ESET Threat Blog

Unlike Windows XP service pack 2, which included significant security updates, or Windows XP service pack 3 which is required for support from Microsoft, Windows 7 service pack 1 does not have any significantly compelling updates for most users. If you do not regularly use automatic updates to keep your operating system up to date, … Read More…

As I've already posted elsewhere, there are reports of scammers spamming out solicitations for contributions to fake disaster relief funds, in the wake of the recent earthquake in New Zealand (not to mention the one that preceded it).
CAUCE has put up a short list of organizations providing aid known to be genuine, complete with the necessary banking details. … Read More…

[My colleague in Spain, Josep Albors, reports that Ontinet has been noticing lots of emails with links to forums. Following the links leads to a forum full of spam products, from replica watches to viagra. He's published a Spanish language blog on the topic, but here's a rough translation.]
Sending out unsolicited email on a massive scale … Read More…

Before I started today's flurry of blogs, I was uncharacteristically quiet: first I was at  an AMTSO event in San Mateo, then at RSA in San Francisco, and then in darkest Shropshire for reasons that won't interest you in the least.
I was planning to put up some news about the AMTSO workshop by now, but in … Read More…

If you found my recent post on Public Access PCs Booby-Trapped of any use, you may also find a follow-up article by SC Magazine's Dan Raywood of interest.
The article on Keyloggers found plugged into library computers quotes some further thoughts I sent him in a subsequent exchange of email, and also quotes Wilmslow police inspector Matt Welsted … Read More…

Links added today to the Stuxnet resources page at http://blog.eset.com/?p=5945:

Eric Byres, Andrew Ginter, Joel Langill: How Stuxnet Spreads – A Study of Infection Paths in Best Practice Systems. I haven't read this yet, as it requires registration and approval which hasn't yet come through, but it looks likely to be worth the wait. Joel Langill also … Read More…

Really, all you have to do is talk someone into giving you their iPad, but you’re not going to get one if you fall for the spam that has been going around on Facebook recently. There have been many of the spam scams over the years. Usually the spam is sent from a hijacked account, … Read More…

The incident involves a couple of public libraries in the Manchester area of the UK (Wilmslow and Handforth, to be precise), where keyloggers were found to have been attached to PCs used by members of the public. One of the devices disappeared before it could be confiscated, so if you use either of those libraries … Read More…

[Update: the BBC Radio 6 issue is now confirmed by WebSense (apologies for misattributing it earlier!), who have more detail here, and note that areas of the BBC 1Xtra radio station Web site are also affected.]
I hear from ESET colleagues in the UK that the BBC's Radio 6 homepage (one of the Beeb's music stations) is currently … Read More…

Links to two Stuxnet-related stories have been added to the resources page at http://blog.eset.com/?p=5945.

Kim Zetter, in Wired's "Threat Level" column Report: Stuxnet Hit 5 Gateway Targets on Its Way to Iranian Plant, summarizes the latest update to Symantec's Threat Dossier. Symantec researchers now believe that Stuxnet targeted five organizations in Iran as staging posts in … Read More…