12 million users enticed to download utilities that secretly bundled adware and spyware

Remember

This is clearly "user issue" so , remember "Think Before you Click"


From the article:
“Installed with administrator rights, (Wizz) is able to harvest personal information, and install and launch executables uploaded by the controlling party,”

Researchers found 55 domains used for Tuto4PC’s adware/spyware campaign, each owned by Tuto4PC or a subsidiary. Talos said the domains were used to distribute the Wizz.exe binaries. “The domains had various ‘PC Clean’, ‘Free Game’ and ‘Offer’ style names all questionable to a degree as to how legitimate they are


For more info:
https://threatpost.com/tuto4pc-utilities-silently-install-12m-backdoors-cisco/117704/

Bypass Windows defenses without leaving any trace on the machine.

The strange part is that someone accidentally discovered it and exposed it.
So, I am wondering who else knew about it and has been using it.
Is this a vulnerability or kind of backdoor?

From the Article:
The flaw doesn’t trigger the AppLocker security software, which is supposed to only let users run apps from trusted sources, and it doesn’t leave any traces in the registry, as it doesn’t need administrator access.

Microsoft has not yet provided a fix for the issue, but users can disable the Regsvr program using Windows Firewall.



For More info
http://bgr.com/2016/04/25/windows-10-applocker-security-issue/

Educating Kids on Cyber Safety

Nice article


Check Below for a PDF doc

http://securingthehuman.sans.org/newsletters/ouch/issues/OUCH-201506_en.pdf

It is time to uninstall QuickTime from your windows PC (ASAP)

Apple has pulled the plug and we did not know it!!


Check here:
http://appleinsider.com/articles/16/04/18/apple-confirms-quicktime-for-windows-end-of-life

A Few mind blowing security suggestions

Actually............... these are just simple but powerful suggestions

1.  Change Default Passwords and DON'T share them
2. Use 2 factor authentication wherever possible and use SMS / Email alerts for all important transactions (Banking, Credit Card)
3. Use a password manager and create a strong password for its use.
4. Pass-phrases are better than passwords
5. Patch / Update all devices that can connect to Internet
6. Always presume free Wi-Fi connections as unsafe so, use HTTPS or VPN
7. Remember  - IRS will communicate only by Postal mail. All other IRS related emails are generally FAKE.
8. "Think Before you Ink" is an old proverb , the new one is "Think before you CLICK".  This applies to both Internet connections and emails.(This will save you from embarrassment  and could save your job)
9. Remember , you are a TARGET to Hackers so, be VIGILANT
10. Remember "Nothing is free" and if something is too good to be true  then it probably is.
11. Backup you data and disconnect your backup device from the computer. This  will help if/when you are hit by Ransomware
12. Do NOT RELY on Anti-Virus, Anti-Malware and other fancy tools as they  can ONLY provide basic protection.

(Here is something that is strange but true)

The best security tool for you, your computer, your home and your job is YOU.

IMPORTANT PHONE NUMBERS AND URLS - For people within USA

I am hoping this would be useful for many people:
The details are US related.

Please send me info on phone numbers and URLs that might be generally useful and I will add them
If you have for other countries then send it to me and I will create a similar page

OR

If you have an existing page, send me the link and I will add it to this page.

IMPORTANT
Poison Center
http://www.poison.org/
1-800-222-1222
Food poison or any other poison related issues


INTERNET
Reporting Computer or Internet related crimes This article provides crime classification and related agencies Link to the Article

FBI - Internet Crime Complaint Center (IC3)
http://www.ic3.gov/default.aspx
IC3 accepts online Internet crime complaints from either the actual victim or from a third party to the complainant


IDENTITY THEFT

IDENTITY THEFT -FTC Site
https://identitytheft.gov/
"Federal government’s one-stop resource for identity theft victims. The site provides streamlined checklists and sample letters to guide you through the recovery process

IRS's Taxpayer Guide to Identity Theft
https://www.irs.gov/uac/Taxpayer-Guide-to-Identity-Theft

Ever wonder why you never won a lottery ticket (maybe it was hacked)

Are you surpised?

Like someone once said
if it isn't open-sourced, and verified unmodified, it cannot be trusted!

From the article:

For several years, Eddie Tipton, the former security director of the US Multi-State Lottery Association, installed software code that allowed him to predict winning numbers on specific days of the year, investigators allege. The random-number generators had been erased, but new forensic evidence has revealed how the hack was apparently done.

For more details:
https://www.theguardian.com/technology/2016/apr/08/man-hacked-random-number-generator-rig-lotteries-investigators-say