Search My Blog

Friday, October 24, 2014

Malware in Ad Networks Infects Visitors and Jeopardizes Brands - One more good reason to Block Adds on the Internet

One more good reason to Block Adds Online! "CryptoWall then encrypts the end-users’ hard drive and will not allow access until the victim pays a fee over the Internet for the decryption key". Check out this detailed Article, below. I haven't had a reason to try this out. But, there is a Sight, that could help you Decrypt your Files, if you did fall Victim to CryptoLocker. FireEye and Fox-IT have partnered to provide free keys designed to unlock systems infected by CryptoLocker. Go here, https://www.decryptcryptolocker.com/. And check out more info in the links at the bottom too...

Don

Malware in Ad Networks Infects Visitors and Jeopardizes Brands

Posted: Wednesday, October 22, 2014
By Wayne

In the past few days, researchers at Proofpoint have detected numerous high-traffic websites hit by a malvertising campaign. These websites include various properties in the Yahoo, Match.com, and AOL domains, among others, potentially exposing as many as 3 million visitors per day and generating an estimated US$25,000 per day for the attackers.

PART I:  Overview of a malvertising campaign

What is Malvertising?

As we described recently, Malvertising attacks use online advertising channels to infiltrate malware into the computers of unsuspecting users by embedding malicious code within legitimate advertisements on trusted websites. There is no visible indication that the trusted site is compromised: simply by visiting a site, users can get infected via “drive-by download”. Malvertising attacks are particularly hard to detect because most advertising on trusted sites comes from a variety of ad networks – different visitors will see different ads from different places, not all of which will be malicious. Malvertising attacks are a growing problem; research shows that billions of malicious advertisements are being served each year. Malvertising attacks are especially virulent for two reasons. First, leveraging the online ad network gives attackers the ability to target specific groups; attackers can ensure infection across a designated demographic or targeted set of audiences. Second, because there are so many players in the supply chain through which a given advertisement passes, attackers can more easily avoid detection.

The impact of Malvertising is not limited to end-users; the publishers and advertisers are also victimized to the extent that they are exposed to brand damage: end-users are unaware of the distinctions between sites, networks, and stolen ad creative content. As more and more business-related sites carry ads, and attackers increasingly leverage the online ads ecosystem to target users, the security implications of malvertising are significant for publishers and Enterprises alike.

What did Proofpoint detect?

Without having to click on anything, visitors to the impacted websites may be stealthily infected with the CryptoWall 2.0 ransomware. Using Adobe Flash, the malvertisements silently “pull in” malicious exploits from the FlashPack Exploit Kit. The exploits attack a vulnerability in the end-users’ browser and install CryptoWall 2.0 on end-users’ computers. Similar to the behavior of other “ransomware,” CryptoWall then encrypts the end-users’ hard drive and will not allow access until the victim pays a fee over the Internet for the decryption key. Typically, the end-users face an escalating time deadline; failure to pay by the deadline results in their hard drives being permanently encrypted, thus rendered effectively useless, with all information inaccessible.

Which websites were impacted?

Read More...
http://www.proofpoint.com/threatinsight/posts/malware-in-ad-networks-infects-visitors-and-jeopardizes-brands.php


Encrypt and Decrypt or Digitally Sign files via GnuPG GUI and other methods as well
FireEye - Fox IT Scanner
How to PGP encrypt, decrypt or digitally sign files via GnuPG GUI - Xmodulo
DEFCON 16: Malware RCE: Debuggers and Decryptor Development - YouTube

VirusTotal is a free service that analyzes suspicious files and URLs
How to Make a Quick and Easy Online Antivirus Check of a File or App Before Downloading it
VirusTotal - Free Online Virus, Malware and URL Scanner
VTchromizer - VirusTotal
VTzilla :: Add-ons for Firefox
VTzilla - VirusTotal

