Saturday, December 31, 2011

Daily Social Scam Report (12-31-2011)

 Time for the last social scam report of the year!

  Celebrate 40 years to Starbucks, Get a $50 Giftcard (Limited Time Only):

    One of the new social scams to start spreading around are Starbucks gift cards. Like always free facebook gift card offers on Facebook are scams 99.9999999% of the time and I highly recommend you do not click on the link and inform your friends they are scams by pointing them to a site like IGL-Security. So please avoid this scam.

 Receive a free $50 Walgreens Giftcard (Limited Time Only)

 Just like the Starbucks scam you will not be getting anything with this Walgreens gift card message so please ignore them.

Sunday, December 25, 2011

Common Malware Alert!: Ping.exe

 You may have accidentally visited a malware infected site and have some new weird file called ping.exe running in your process taking up a bunch of CPU. Well as I have been monitoring the trends of malware removal at the GeeksToGo and Bleeping Computer Malware removal forums I noticed a bunch of people have been complaining their machine has this Ping.exe file running. The first thing to note is that not all of the ping.exe files are bad so if you see it on your machine it does not mean you should go and delete it. If your computer is acting weird don't panic and start downloading computer security software left and right. Instead stay calm and go follow the directions at a site like GeeksToGo Malware Removal Forum or Bleeping Computer Malware Removal forum.

 This infection family seems to be spreading quite actively at the moment so make sure you keep your AV program updated with the latest program version of database version. Also make sure you copy of Windows is updated with the latest patches.

Tuesday, December 20, 2011

Be on the lookout for Phone Scammers

 As I was on twitter this morning I noticed a tweet from my friend that said their grandparents were called by a scammer saying that he was in jail and needed cash. The story went like this:

 "An unknown person called my Grandparents today sobbing and claiming to be me. He claimed to have driven with two friends out to Las Vegas to attend a friends mom's funeral. (The friends mom was only 44.) While there the friends that he (purportedly me) had driven with got drunk and we were in a car wreck and he (I) broke my nose and was jailed yesterday and spent the night in jail. His nose was broken. He begged
Grandma not to call my parents, since they didn't know yet and he wanted to tell them himself, and promised he would as soon as he got home. He was now with the public defender and was calling to get money to post bail. Ultimately it boiled down to needing $4,225 today so that he (I) wouldn't have to spend another night in jail"

 So please remember to always check the whole story out if you get a call like this and don't give any more until you are really sure this is them. It is unclear so far how the name was leaked along with their phone number so if you get a call like this make sure you check all your online accounts to make sure nothing was leaked out. Make sure you inform people you know that may fall for this that scams like this are going around (especially in this holiday season).

 

Be on the lookout for Christmas Scams

 So as this Christmas season comes upon us the scammers will most likely start trying to take advantage of those looking for last day deals. So please be on watch for these scams and have a Merry Christmas

Monday, December 12, 2011

SparkTrust Review

 I learned about SparkTrust after twitter from fellow security researcher Jerome tweeted that he was now working for the company and the malware research site he runs would be continued to be ran partnered with that company. I later saw a tweet about a free site vulnerability report that they were offering so I decided to take look at it. You may have noticed a link to it from the Webmaster Security tips page here on the IGL-Blog. After doing some research on it and trying it out myself I have became a partner with them because I thought the service is handy. Now I will review it for y'all looking for Website Security Services or programs to help protect your website and it's reputation.

 To get started was pretty simple, just fill out a short sign up sheet giving URL, email and other simple details. You will then be given a choice to either A. Upload a file to your web server or B. Add a meta-tag to your site's html. After a small issue with the way blogspot handled HTML Validation everything was good (thanks to the help of Jerome) and SparkTrust did a sweep of my site and sent me a report to my email.

 The report included a lot of information of what it found, but on top of that it was written in clear easy to understand language. It was clear enough that I think I could recommend it to someone who did not like to spend a bunch of time reading into computer security techniques. How ever this is just what the free vulnerability service provides.

 SparkTrust offers other services (which I have not go to test) which offers website owners access to a dashboard that provides over all status for all the sites they manage, malware blacklist monitoring, site malware removal service, access to experts that can help you secure your site. Overall this seems like a very handy service that is simple to use for web masters that don't want to spend a bunch of time researching and finding out about website security but still want to keep their site(s) secure. I highly recommend you check out their free report and see if it can come in handy for you.

Social Scam Report 12-12-2011

 Another new scam is starting to make it's rounds through popular social network site Facebook as reported by FaceCrooks.

