools like banking card interpreters or tokens, the W32.Silon will wait until the user logs in. Then that’s the time that it will inject a powerful html script while the customer is connected with the financial institution’s server.
At first, the Trojan fabricates real appearing web-pages, pretending to belong to the bank's website and asking the user to use his transaction validation tool. Afterwards, the user will type his details into the pages without knowing that his credentials were stolen and being exploited by the cybercriminals for having fake transactions using the user’s name. Trusteer is very much concern with the Silon’s sophistication level because it can get away around tough validation devices such as PINs and card readers.
According to the security researchers of Trusteer, W32.Silon is only a small part of all the malicious programs in the honey pots located in Europe and North America during late September 2009. Actually, it is not yet clear on how Silon is infecting systems but it was speculated that it is through any spam outbreak or a contaminated USB drive.
In addition, Trusteer asks help from law enforcement to find the command-and-control system. A company spokesperson had a remark about the C&C server’s location saying that the researchers had not accessed it nor detect Silon's success rate. Finally, the researchers from Trusteer state that the new Trojan shows the increasing progress of the malware authors when it comes to their strong potential on accomplishing online banking attack using only one malicious program.
With the new Trojan, Silon, people should be careful when doing bank transactions online. You can get the virus through any spam or get contaminated through USB drive. To ensure that your PC is secured with virus like Silon, contact Techie Now. We can assist you on any PC support services that you need, be it virus and spyware removal, performance optimization, installation and configuration, and general repair. With Techie Now, you will be sure that your computer and online banking is safe and protected.
If you want your PC to be protected, Techie Now is ready to provide you flexible, quick and safe services when it comes to virus and spyware removal, performance optimization, software installation and configuration, and other general repair.
Article Source:http://www.articlesbase.com/security-articles/silon-malware-steals-your-credentials-1591069.html
Windows Updates: Should You Always Download Them?
You have probably seen the Window’s security shield icon appear many times on your system tray either warning you that your computer is at risk, notifying you of an update, or that it’s in the middle of installing updates. How should you handle these updates? Is it really best to let them download any and all updates whenever Windows wants you to?
First, here are the different ways Windows updates can be handled:
1. You can download and install updates automatically. This means that if you’re connected to the Internet, Windows can check your computer and detect that a new update is available for it, download it, and install it on your computer immediately.
2. You can choose to allow any new updates to download automatically, but you can then choose when to install the updates. This is a way for you to know what you are installing and be sure it doesn’t interrupt your current work (i.e., having to restart after it’s finished, etc.)
3. You can specify that you would like to be notified when an update is available and choose when to download them. This way you never need to download anything unless you choose to, but you are still notified so you will at least be aware that an update is available.
4. You can specify not to download updates at all. This is basically to avoid getting bothered with updates entirely. You are putting your computer at risk, as you will be frequently warned with a red shield pop-up. Some updates will help your computer run better as they are upgrades or patches to the operating system that have been added since you bought your computer.
Automatic updates recommends the first option, so that you’re computer has everything that is released by Windows, but you don’t necessarily need all of them. However, this is ideal for beginner users, because little management is needed on the user’s part, except for an occasional prompt to yes, install this, or yes, I accept this license agreement. Even someone who is fairly knowledgeable about computers will not necessarily be able to determine if an update is needed just by reading the name and description for an update. Any of the first three options is acceptable for most users.
There are basically two reasons why you would specify that windows updates not download and install automatically. The first reason could be because you don’t want to be bothered with downloads, often only temporarily because you don’t have a good Internet connection, etc. The other reason could be because you don’t like Microsoft to have this amount of control over your computer. Many people feel this way and even advise to not allow Windows to update anything at all. However, your computer will surely be at risk, especially if you are regularly using the Internet, and it also may not be compatible with some websites and applications that have changed since you bought your computer or installed your operating system.
Windows updates are recommended by the company that created your operating system, therefore, if they recommend you to install an update, it is probably to your benefit to do so.
Copper.net is a nationwide Internet Services provider that is all-American owned and operated. Call today, 1-800-336-3318 or sign up online. Check out my blog for this and more great articles! http://www.copper.net/wire
Article Source:http://www.articlesbase.com/security-articles/windows-updates-should-you-always-download-them-1510701.html
How to Avoid Being Defrauded by Phishing Emails
These days the volume of Spam email is a significant portion of the email distributed online. These Spam emails consist mainly of people trying to promote products using your unsolicited email address as a sales tool but even more sinister people trying to defraud you of money. This is done via a series of emails designed to spoof you into entering key financial information and is growing in frequency all the time.
These emails are referred to as Phishing emails likened to catching a fish where you throw in the rod looking for a bite, in this case entering account numbers and passwords. This identity fraud can ruin you financially and can take you months or years to first prove you were not responsible and to try and recover some of the money stolen from you.
Legally your financial institution is not obliged to return any moneys to you as a victim of online fraud. Their terms and conditions usually state quite clearly that it is your responsibility to maintain the integrity of your username/account numbers as well as any password or pin numbers. So whilst online banking is very convenient the responsibility clearly sits with you in regards to security and privacy of your information.
These phishing emails are designed to collect your financial information and usually do so by copying the websites of your financial institution and pretending that you need to update your username, password, address etc. These sites are so convincing that it only takes a moments lapse in concentration to compromise your security and privacy. Your bank or financial institution would never ask you to update information via email. If you need to carry out a financial transaction do so by going directly to the website and not clicking on any email links.
So how can you prevent being tricked by these phishing emails ? Firstly if the email looks unprofessional with poor spelling and grammar you can assume it is Spam and delete the email. If it is a professional looking email with company logos and colors there is actually a simple way to check if the email you received is legitimate. Most email these days is delivered in HTML format which gives you richer emails with text and graphics.
Move the mouse over one of the hyperlinks and in the status bar of the browser or email client you will see the domain the link is really going to take you. If this is not the domain of your financial institution it's Spam and delete the email. If it does match the correct domain complete a further check as follows. Somewhere in your email client or browser you should see a 'View Source' option. Select that and you will see the HTML code that composes the email.
Look for the link and make sure the address in the 'href' tag is a legitimate domain for your financial institution. Again remember emails from your financial institution you should click on are generally marketing, sales or new product information emails. Make sure you have anti-virus and anti-spyware applications installed on your computer to make sure you do not have spyware or malware that could be recording your account numbers and passwords.
Joey Vella is an IT Consultant with over 20 years of IT and Project experience. Specialising in Windows platforms and system configurations. Joey consults to a number of companies including PCWinTools.com