RansomWare
CryptoLocker Ransomware Information Guide and FAQ
Cryzip Ransomware Trojan Analysis
How to Clean and Protect Your Android Device Against Ransomware
How to Deal with the Ransomware Called CryptoLocker
IntelCrawler - Multi-tier Intelligence Aggregator - Copycat ransomware demands cash to unscramble files
Latest ransomware, Cryptolocker, hits systems and pocketbooks hard - TechRepublic
Massive botnet takedown stops spread of Cryptolocker ransomware - Computerworld
Ransomware 2.0 Comes to America
Ransomware Crooks Offering Customer Service
Ransomware hits admin workstation and kills 7 servers
Ransomware leverages victims' browser histories for increased credibility - Computerworld
Ransomware Removal - YouTube
The FBI locked your computer? Watch out for new spins on ransomware | TechRepublic
What Ransomware is and How to Deal with It
Add Blockers, Web Browser Addons
Adblock Plus: Save your time and traffic
Known Adblock Plus subscriptions
Adversity Adblock List
Adblock Plus Pop-up Addon
AdBlock for Google Chrome now stops ads before they download
Element Hiding Helper
Adblock Plus :: Firefox Add-ons
Adblock Plus Filter Uploader Add-ons for Firefox
Adblock Plus Watcher Add-ons for Firefox
Adblock Plus :: Add-ons for Firefox
Meet the Speed DNS Developer :: Add-ons for Firefox
Search Add-ons Add-ons for Firefox
Adblock Plus :: Add-ons for Thunderbird
Chrome Web Store - Adblock Plus for Google Chrome™ (Beta)
Chrome Web Store - AdBlock
Virus info Linux and Windows
Antivirus scan for 5cb14d0745d7b09bcbeba3114cc06c5f at UTC - VirusTotal
avast! blog » Linux Trojan “Hand of Thief” ungloved
avast! Linux Home Edition
best security list 2013 - Search on DonsDeals Blog
Best Security List - Google Custom Search on DonsDeals Blog
best secutriy list - Google Custom Search on DonsDeals Blog
Clam AntiVirus
Clam AntiVirus
ClamWin CD/USB - HowTo
Comodo - Google Search
Computer worm - Wikipedia, the free encyclopedia
crafted.win32file.ols - Google Search
CrowdStrike: HTTP iframe Injecting Linux Rootkit
DonsDeals: Avast! AntiVirus For Both Window and Linux Home Edition
DonsDeals: BBC NEWS | Programmes | Click | BBC team exposes cyber crime risk
DonsDeals: Best Free Rootkit Scanner/Remover
DonsDeals: Conficker Worm Called An Epidemic
DonsDeals: CrowdStrike - HTTP iframe Injecting Linux Rootkit (Vrius info)
DonsDeals: Download Comodo System-Cleaner
DonsDeals: Facebook Users Targeted By Fake Virus Alert
DonsDeals: Firewall & Antivirus Software Suite - Internet Security | Comodo
DonsDeals: Free Agent: Linux Firewalls and Antivirus--Needed or Not? - PCWorld
DonsDeals: Free Desktop PC Security - Free Downloads Keep your PC Safe | Comodo
DonsDeals: Immunet v2 update on the way: adds multi-engine malware and virus scanning to cloud-powered core
DonsDeals: Jotti's malware scan
DonsDeals: Linux users be Aware of this Trojan - Hand of Thief malware could be dangerous (if you install it) - TechRepublic
DonsDeals: M86 Security Finds URL Filters Anti Virus Scanners Ineffective
DonsDeals: New Kneber Botnet Tied To 75 000 Systems
DonsDeals: PC Hell: Free RootKit Removal Tools and Software
DonsDeals: Privacy = Security and Security = Privacy...
DonsDeals: Probably the best free security list in the world
DonsDeals: Probably the Best Free Security List in the World
DonsDeals: Probably the Best Free Security List in the World - Updated 28. August 2012