 The scams main message is "Wow! Do you remember this photo?" and then below the post is a bunch of randomly tagged friends. Taking a look at the VirusTotal reports for two of the links only Kaspersy is reporting them as malware. I have not taken a deeper look at the links and what they go to so please keep an eye out for links like this.

 The next time of scam that has been going around recently (especially in this Christmas season) are the free gift card scams. Doing a quick search I have ran into the following:

 Get a Free CostCo Gift Card (Limited Time only - for all Facebook users)
 Get a free McDonalds Gift Card
 Get a free Amazon Gift Card (Limited Time Only)

 If you see any friends post one of these inform them its a scam and they will not be getting a free gift card.

 

Thursday, December 8, 2011

Twitter Spambots taking advantage of VA Tech Shooting

 As most of you may have heard today another shooting took place at Virginia Tech. In fact all day today #VirginiaTech has been trending on twitter as people have been searching for news. Well because of this Twitter Spams have starting attempting to take advantage of those keeping an eye on that trending topic. While watching the trending topic you may have seen tweets like the following:

 My ex say im ugly, can you look at my FB pics and DM me wah u think?

 Can you DM me & look at my FB profile n tell me do I look fat 2 u?

 My ex says im fax can u look at my fb pix & dm what you think?

 The spam messages are spreading through a short google url. They learn either to some random url or to a blogspot blog. Scanning on VirusTotal reported all avs found the html of the site clean, doing a URLVoid said only MyWot found it suspicious. So please do not click these links are report them to Twitter as spam.

Wednesday, December 7, 2011

Comodo vs AV-C Part 3

 At first it seemed like things were over between Comodo and AV-C however it seems like the public discussions between them are not over. Comodo has offered to pay AV-C $50,000 to have an auditor confirm that AV-C tests are really independent. AV-C has since responded saying they are already in the process of getting ISO 17025 accreditation and requested that once they get accreditation that the 50k gets donated to a charity of AV-C's choice.

 So we once again must wait and see what happen, and wait for the results of AV-C accreditation. It's nice that AV-C wanted the money donated to a charity and I hope the money goes to good use.

Tuesday, December 6, 2011

Do you trust your download site?

 CNET Download.com is one of the internets most popular download sites. Out of all the download sites out there Download.com from CNET is normally my first pick to grab files when I need to download something. Looking at the latest Krebs on Security report it seems that CNET is not including PUPS (Potentially Unwanted Programs) with their download. One reported install users are getting if they don't pay close attention to their install is the Babylon toolbar. Users have reported issues with trying to remove the toolbar completely and I have seen some people go to sites like GeeksToGo for help to remove the toolbar. Some blogs have even reported getting the toolbar when attempting to install security software, which in my opinion is slightly funny because most of the time users are install security software to remove toolbars not add them. Now it's important to note not all CNET Downloads are offering the toolbar, I just download Panda Cloud from CNET and got the same installer I got when I downloaded from the official Panda Cloud site.

 So it all comes down to can you download site be trusted. Personally I don't feel it's right to include these PUPs with your download. Now it would be different if this was some well known vendors toolbar (Yahoo, Google, Bing, Aol) for they are trustworthy but instead it's a toolbar that people have been having issues removing. So until this whole thing gets cleared out I will be using other download sites such as Softpedia or I will just download the product directly from the vendor.

Monday, December 5, 2011

Daily Social Scam Report (12-5-2011)

 For a while the profile view and profile stalker Facebook scams calmed down, however they are back in full swing now. Here is the look at the latest social scam messages:


LOL,friends ! I got my Top Boy stalker and Top Girl stalker of my Profile ! That's a so Sick ! check yours

 This message is spreading through a social app called Profile Activity and is leading to a bit.ly shortened URL. Like it was before its a scam so please don't click on it.

My total profile views today: (random number)
Male Viewers:(random number)
Female Viewers: (random number)
See your total views and who is viewing you here:

 Once again this is a scam so please ignore any posts like this. Now lets look at some of the scams going through twitter at the moment.


 My Total profile views today: X Male viewers: X Female Views: See your total views and who is viewing you.. (url)


 Twitter does not let you see who is viewing your profile so those links are scam do not click on them.

 

Why YouTube tests don't show the full picture

 YouTube Antivirus reviews, some like them other do not. What makes these tests so popular and what dangers can you face by relying fully on YouTube reviews?

 YouTube Antivirus tests do have some good things going for them:

 1. Users can see the UI, Alerts, and the program in action before they install it on their machine. That way they have some idea of what they are getting in to when they install the program.

 However although YouTube Antivirus Tests bring users closer into what is going on YouTube tests also have a lot of problems.

