|
Internet
Security
Internet
control, email and network protection
Weekly report on viruses and intruders
27 November 2006 Sophos
OVER HALF OF CHINESE MALWARE AIMS TO STEAL PASSWORDS, SOPHOS WARNS
IT security firm, Sophos, has revealed that over half of all malware originating in China in October was designed to steal usernames and passwords. This malicious code is designed to give cyber criminals easy access to personal and sensitive data for financial gain and identity theft.
By analysing the malware, which was written in a simplified version of Chinese, Sophos has identified that 45.2% aimed to steal online game login information, with a further 7.5% designed to provide the hackers with username and password details for the popular Chinese QQ instant messaging client.
"Given the ever growing popularity of online gaming in China, this is a worrying trend - once hackers have stolen login details, they can effectively impersonate the victim in the online world," explained Carole Theriault, senior security consultant at Sophos. "Millions of people play these games every day, but once inside the game, it's difficult to check their identity and these cyber criminals can wreak havoc, for example buying and selling items in online stores and running up huge debts without the victim even realising."
Furthermore, with a significant proportion of the remaining malware designed to give hackers access to instant messaging clients, Sophos is warning computer users of the risks of using the same password across multiple sites and of the importance of using secure passwords.
"While hacking into an instant messaging client may not seem like the end of the world, the danger is that the cyber criminals will have inadvertently gained access to bank accounts, or cracked the passwords to secure password protected information, from which they can steal confidential and financial information," concluded Theriault.
Sophos recommends that businesses secure their PCs with a consolidated solution to defend against spyware, viruses and spam, as well as ensuring that their software offers automatically updated protection. Computer users should also be wary of unsolicited emails, and display caution when clicking on or opening unknown links or attachments.
Other Internet Security News
|
Security White Papers
|
|  Employee survey highlights dangers of insider threat
Whilst the media seems pre-occupied with the problems of cybercriminals and hackers causing problems for organisations from outside their network, a survey just published shows that 23 per cent of UK employees will take customer lists and other sensitive data when they leave their employer. | | | | |
|
 Understanding the value of outsourcing network security services
This white paper will examine the many new challenges that are facing today’s network owners, the pros and cons of using in-house resources and outsourcing for your network assessment and day-to-day monitoring, as well as guidelines to help select and maximize the value of outside resources. | | |  The Trend of Threats Today: 2005 Annual Roundup and 2006 Forecast
Trend Micro
The report that follows is not only an account and analysis of 2005 threat
incidents. It also serves as a forecast of what the future holds in 2006 and
onwards. Through Trend Micro‘s extensive research and analysis of the 2005
incidents, this paper documents how threats evolved into the multi-purpose
threat regime – thus providing corporate and home users information on what
to do to ensure they remain protected against future threats. Download free white paper.
| If you can't beat it, manage it
David Caughtry of Computerlinks looks at the challenges facing IT managers with the growing use of Instant Messaging in the workplace. | |
|
|
|
|
Newly patented technology 'reaffirms AhnLab position as premier provider of online banking security' 
Trusteer uncovers Zeus botnet that plunders over 100,000 UK Internet user credentials
Trusteer warns financial malware is attacking leading US banks using Visa and MasterCard 
Barracuda spam & virus firewall offers broader outbound email content filtering capabilities 
Over half of IT professionals are still leaving mobile security to chance
GFI warns one anti-virus engine is not enough to protect your business
Are you becoming a one-stop security shop?