DonsDeals: Re: Viruses now penetrating deeper | Tech News on ZDNet
DonsDeals: Setting up Avast Antivirus to Protect your Windows PC...
DonsDeals: ‪TDL4 MBR Rootkit Virus Alureon TDSS Removal by Britec‬‏ - YouTube
DonsDeals: The first Linux botnet? | ITworld
DonsDeals: There are Viruses, Trojans, Worms and Rootkits, that can infect a Linux OS
DonsDeals: Trinityhome : New TRK 3.4: easier than ever before
DonsDeals: Updated Conficker Ropes Victims into Rogue Antivirus Scam
DonsDeals: VirSCAN.org - Free Multi-Engine Online Virus Scanner v1.02, Supports 37 AntiVirus Engines!
Download Enhanced Mitigation Experience Toolkit 4.1 from Official Microsoft Download Center
Download RogueKiller (Official website)
Download System-Cleaner
Firewall & Antivirus Software Suite - Internet Security | Comodo
Free Antivirus for Windows - Open source GPL virus scanner
Google Translate - http://www.chkrootkit.org/download.htm
Hand of a Thief malware targets Linux users’ bank accounts | Apps and Software | Geek.com
Hand of Thief malware could be dangerous (if you install it) - TechRepublic
How to Detect Rootkits on a Computer | eHow.com
Jotti's malware scan
KlamAV
KlamAV - ClamAV for KDE | Free Development software downloads at SourceForge.net
klamav - Google Search
KlamAV GUI Screen Animation
Linux Today - Hand of a Thief malware targets Linux users' bank accounts
Linux Virus - Google Custom Search on DonsDeals Blog
Lynis
'Neverquest' trojan threatens online banking users - Computerworld
New Linux Rootkit Emerges | threatpost
News | VirusBlokAda
Online banking faces a new threat - Securelist
online virus scan file upload - Google Search
Powerful Free Microsoft Security Tool EMET has Been Updated
Probably the Best Free Security List in the World
Remote PC through VPN Access - Secure Remote Access | Comodo
remove sasser virus - Google Search
remove sasser virus - Google Search
RogueKiller - CNET Download.com
rootkits computer - Google Search
Rootkit - Wikipedia, the free encyclopedia
Search results for Gizmo's Freeware website
The Rootkit Hunter project
trinity - Google Search
Trojan horse (computing) - Wikipedia, the free encyclopedia
trojans computer - Google Search
Trojans - Google Search
trojan.tdss-7762 - Google Search
Trojan - Trojans and Viruses in Computer Networking
Unhide homepage - Welcome
VirSCAN.org - Free Multi-Engine Online Virus Scanner v1.02, Supports 36 AntiVirus Engines!
wine gecko - Google Search
WinPlanet Downloads for Windows Desktop Utilities
worms computer - Google Search
Neverquest Trojan: Built to Steal from Hundreds of Banks | We use words to save the world | Kaspersky Lab Official Blog
Neverquest banking malware more dangerous than Zeus trojan - TechRepublic
Security firm IDs malware used in Target attack - Computerworld
A First Look at the Target Intrusion, Malware — Krebs on Security
IE10 under attack as hackers exploit zero-day bug - Computerworld
Adobe Releases Fix for Two Shockwave Player Vulnerabilities | Digital Trends
How to Protect Your Linksys Router from TheMoon Malware | Digital Trends
New Malware Targets Linksys Routers
Surviving the Death of Windows XP
What you need to do about Heartbleed - Computerworld
Fake Antivirus Targets Firefox | PCWorld
Remove Fake Microsoft Security Essentials Alert by Britec - YouTube
Adobe patches critical flaws in Flash Player and AIR - Computerworld