1. The Sample size is not very large: A majority of YouTube tests only test Antivirus Products against 10 samples. Ten samples out of all the malware out there is not a good way to judge how good an AV product is. You need a lot more samples then that to get a good idea how an antivirus is.

2. Not enough sources of malware: Most of the time the malware urls in YouTube Antivirus tests come from popular well known malware black sites such as MalwareDomainsList (MDl), MalwareBlackList, ScumWare, and so on. The problem with this is that all the antimalware vendors are aware of this site and are most likely importing results as they become available. So it does not show a true picture of ZeroDay malware detection rates.

3. The test is done on one machine: Just because the product is light on the video machine does not mean it will be light on your machine

 Although my list of bad things is longer then my list of good things I still find it useful to watch YouTube reviews of AV programs to see what the UI is like and what the alerts are like. So if you watch YouTube Antivirus tests don't take them as an 100% accurate showing of how good an AV is.

Thursday, December 1, 2011

Dear Apple,

 Some of you may have recently seen the reports about Siri not telling anyone where abortion clinics are. Now I am not a huge Apple fan, I do not own a single Apple product in my home at the moment. However I want to say one thing to Apple: Please don't change the way Siri works. I am glad that the Tim Tebow ad was shown on national TV, people need to stand up against Abortion and the murdering of these kids. I want to encourage Apple to to be the same way and to stand up against something that is wrong..

 I am glad that Siri is refusing to help in the killing of innocent children and I honestly hope it stays that way. Remember what Exodus 20:14 says, it says "You shall not murder". Abortion is a form of murder, its the murder of unborn children.

 So Apple what do you say? Will you take a stand and keep Siri the way it currently is or will you change it just because someone asked?

Wednesday, November 30, 2011

What is an Independent Antivirus Tester?

  With all the talk about Comodo and AV-C lately many people are requesting that products are tested from an Independent Antivirus Testing corp. However what is an independent antivirus testing group? AV-C "claims" to be an Independent Antivirus testing group, is it really independent?

  First we must define was an independent company is. I did a quick search online and the definitions I found where the following: 1. not influenced or controlled by others in matters of opinion, conduct, etc

  So how can a antivirus testing group be independent and how does it compare to antivirus testers such as av-c. First off I believe the test should not be commissioned or sponsored by an Antivirus vendor. The vendor should not be able to pick who is going to be up against or provide samples for them to be testing against. Avast wrote a blog post about it a while ago saying how they could hire a company and have them test their product against 10 samples and they could have an 100 percent detection using some randomly named "independent" testing company.

 Now let's compare this to AV-C. With AV-C you do not get to give them the samples to test against you, you don't get to pick who you were testing against, and no AV vendor sponsors the test. Everyone pays to get in but no one pays more then another. Plus the price to get in does not give you an advantage. Pbust said it best here on Wilders Security Forum:


"Paying testers is not the problem as long as all vendors pay the same fee structure and all get the same information, options for configuration and the facts are disclosed. Its a leveled playing field." -Pbust @ Panda Security

  The problems occur when payment is different from one vendor to the rest. Like for example sponsored tests where the sponsoring vendor chooses or provides the methodology, tested vendors, defines cases which should be tested and even goes as far as providing the samples. If you want to complain about non-independent tests then go after the sponsored tests. Those sponsored tests are the easiest to manipulate so that they say exactly what you want them to say.

  Now as you can see I mentioned a price to get in. This is the big debate for an independent AV testing group, how should they be able to get funds? However it goes beyond that how should any AV testing group get funded? Yeah I know many of you are thinking "if they are independent why should they get paid at all?" well I want to ask you is if the vendor is not paying a set amount how else can a tester get fairly funded? Every tester has to get funded some way or another. Magazine testers make money from advertising sales, some testing groups get paid to test a product a certain way, how can a AV testing group be 100 cash independent yet still have enough cash to do a lot of advance testing?

 Another big question is how do you hold a AV testing group accountable and know they are being truthful? Do you force them to turn over each sample they test with? Personally I can't see one simple way something can be put into place to make sure the results are truthful. Sometimes you just have to have trust in the tester.

  So to close I want to ask you, how should AV testing be done "fairly" in your opinion? Leave your thoughts in the comment section below.

Tuesday, November 29, 2011

Comodo vs AV-C part 2

 Well Comodo's CEO has put out a second blog post about AV-C, so far this has became a pretty popular topic among the computer security discussion websites. Popular computer security forum Wilders security has a topic full of discussion and so does Malwaretips, I recommend you keep an eye and both for the latest news.

