Le blog sécurité de Philippe Vialle / Phil Vialle's blog

Harden your browser against the current certificates issues

Veille sécurité

Par Philippe V.

I've already posted something regarding my favourites Firefox extensions when it's about security. Let's point out here what would be useful to mitigate those AC / HTTPS certificates issues (see: http://blog.trendmicro.com/diginotar-iranians-the-real-target/):...

Lire la suite

Tomtom GPS forensic analysis hints

Veille sécurité

Par Philippe V.

This article will aim to help a little bit the guys who try to understand/find tracks on a Tomtom GPS. The model being investigated is a Tomtom Rider 2, 2010. First of all, extract the SD Card, and then plug it to a safe/secured computer. At the root...

Lire la suite

using ProcMon may lead to a denial of service condition

Bidouille informatique

Par Philippe V.

I felt that Kaspersky antivirus was taking a lot or resources, generating lots of HDD requests. So I tried to monitor what was going on, and used SysInternals Procmon. BTW, hi and congrats Mark :) I set up a filter targeting avp.exe (one of the main exefiles...

Lire la suite

Hameçonnage Orange (fausse facture), 6 jours après...

Veille virale

Par Philippe V.

Cette fois-ci, j'ai préféré ne pas évaluer l'efficience de solutions de sécurité à l'instant T où la menace atteignait le poste, mais quelques temps après... Voici le courriel , assez bien fait d'ailleurs : Thunderbird 64 (Miramar) avait alerté sur un...

Lire la suite

Fake twitter profile, leading to porno-dating website?

Veille sécurité

Par Philippe V.

While surfing on Twitter you may find such a profile... that may look interesting for a few guys :) As you can see, several posts dealing with men/women... and "being single"... But what I find more interesting is the link, that is quite visible, just...

Lire la suite

Faux message Facebook, menant à site porno/rencontre !

Veille virale

Par Philippe V.

Je m'attendais à tout autre chose en lisant le sujet du courriel... Subject: La photo de votre profil est belle From: "Lacie Peterson" Le corps du courriel est simple, sans faute, plutôt convaincant : Une fois que l'on clique...

Lire la suite

MS official Uptime tool: a Windows Defender false positive...

Veille virale

Par Philippe V.

While trying o get the official "uptime" tool from MS's website (http://support.microsoft.com/kb/232243 ) I had a surprise. The file got detected by the automatic AV scan which is shipped with IE9 (ie: Windows Defender). And the VirusTotal's results are...

Lire la suite

New malware spreading over Facebook, using fake Youtube portal

Veille virale

Par Philippe V.

That trick was really about to get me... The bot would realy make you believe it is your Facebook contact talking to you, but it is not... I sent the URL to VirusTotal, here are the results: nothing to worry about... URL Analysis tool Result Avira Clean...

Lire la suite

New malware spreading over Live Mail

Veille virale

Par Philippe V.

Here is a screenshot of the message spreading: The real URL is being displayed in the status bar. I personaly used DynDNS some time ago... anyway. This malware did trigger an alert from: - Kaspersky - IE 9 Smart screen filter But the thing is, Kaspersky...

Lire la suite

Extensions sécurité (protection) Firefox | FF security add-ons

Veille sécurité

Par Philippe V.

For non French readers, executive summary follows. Je vais présenter ici une liste d'extensions pour Firefox, qui permettent de protéger la navigation, et non pas d'auditer des sites ou applications. Il y aura certainement des points communs avec Firecat,...

Lire la suite