Wednesday, October 22, 2014

Autos - Custom OBD II Gauge in With OEM Look, that works in a car clock

Here is a cool in Dash OBD II Gauge Project. That displays the info, in the Car's Clock. And it's Open Source too!:) Check out the video, links and How To, below...

Don

Custom OBD II Gauge in With OEM Look


https://github.com/stirobot/arduinoModularTFTgaugesI built a custom OBD II gauge in the clock of my Subaru BRZ (GT86, FRS) and a lot of people wanted me to build them one. Here is how you can build one of your own. My wife is about to give birth to our second son and all the code is open source, so I have nothing to lose by posting this.

(I still may sell the installation as a service or possibly the packaging of a kit in the future, but that won't prevent others from using the open source pieces to do what they want in their own installations, other cars, other displays, etc. and frankly there is no money to be had in this. So, I'd rather share it with the DIY community at large.)

I'll try to point out where I did things that are specific to my model of car and where you might want to change things to suit your needs. Hopefully this will allow others to build on what I've done.

The all important github link:https://github.com/stirobot/arduinoModularTFTgauges/blob/master/oledOBDgaugesSmallIrvinedLib.ino

And more generically my code is here: https://github.com/stirobot/arduinoModularTFTgauges

The car specific forum where all of this is getting discussed: http://www.ft86club.com/forums/showthread.php?p=1967204#post1967204

Step 1: What you will need to do this (parts/tools/software/etc)

Parts (generic/specific):

-An Arduino or Arduino clone – I specifically use the adafruit pro-trinket for its small form factor and 5v logic.https://www.adafruit.com/products/2000

-STN1110/ELM327 board. I chose the Sparkfun one because it is stable, uses UART for communication and doesn't cost and arm and a leg. https://www.sparkfun.com/products/9555

-Assorted hookup wire

-128x32 SPI monochrome OLED display. I used the adafruit one. The ebay ones may work just as well, but I haven't tested them.

-Your OEM clock. I used the OEM clock from a Scion FRS that I got on ebay.

-Some resistors (for the button setup)

-Optional – sensors (autometer oil temp, autometer oil pressure, acceleromter, pressure, temperature). I have some arduino code that will let you plug analog sensors into a system like this. I'll make one of the “steps” pages about this.

Tools:

-Soldering Iron

-Wire stripers

-Wire crimpers

-Helping hands

-scissors

-dremel tool

Code libraries used:

-Arduino ELM327 library: https://www.clusterfsck.io/blog/2014/05/23/arduino-elm327-library/ . I thrashed around with the UART comms to the OBD II board for a long time. (you can see it in my crummy code for the 1.8” TFT version of this). This saved my project and my sanity.

-The Adafruit libraries for the OLED screen and tutorials: https://learn.adafruit.com/monochrome-oled-breakouts I love supporting this vendor as they always provide a lot of extras when you buy from them (support, working code (emphasis on working), tutorials, etc.)

Software:

Sublime Text2 Stino plugin (because real syntax highlighting is refreshing) - http://robot-will.github.io/Stino/

the dot factory – for making monochrome bitmaps into arrays so you can display them on the screen (That's how I got my icons)

windows paint – for drawing icons and splash screens

Go there...
http://www.instructables.com/id/Custom-OBD-II-Gauge-in-With-OEM-Look/


Autos - Custom OBD II Gauge in With OEM Look, that works in a car clock


Ceci N’est Pas Une Clock
I built a gauge...it replaces the clock... - Scion FR-S Forum | Subaru BRZ Forum | Toyota 86 GT 86 Forum | AS1 Forum - FT86CLUB
Custom OBD II Gauge in With OEM Look
stirobot/arduinoModularTFTgauges · GitHub
BRZ clock replaced by obd ii gauge - YouTube

A List of 25 Linux Performance Monitoring Tools

Here's an Article, with a list of 25 Linux Performance Monitoring Tools. Most are Command Line only. But, some are GUI Apps and Server Monitoring Tools. Check the links below for more...