 So as I continue to watch this unfold somethings continue to stick out to me. First off it seems like both sides were not native English speakers and the email may have been quickly put together. Taking a look at this quote "We are waiting for a response, if not, we may post our reply on" AV-C was saying they may have to post a public response about the incorrect AV-C Information. So it first all comes down to if you think that was a threat or not.

 The next thing it really comes down to you if they think someone is going to do something unethical to you do you do something unethical back? As they say fight fire with fire and someone is going to get burned.

 So what do you think about the whole issue? Leave you thoughts in the comment section below.

Monday, November 28, 2011

Facebook Christmas Tree App

WARNING!!!!!! ..... Do not use the Christmas tree app. on Facebook. Please be advised it will crash your computer. Geek squad says its one of the WORST trojan-viruses there is, and it is spreading quickly... Re-post and let your friends know!!
  You may have seen that message as you checked your Facebook lately and wondered what it was all about. Well it is important to know that GeekSquad (http://www.geeksquad.com/intelligence/blog/security-alert-facebook-%E2%80%9Cchristmas-tree%E2%80%9D-application/) was not the one who started this message and has never found a Christmas tree virus. ESET researchers have also not found proof that the infection is real and is once again claiming that its a hoax like it was last year.
  If you see a friend posting this on their social network accounts inform them that the alert is most likely a hoax and the Christmas Tree app at the moment does not exist.
 

Sunday, November 27, 2011

AV-C vs Comodo

 For those of you who enjoy reading up on Antivirus news and vendors blogs you may have seen this post from Comodos CEO about AV-C Antivirus testing method and their behavior. If you have not read this post I recommend you read it because it does contain some interesting details about Comodo. Once you have read that I recommend you read AV-C response to that post.

 First off in my opinion I really don't think this should have ever gone public. The emails that were private really should not have been posted. However it's all going to come down to do you trust Comodo or do you trust AV-C? However you can keep up with thoughts from around the web from Comodos own forum here or a topic about it on Wilders Security forum here.

 Another point this brings up is "How much do you trust your friends or family to correctly answer a security program alert"?  While most other vendors are pushing silent sandboxes and other security software Comodo is still pretty talkative. Do you trust people will correctly answer most of the alerts correctly?

 So how do you feel about vendors paying to get their product tested? In my opinion I feel as long as they are all being charged equally then it is fair. Share in the comment section below how you feel on this whole issue.

Friday, November 25, 2011

Update your parents browser day

 So after you ate all your turkey and went shopping like it was the end of the world what else can be done? How about taking part of a movement to help make the web a safer place? Today is update your parents browser day, a movement with a goal to rid the world of all out dated browsers. According to recent stats from W3 Schools 1.3 percent of IE users are still using IE 6. Yes this is the internet explorer version that was released in August 2001. According to Stat Counter IE 6 was the 10th most popular browser version this month on sites with the Stat Counter plugin installed.. Also according to that same chart Firefox 3.6 is the 6th most popular browser this month. Though not as outdated as IE 6 I always recommend having the latest version of your internet browser installed.

 So what are the the risks of running an old web browser? First computers with out dated web browsers are open to more security vulnerabilities due to unpatched security holes. In fact according to Secunia Internet Explorer 6 in its life time had 260 vulnerabilities and 155 Secunia advisory's. Lets compare that to Internet Explorer 7 which has 186 vulnerabilities and 58 Secunia advisories, Internet Explorer 8 has 112 vulnerabilities and 26 advisories, and Internet Explorer 9 which so far has only had 26 vulnerabilities and 4 advisories. As you can see with that trend the latest browsers are much safer then an out dated one.

  However if you are going to take the time to do this for your parents I recommend taking it one step beyond. Secure your whole parents machine and give it a tune up. Make sure they have the latest AV version install and it has the latest malware database loaded. Make sure you don't see any malware their AV may have missed. Also remove old programs they no longer use so their hard drive is cleaned up. Then run Windows Update and make sure they have the latest patched downloaded and installed.

Monday, November 21, 2011

Mobile Viruses, Malware, Scams?

 You may or have may not seen Chris DiBona's post on Google+ about the security of mobile smartphone (mainly Andoird) but I do encourage you to read it. However I do have some concerns I want to share about some of the views posted.

 All the major vendors have app markets, and all the major vendors have apps that do bad things, are discovered, and are dropped from the markets.

 Yes that is true but all it takes is one thing to get passed to have someone get their personal information stolen. Sophos has found both SpyEye and Zeus trojan kits for Android Mobile OS. It's not just Android that researchers have found trojan kits for: Symbian, Windows Mobile, and Blackberry baking trojans have also been found. The number of mobile banking malware trojans will most likely continue to rise as more and more people start to do online banking through their smartphone.

