SechoDB, trekking through tech...

  • Home
  • Technical Blog
  • Forums
  • Projects
    • Xbox 360 Arcade Stick
    • HomeCade (Arcade Cab)
    • Radio (CB)
    • Server OOB
  • About
    • Contact

Browser wars for HTML5

6/29/2010

0 Comments

 
Sebastian Anthony from DownloadSquad.com has pitched all four of the major Windows-based browsers against each other. On the same computer! At the same time! Care to see how each fared? Look no further than on the video below.
And check out the original article at DownloadSquad, which goes in-depth with details on how this was done.
0 Comments

Lenovo site infects users with Trojan.

6/24/2010

0 Comments

 
Picture
The support site of leading Chinese PC manufacturer Lenovo has been compromised by unknown attackers who injected a rogue IFrame into the pages over the weekend. Security researchers warn that unwary visitors looking for drivers are exposed to several exploits that install the Bredolab trojan onto their computers.

According to a report from Vietnamese antivirus vendor Bkis, the pages have been infected since at least Sunday afternoon. However, some users have been reporting getting antivirus warnings when visiting Lenovo's download website since Saturday.

The IFrame points to an exploit kit hosted on a domain called volgo-marun.cn. After performing several checks to determine what vulnerable software they had installed on their computer, the visitors were served with exploits targeting older versions of Internet Explorer, Adobe Reader or Adobe Flash player.

"These exploit codes attempt to load file hxxp://volgo-marun.cn/pek/exe.exe which is a virus, onto victim’s computer. The virus is a new variant of Bredolab Botnet […]. After being loaded onto the computers, the virus copies itself as %Programs%\Startup\monskc32.exe and receives commands from C&C server with domain sicha-linna8.com," Le Minh Hung, senior security researcher at Bkis, writes.

At the moment, the malicious executable is detected by only ten of the 41 antivirus products listed on VirusTotal. The entire download.lenovo.com subdomain has been blacklisted by Google's Safe Browsing service. This means that Firefox or Chrome users should see malware warnings when opening resources hosted on it.

"Of the 46 pages we tested on the site over the past 90 days, 39 page(s) resulted in malicious software being downloaded and installed without user consent. The last time Google visited this site was on 2010-06-20, and the last time suspicious content was found on this site was on 2010-06-20. Malicious software includes 1 trojan(s). Malicious software is hosted on 1 domain(s), including volgo-marun.cn/," a detailed explanation of the Google warnings reads.

Even though the malicious .cn domain appears to be dead at the moment, it could return back online at any time. Therefore, users are advised to stay clear of the Lenovo support website for a couple of days, until the manufacturer has a chance to clean it up and plug the hole that allowed the compromise in the first place.

As reported by Softpedia Security.

And, as you'll soon start seeing a pattern in this types of attacks, those being that they always target older versions of software, make sure you have your computers' software up to date! Having the latest version of a program always has its benefits so, Upgrade and Update!
Picture
0 Comments

    Theme

    Computer, Laser Printer and Electronics repair, tips & tricks.

    Archives

    March 2014
    November 2013
    October 2013
    August 2013
    July 2013
    May 2013
    April 2013
    March 2013
    July 2010
    June 2010

    Categories

    All
    3d
    Alert
    Atom
    Barnes&Noble
    Browsers
    Chrome
    Compare
    Datacenter
    Display
    Droid
    Dual Boot
    Ebook
    Error Codes
    Firefox
    Flash
    Health
    Htc Incredible
    Ie
    Lifehacker
    Linux
    Mbr
    Mouse
    Nook
    Onlive
    Opera
    Phone
    Power Adapters
    Power Supply
    Security
    Server
    Speed Test
    Streaming
    Testing
    Video
    Video Tutorial
    Warning
    Win Xp
    Xbox

    RSS Feed

Powered by Create your own unique website with customizable templates.