Don


25 Linux Performance Monitoring Tools - Go there...
http://linoxide.com/monitoring-2/linux-performance-monitoring-tools/


Linux System and Performance Monitoring Apps


6 More of the Best Free Linux Monitoring Tools - Linux Links - The Linux Portal Site
Amazing ! 25 Linux Performance Monitoring Tools
Arpwatch Tool to Monitor Ethernet Activity in Linux
Collectl is a powerful tool to monitor system resources on Linux
Discovering and Monitoring Hardware in Linux | Linux.com
DonsDeals: Monitorix - A Lightweight System and Network Monitoring Tool for Linux
How to Add Linux Host to Nagios Monitoring Server Using NRPE Plugin
How to Monitor and Log Network Traffic on Linux Using vnStat
How to Monitor and Log Network Traffic on Linux Using vnStat
How to monitor and troubleshoot a Linux server using sysdig - Xmodulo
How to set up a web-based lightweight system monitor on Linux - Linux FAQ
How to set up a web-based lightweight system monitor on Linux - Linux FAQ
How to set up web-based network traffic monitoring system on Linux - Linux FAQ
How to set up web-based network traffic monitoring system on Linux - Linux FAQ
Install and Use nmon Tool To Monitor Linux Systems Performance
Install Thruk Monitoring Webinterface for Nagios, Icinga on CentOS/RHEL
Introducing LibrePlan: Project Planning, Monitoring and Control
» Linuxaria – Everything about GNU/Linux and Open source Thruk a Monitoring Webinterface for Nagios
Linux Today - 25 Linux Performance Monitoring Tools
Linux Today - 6 More of the Best Free Linux Monitoring Tools
Linux Today - Arpwatch Tool to Monitor Ethernet Activity in Linux
Linux Today - Collectl is a powerful tool to monitor system resources on Linux
Linux Today - Collectl is a powerful tool to monitor system resources on Linux
Linux Today - DataSift Launches Open Source Query Builder, Aims To Embed Social Monitoring In Enterprise Tools
Linux Today - Discovering and Monitoring Hardware in Linux
Linux Today - Google to use open-source sensors to monitor I/O conference
Linux Today - Help crowdfund this open-source crowdsourced environmental monitoring platform
Linux Today - How to Add Linux Host to Nagios Monitoring Server Using NRPE Plugin
Linux Today - How to monitor and troubleshoot a Linux server using sysdig
Linux Today - How to monitor online prices on Linux
Linux Today - How to set up a web-based lightweight system monitor on Linux
Linux Today - How to set up web-based network traffic monitoring system on Linux
Linux Today - Improving the Multi-Monitor Experience in Ubuntu
Linux Today - Install Innotop to Monitor MySQL Server Performance
Linux Today - Install Thruk Monitoring Webinterface for Nagios, Icinga on CentOS/RHEL
Linux Today - Install Zabbix Monitoring Tool On Debian 7 / Ubuntu 13.10
Linux Today - Monitoring your server with tmux
Linux Today - Monitorix 3.4.0 Released: A Lightweight System and Network Monitoring Tool for Linux
Linux Today - Monitorix (A Lightweight System and Network) Monitoring Tool for Linux
Linux Today - Monitor network traffic tutorial
Linux Today - Monitor per process network bandwidth on linux with nethogs
Linux Today - Monitor your wireless network with Wireshark
Linux Today - Real Time Interactive IP LAN Monitoring with IPTraf Tool
Linux Today - Switching Monitor Profiles
Linux Today - Threat Stack Offers Security, Monitoring for Linux-based Cloud Deployments
Linux Today - WiFi Monitor Mode with Android PCAP Capture
Linux Today - Zenoss Core 4 Advances Open Source IT Monitoring
Monitoring your server with tmux | Linux User
Monitorix 3.4.0 Released - A Lightweight System and Network Monitoring Tool for Linux
Monitorix (A Lightweight System and Network) Monitoring Tool for Linux
Monitor per process network bandwidth on linux with nethogs
Monitor your wireless network with Wireshark | Linux User
Switching Monitor Profiles | Linux Journal
Threat Stack Offers Security, Monitoring for Linux-based Cloud Deployments
How to set up a web-based lightweight system monitor on Linux - Linux FAQ
How to set up web-based network traffic monitoring system on Linux - Linux FAQ


System


LPRng - Print server
CUPS - Common UNIX Printing System
XCruiser - 3D filesystem browser
GRUB - bootloader
TDFSB - 3D filesystem browser
Ethereal - Network Analyzer
Information: ROX Desktop
MTR - ping/traceroute tool
Sudo
Wireless Tools for Linux
lshw :: HardwareLiSter - ezIX
File Roller - Make/extract file archives
synaptic - APT GUI
RDist - file syncronization
Speedtouch - USB DSL modem
FreeType
PPPoE - PPP over Ethernet
SANE - Scanner Access Now Easy