No major cell phone has a 'virus' problem in the traditional sense that windows and some mac machines have seen. There have been some little things, but they haven't gotten very far due to the user sandboxing models and the nature of the underlying kernels. 

  They may not have virus problems but they may have malware problems. The term malware and virus seems to have blended into one lately.

No Linux desktop has a real virus problem.
  In my opinion is has no real malware problem because not many people use it. I have yet to see a Linux Desktop in use for personal computer use. Koobface has been able to infect a Linux machine, however doing that may have been an accident on the malware writers part.

Yes, virus companies are playing on your fears to try to sell you  protection sofwareare for Android, RIM and IOS. They are charlatans and scammers. IF you work for a company selling virus protection for android, rim or IOS you should be ashamed of yourself.

 This part I really disagree with. So instead of working ahead and building security software now all of the "small malware" infections that are out there should just be ignored? I mean even Geeks To Go already has a section setup for mobile malware removal in-case mobile malware really takes off. It does not hurt to be prepared.

Friday, November 18, 2011

Daily Social Scam Report (11-18-2011)

 It's time for today's social scam report. Its the part of the blog where we inform you have the latest social scams and spam spreading across the social network:

 Casey Anthony adopting another child:

    This is false, this fake news story has been spreading quickly around the social network making people wonder if it is true. This news is false so please inform anyone you see posting it that it is not true.

 Free Iphone 5! As Christmas is coming Apple has decided to give away free Iphone 5s!

 No Apple is not giving a phone that does not exist yet away for the holidays. So you can ignore all the posts that say this and inform your friends that they are all a scam.

 Find out who your profile stalker is!

 Once again a scam and it's still spreading. In fact this is one of the first scam topics we have wrote about on the IGL-Security blog.

The Facebook Virus

 So November 5th has passed up by but the news of a Facebook virus keeps picking up. Bitdefender has got some more information upon the virus. According to what they have found Anonymous has finished their beta testing of the virus. This information could match up with the big spam wave that just went through Facebook recently. However Facebook responding saying it was due to a Self-XSS vulnerability. So once again please remember do not copy and paste code into your browser bar this is a very dangerous thing to do. Also keep a look out for news relating to this possible Facebook Virus you you can be aware and prepared if it does indeed strike. 

Worst passwords of 2011

 Do you have one of the worst passwords of 2011? Well its time to check and see if your password made the list of worst passwords of the year. Splash Data has came out with their list of passwords you should "avoid" for they are the worst of the year.

 Coming in first place for the worst password if the year is......"password". Yes that is right even with all the press saying not to set your password as password people are still doing that. Followed by passwords such as 1234 and 12345, and so on. Some other passwords that made it on the list were sports (Baseball, Football) so when coming up with a password its a good idea to avoid sports. Another password which seems to be lacking in creativity is "monkey" for it seems a lot more people are using this simple password. Why I don't know but it seems people just love typing the word Monkey.

 When coming up with a password you random words, and symbols (if possible) to help create a stronger password. Make sure you never use the same password at different sites for all it takes is one site to be hacked for hackers to gain access to all your personal sites.

Tuesday, November 15, 2011

Lavasoft: Innocent until proven guilty

 Lavasoft at one point was the most popular AntiSpyware program. It has been one of CNET's top downloads for a while but what is going on with the company now. Lets put some of the part articles and some of the recent articles together and get a glimpse of what is going on:

 Back in May 2011 (source) it was announced that Lavasoft has been acquired by Solaria Fund. Doing a quick Yahoo Search shows the top results of the fund were just news articles about acquiring Lavasoft. A few months later on that some blog article a comment appeared on the SecurityGarden blog saying:

 FYI: After the "secret" acquisition (which, by the way, everyone was told that nothing will change), they fired a whole bunch of people in two strokes, the second being in May 2011.

Two weeks ago (Week 32), the remaining 15 or so employees were told that the Swedish offices will close (the date is not yet as yet).

Lulu have a satellite office in Ukraine where the programming will be done; I guess their "marketing" (for want of a better word) will be driven from Canada.

The end of an era.

  Now a few weeks after being announced is was acquired by the fund it was found that Lavasoft was running under LuLu Software. Now LuLu Software has a bad reputation on WOT which has many reports of their registry cleaning software being a rouge. Now the president of LuLu Software is Eric Gareau which is the former president of Interactive Brands. Back in 2008 Interactive Brands was cybersquatting security vendor urls.

