Web blog d'un ingénieur en sécurité informatique. IT Security watcher's blog: news, threats analysis, AV issues, PoC, IT security, bugs... Contact: philippe.vialle@wanadoo.fr
Voici un échantillon tout frais de hameçonnage ciblant SFR. Cher client Sfr. Ce mail vous a ete envoye suite a une faut comptable qui s est produite lors de nos factur mensuel . En effet le 19 juillet 2010 la somme de (154,00) cent cinquante quatre Euros...
Lire la suiteMost of the time I would say and repeat: people should review their security systems and probably harden their configurations and system settings. This time, my post is gonna deal with the contrary: how a hardened URL filtering system can impact productivity...
Lire la suiteIt's been a quite long time since I wanted to write this article. But taking into account the fact that I spent 3 hours at night to understand what was happening to my BIOS, I could not forget it, I guess... How did all of that started? very simple. I...
Lire la suite/idata%2F2094304%2FMSG_Skype_dreams-lady.com_250310.jpg)
Once again, I was not even expecting to get a sample that way... Here is the message I received on one of the Skype accounts I use as 'honeypots' (one day ago): I never requested in any way to receive such ads! Okay so let's go to 'dreams-lady'. To be...
Lire la suite/idata%2F2094304%2Fcapture_thebulletintrackers.com_230310.jpg){kind=tracking}
I was honestly not expecting it. I recently found out that one of my Skype accounts had received an offline message, from an unknown contact (meaning I hadn't accepted myself!) Here is a screenshot of it: At the time of writing (24 hours after I received...
Lire la suite/idata%2F2094304%2FNortonSecScan_alert_080310.JPG)
I'd heard that Norton (I mean the last version) has improved quite a lot . It is said to be less system resource consuming, and more efficient. On my part, I spent almost 5 years cleaning computers that were supposed to be protected by Norton... (and...
Lire la suiteQuelquefois, pas besoin de chercher pour qu'un élément malveillant à analyser pour qu'un ben échantillon vienne à moi. Les mauvaises langues diront que ce sont tous mes pots de miel qui sont derrière ce constat... pas à tout à fait faux. Bref, en lisant...
Lire la suite/idata%2F2094304%2F%2Fthunderbird_SophosEnews_junk_021109.jpg)
I find it quite funny when an AV or any security system alerts for something regarding another security system. This time, it is about antispam and AV vendor security newsletter... The antispam is: Thunderbird 2.0.23 The newsletter is: Sophos enews Here...
Lire la suite/idata%2F2094304%2F%2Fnod32_fuite_memoire_ekrn.exe2_131009.jpg)
As everybody would say, an antivirus is not supposed to take all the system ressources. Taking that into account, I tested ESET Nod on my computers, because I knew it was said to prove quite reasonable memory and CPU usage. Anyway, this was about real...
Lire la suiteNoticing the fact that APT upgrades were becoming slower for a while, I started to investigate further. After checking all the configuration files of APT and its logs, it became clear that the problem was not on the hosts that used the APT-proxy running...
Lire la suite