Web blog d'un ingénieur en sécurité informatique. IT Security watcher's blog: news, threats analysis, AV issues, PoC, IT security, bugs... Contact: philippe.vialle@wanadoo.fr
/idata%2F2094304%2Fdossier1%2Fadware-heli-2012-01-11-005724-copie-1.png)
I would believe we are back to Win 9x systems fashion, when adwares used to be legion (at least, in proportion compared to global threats trends at this time). But this case seems to concern any Android OS from 1.6 to 2.x, much more modern systems......
Lire la suite/idata%2F2094304%2Fdossier1%2Falert_certif_080112.jpg)
A bit strange, isn't it, that alert from Certificate patrol? This came up while accessing Facebook with Firefox... Well, that would mean Facebook rolled back their HTTPS certificate, to re-use a former one, issued on November 2010... Why so? no real clue......
Lire la suite/idata%2F2094304%2Fdossier1%2FGMail_HS_290411.JPG)
Qui a dit que cela n'arrivait pas à tous les fournisseurs de service ? GMail ne fait pas exception à la règle. Bien que le Copyright sur la page date de 2008, le message lui, date bien de 2011 ! (je n'avais pas eu l'occasion de le poster). Attention donc...
Lire la suite/idata%2F2094304%2Fdossier1%2Finfo_KAV-copie-1.png)
Il y a peu, en démarrant la machine, Kaspersky a affiché des avertissements et la session ne se chargeait plus correctement (pas complètement). Voici tout d'abord les infos de version du produit, pour savoir de quoi il est question : Ensuite, le message...
Lire la suite/idata%2F2094304%2Fdossier1%2Favertissement_Trusteer_061211.JPG)
L'avertissement est, je pense, suffisamment explicite ! Mais où se cache le HTTPS ? Solution possible : utiliser HTTPS EveryWhere dans Firefox...
Lire la suite/idata%2F2094304%2Fdossier1%2Fmsg_Gmail.JPG)
First I thouht this was like regular spam, and something close to Viagra (and others...). But, in the end, no... The contact told me his "mail account" had been stolen, whereas I do believe his computer has been compromised (and then, the bad guys used...
Lire la suiteWarning. If you access your Facebook profile, from your cellphone, without using the "facebook app", you'll most likely be redirected to: m.facebook.com. The problem is that HTTP is being used when you send your email address and password over the network,...
Lire la suite/~data%3Aimage%2Fpng%3Bbase64%2CiVBORw0KGgoAAAANSUhEUgAAAQUAAACHCAIAAACQ%2B9uhAAAExElEQVR4nO3bSXLbOBiGYR5Ni5ZAYuXcyPu4xQE4j5dJllnkDH2AvoCyYOxPIUEQHDTyfcrlohhM%2FMlPsK1KVjfee1%2FVrqyaxnnnfFW7qnbO%2Bcb5smqq2nnv68aXVdM2Pj%2BmIx2fqWNWFNZaa%2FLiYIy11lprTG5M3h4fjDF5Ya0tCrs%2FmLworLV5UewPho50fLKOLy9fshOA0%2Bl0On379p08AEIeACEPgJAHQMgDIOQBEPIACHkAhDwAQh4AIQ%2BAkAdAyAMg5AEQ8gAIeQCEPABCHgAhD4CQB0DIAyDkARDyAAh5AIQ8AEIeACEPgJAHQMgDIOQBEPIACHkAhDzcnSzjptzMzNJf5561s%2FTnmjT7jKVe7YnsX%2BDQ1Oct113e6GiXrvbsMRc%2BGOExZ3a74nvYpvIQb9k%2FXmsNSxrMbrzQRbI3s9vfb1efOv%2FauYtTz%2FRnOT8fHKEz1KTGk9YfHDwyXfDRH11hZ9hgqYOV6VdvXn0mTRdvnDJssFyjJQ2uZ56leeivOLjEofuUcma0TKdeIToVTGw8df392xCZLvhkDK0q%2BBwEzw91SZx3Un2CbYaWNLXgkWXPazPPCvtD%2FyDlgk%2BhW9U5k5KTT%2F3ldbqkNB7q3hlhqE1kuuCt6nQcnaJf9sQuoxeYUp%2BhNqPl6g84adlDF5J4sZPcMg%2FBl%2BmjRS5%2BUqWmFjp%2BRSk3L9IxZRn9sk9aSXqzTuOhNkN5GB0wcT3PkIcZCYnc%2FuBoKRmLvAMFX46uLT5g4hteZOqUSYPPXMo6Jy042Hjo5NCTEB%2Bw333FM%2FNccH84f44%2FX046E09FcITOUJMaj9744EOZON1oHiIFiZcipcuS%2BkSm6xcqvrahKw2O06%2FSpF7zLO0fHnTxsh7Xlq%2F9CZCHFWRnbr0WLML9A4Q8AEIeACEPgJAHQMgDIOQBEPIACHkAhDwAQh4AIQ%2BAkAdAyAMg5AEQ8gAIeQCEPABCHgAhD4CQB0DIAyDkARDyAAh5AIQ8AEIeACEPgJAHQMgDIOQBEPIASPYfgA%2FZ%2FwA%2BkAdAyAMg5AEQ8gAIeQCEPABCHgAhD4CQB0DIAyDkARDyAAh52Jzd01mxOORhc3a73a3%2Fl8FqyAOWavOw2%2B1%2B%2Ffzx0N9fX1%2FJA5Zq8%2FDr549H%2F%2BLnJazgfH946C%2F2B6yA%2FSGCPGwO%2B0MEedicC%2B0P2YfzM50G7A%2B4O5fYH4IxiGSD%2FQH3YvX9of%2Bst2eCwWB%2FwH1ZfX%2BI56HzQxT7A%2B7LNfeHzkbB%2FoC7c%2BX9YagN%2BwPuwiX%2BvnST36fZH7CCC33%2BcP2%2Ft7I%2FYAV8Ph1BHjaHz6cjyMPmsD9EkIfNYX%2BIIA%2Bbw%2F4QQR4253N%2FaN9fH%2F07ecAiu6ezYnHIw%2Bbc%2Buld34rFIQ%2BAkAdAyAMg5AEQ8gAIeQCEPABCHgAhD4CQB0DIAyDkARDyAAh5AIQ8AEIeACEPwB%2Fv7%2B9Znhf7g7HWWmuNyQ%2Fmz%2FHBGGPy9nh%2FMHleWGvzwv6zP%2BSFtdbSkY5P1vHl5UtWN957X9WurJrGeed8Vbuqds75xvmyaqraee%2FrxpdV0zY%2BP6YjHZ%2BpY9Y4770vq%2BbtWHrvvffHsj6WdXv877Esq8Z775z%2F%2BnasGue9rxr39e1IRzo%2BX8ffBO31Kt%2FyHXsAAAAASUVORK5CYII%3D)
Yes, a bit surprising, but yeah, even Google...! I'm talking about the classical GMail interface, which is still regular (the new one has not yet been put as a standard...) While trying to reply to an email, or even write a new one, here is the warning...
Lire la suite/idata%2F2094304%2Fdossier1%2Fregistre_HKU_privacy.exe.jpg)
This malware did succeed to install itself on the following configuration: - Win7 64 bits, fully-patched - KAV 2011 - user account not administrator (account switch using UAC) - Opera 11.52 up-to-date I was just surfing... Therefore I do believe it is...
Lire la suiteJust to say that the Opensource world does manage to provide tools being able to filter spams according to a sender's reputation. Below a few (daily) stats that I have on a messaging server, running: - Debian fully-patched - SpamAssassin and Exim4 (with...
Lire la suite