 The Register recently took a look at the contact address for Lavasoft and noticed it matched up with the register address for some InterActive Brand sites and connected with risk sites such according to some vendors such as McAfee which has this report they referenced (McAfee report)

  Now make of this as you wish. Some people may lose trust because of what the new heads of Lavasoft have done in the past. However Lavasoft has not done anything wrong yet since they have been acquired by LuLu Soft. Even though popular online download site MajorGeeks issued a waring saying they would not download it. In my opinion I think its still to early to tell. We will all just have to wait and see what is going on there and if they post a press release on the Lavasoft site. As they say in America innocent until proven guilty.

Sunday, November 13, 2011

Anonymous to release Facebook malware? Is it real?

 Anonymous did not take down the social network a few days ago like some thought, however it seems they may be changing their plan. A few days ago people noticed that they posted a video message saying they were going to invade Facebook with a highly sophisticated piece of malware that would spread through the social network. BitDefender has also detected (via SafeGo) a piece of malware that matches some of the description that is talked about in the video.

 So is this malware actually from Anonymous or is it a hoax? Why would Anonymous decide to start spreading malware instead of its normal actions? Is the malware that BitDefender detected the malware that Anonymous was talking about or is it something else? We will have to wait and see what happens. If more info becomes available I will post about it.

Thursday, November 10, 2011

Steam Hacked

 Gamers this is an important announcement for you: Steam has been hacked. Yes Steam the popular computer gaming service (which even I use) has had their database hacked into. According to reports it was at first thought the hack was just on the forums but it has been found the hack possibly went deeper then what was first thought. Hopefully all of you use Steam Guard which provides an extra layer of security to your Steam account. Something I have personally found very helpful to prevent others from accessing my account from a machine that is not mine.

 Once again this hack is a greater risk to those who use the same password at more then one site. So please use different passwords at different sites. Never share your password with anyone. Also if you hear news about a hack at a site you are a member on change the password as soon as possible on that site.

 If I get more info I will report it here as soon as possible.

Monday, November 7, 2011

Parents continue to lie to get kids Facebook

 So do you help your kids get past the Facebook age rule or not? According to a new study it seems parents have joined the "help my kids lie" side of the argument. Now if you have read this blog for a while you may know my view on the topic: I believe its wrong to be helping kids get around the age limit. Lets take a look at some of the stories across the web: TheNextWeb has posted that Facebook kicks off about 20,000 underage users a day. The NY Times has an article with many different people talking about letting their kids bypass the age limit. However I want to know why? What are they missing out on by not having a Facebook? They would be seeing their friends every day at school. With the age kids are getting cell phones now they most likely can text their friends.

 Now lets take a look at some of the things that the report tells us. The first thing I noticed is that in the survey only 20% of the people responded saying they want the government to try to take action to protect minors account. A majority of them would rather the gov just be like the movie board and provide recommended age. This could work but what about parents who don't pay attention to things like these? In fact I recently (can't seem to find it now) saw a report about someone who was suing Facebook because their underage child made an account. 

 So like always I recommend you having your kids wait till they hit 13 (the official age limit) to get your kids a Facebook. The older they get they should be more mature and should be better at handling a Facebook 

Thursday, November 3, 2011

November 5th is coming up, will Facebook go down?

 Lets go back to last Augest, it was being threatened (see here) that Anonymous was going to take down Facebook. Some people made a big deal about it, others ignored it. However now the date that they said they would take the site down is quickly approaching. As of recently news reports have been more focused on their plans to released information about Mexican Drug Cartels rather then their plans to take down Facebook. Mashable had a short little article about it. The Anonymous twitter page about the plan has not been used since October. Anonymous has also said they are planning to take down the Fox News website on November 5th. So what is going to happen on November 5th? We are just going to have to wait and see if any action takes place.

Tuesday, October 25, 2011

What is the best antivirus program?

 What is the best antivirus program? This topic is highly debatable and causes many online wars over which AV is the best. Well I am here to answer that question so we can finally put this question to rest. So the best AV award goes to.............................none. Now you might be wondering why I am saying none, now please note I am not saying running no AV is best I am saying not one AV is the best.

 To start my "research project" I decided to do a Yahoo! Search and see what would come up if I searched "What is the Best Antivirus" and "Best Free Antivirus". The result's I got (which as you might expect) a bunch of sites and magazines comparing all the antivirus programs to tell you which one is (according to them) "the best".

 Now the problem with these "tests" is that one size does not fit all. It's pretty unrealistic that all of us have malware files just sitting on our desktop that we plan to execute all at one time. If we were to be running into malware it would most likely be from a drive by download (or even an illegal download) so even if all the AV's only missed one infection that could be the infection that infects the machine. If a AntiMalware product does great at protecting from malware from one region but fails in another if you are more likely to download from the region it does well it that product will be better for you even though it may have a lower over all score.

 The next thing that needs to be better for an indivsual is memory usage. You may have a program on your machine that causes high CPU usage for one AV but if you did not have it the AV would be the lightest AV out there. It all depends on what works for you, you should not be forced to change all your habits because your security software is not working for you.

Monday, October 24, 2011

Daily Social Scam report 10-24-2011

 Time for today's daily social scam report

 I love Walmart: Get A Free $1,000 Walmart Gift Card!

 Do you love Walmart? Sure it may be a nice store but they are not going to be giving out $1000 gift cards to everyone on Facebook. So just ignore any messages that say you will be getting free walmart gift cards

 Free Macbook Air

This is something else that will not be coming you way even if you fill out all the information they ask for. On the bright side MyWot already has the site listed as red.

 Free Outback Steakhouse
  
 This scam is still spreading around once again just ignore it.

What is a cloud antivirus program?

 What is a cloud antivirus? The "cloud" has been a popular term lately with Antivirus and Security vendors but what does the term stand for? Lets take a look at what the term stands for and bust some of the myths.

 Using wikipedia to define the cloud we get the following definition: Cloud computing is the delivery of computing as a service rather than a product, whereby shared resources, software, and information are provided to computers and other devices as a utility (like the electricity grid) over a network (typically the Internet). - Source Wikipedia

 Now lets translate this into how its used in the computer security world. The shared resource is the real-time malware analysis service and the information delivered is the malware detection definition. Now this is a very basic and slightly vague way to describe it but I will be diving in deeper later on in this article.

 Now the first thing to remember is that not all AV clouds are equal, not every cloud is designed and works the same way. The first Cloud AV we will take a look at it Panda Cloud Antivirus. The Panda Security cloud is called the Collective Intelligence database. Panda Security describes the CI service here as the next generation of Anti-Malware services. The CI system automatically analyzes the files it receives and classifies them as either goodware or badware. This system is the core backbone of their Cloud Antivirus product.

 The next cloud product we are going to take a look at is Prevx (also known as Webroot SecureAnywhere). Prevx does more behavior analysis on files as they are executed and check them with the Webroot/Prevx cloud server (info here). The on-demand scanners does a much smaller analysis then what is done in real time.

 McAfee has the Global Threat Intell service to help detect new threats. They do a rather good job of outlining how it works in their KnowledgeBase. I have no personal experience of testing this product but I have seen only reports of it blocking new malware so it seems to be working.

 The final type I am going to share about is the telemetry cloud. About every vendor at the least collects telemetry data on all of its machines. An example of telemetry data would be a program detects a file as possibly bad but not enough to detect it as malware so it marks it as suspicious and on it's next update it would send the file to the vendors server. The vendor would then research it and if it was bad it would be added in one of the next threat database updates. This could be considered as one of the first generation clouds.

 Now these are just a small amount of all the cloud products out there. Every vendor continues to keep adding and improving to their cloud network and I have not had time to take a look at every one of them. Some more I can think of off the top of my mind are Kingsoft Cloud, Kaspersky Security Network, Norton Sonar, PC Tools ThreatFire Community Detection, and Rising Security Network the list goes on and on.

 So now lets end some Cloud Antivirus myths:

 Every time a new file is detected the whole file must be sent to the cloud:

 This is incorrect most vendors use an inverse file sig and sends that data to the cloud and only sends the full file to the cloud if it was 100% needed.

 If a Antivirus is a cloud product I can run other security software with it:

  This is also incorrect if a product can be ran with another product has nothing to do with it being cloud supported. If a AV is a cloud AV its still recommended to only use one AV product.  

  

Tuesday, October 18, 2011

DuQu Malware

 Well it seems Symantec may have found the successor of Stuxnet. I am not going to repeat what has already been said but I recommend that you take a look at this Symantec blog post which will provide all the details that are currently known. Also thanks to Mikko from F-Secure I was able to get a MD5 of the sample so here is the VirusTotal analysis of the file.

 When more information comes available I will update this blog post

Monday, October 17, 2011

Daily Social Scam Report (twitter edition) 10-17-2011

 Time for today's social scam report, so for the lack of them I had caught the flu for a bit and was not feeling up to writing them.

 Have you seen that horrible blog about you?

 Some of you may have gotten the DM message with a message similar to the above going around recently. Just so everyone is aware this is a phishing attack and if you click the link you will be taken to a site that will attempt to get you to enter your twitter ID. I do not have a copy of the message in front of me personally but do be on the lookout for this phishing attack.

 New twitter for PC (link)

 Once again their is no new twitter for pc and its once again a phishing scam so please avoid all the links from messages like this.

 For all you twitter users I highly recommend you follow the @safety account to keep up with the latest scam news directly from twitter.

Wednesday, October 12, 2011

Reduce, Reuse, Recycle: Three things you should never do with your password

 Reduce, Reuse, Recycle: It may work good for the environment but it not a good idea when it comes to your online password.. With the news about all the different accounts being hacked it's a good idea to remember the three R's for passwords.

 Do not reduce the password size: Making it simpler for you to remember makes it simpler for hackers to guess. Make sure you use both letters and numbers, Caps and non caps (if possible) so you have a nice strong password.

Do not reuse your password: It may be a good idea to reuse some things in the current economy but your password it not one of them. Just think if one site you have a password at is hacked and the hackers gain access to all the passwords. Then the hackers would be able to simply guess what other accounts you have and use that password and then they would have access.

 Do not recycle your password: It is not a good idea to recycle your password by just making minor changes to it each time. Make sure each of your passwords are not similar so it's harder to guess by hackers.

Another important message from Sony

 As some of you may have seen reports of already people are claiming that Sony has been hacked again. This is because of a new post on their blog that they had detected a massive amount of sign-in ID-password pairs against their network. According to Sony "it is likely the data came from another source and not from our Networks". Also according to the post less then one tenth of all PSN, SEN, and SOE users have been affected. They have locked the accounts the accounts that may have been accessed so the gamers can reset their password.

 As many of you may remember Sony had a large issue before when details of PSN users were hacked and the whole PSN was shut down. Like I recommend before it's also a good idea to use a strong password and to never use the same password at different sites. If any new information is released I will update you.

 Trend Micro did a good job of describing it here

Tuesday, October 11, 2011

Daily Social Scam Report 10-11-2011

 Time for today's social scam report. Sorry about the lack of these daily now that school has started back up I have been busy.

 Take advantage of this special Outback Steakhouse offer! Receive two FREE dinner vouchers today! Act quickly before the supply runs out. With only a few coupons left, they'll go fast!

 This one made me laugh. I saw a whole a post of this scam which said only 108 remaining coupons for free Outback but then a post above it that said 306 coupons were available. Doing a URLVoid it tells me that not services are currently detecting it.

 I saw a real bad blog about you, have you seen this?

 This is a twitter DM phishing attack that has been going through the Twitter social network. Please ignore any messages you get with the message and inform the friend who sent it that their friend has been hacked. Make sure you do not click the URL and do not enter your twitter (or any other) information at the URL that you get sent.

 This girl has a spider living under her skin, she is most likely spidermans daughter

 The spider under the skin scam is back, once again make sure you ignore these messages and tell the person who sent it to you that it is a scam. This message has been going through the social network for a while.

 Get 2 Free Southwest Airline Tickets  

 No clicking on the link will not give you two free south airline tickets. They are a scam so please ignore this message and tell the person who posted it that it is a scam. 

Sunday, October 9, 2011

Daily Social Scam report (10-9-2011)

 So the new Iphone was released the Iphone 4S not the Iphone 5. So what about all those scams that offered free Iphone 5 if you just take a survey? Well first this proves them wrong and next it mean they should all die down. That is incorrect and free iphone 5 messages are still spreading through the social network. Lets take a look at the free iphone scams going through now.

 Test & Keep a Free iPhone 5! <-How can you test something that does not exist? I did a URLvoid and no services were detecting it. I next did a test with WebSense ACE since it will be part of the tech added to Facebook for security. It did not detect anything as bad so the WebSense Engine maybe more for malware tech.

 So once again be careful about these free offers on Facebook and read into things before you share them. You can't get a free Iphone 5 if an Iphone 5 does not exist.

Thursday, October 6, 2011

Be on the lookout for Steve Jobs death scams

 Yesterday as most of you are aware it was announced Steve Jobs had passed away. As many big news stories like this do it has attracted scamers to start making scam and spam posts and pages in different social networks. I have already seen reports from Panda Security (http://pandalabs.pandasecurity.com/r-i-p-steve-jobs/) that scammers are creating fake R.I.P Steve Jobs pages on Facebook to make a push saying Apple is giving away free products because he died. F-Secure (http://www.f-secure.com/weblog/archives/00002248.html) has already found pages on Google that are taking advantage of those looking up his death information. So please be careful online as you are looking up information on his death.

Tuesday, October 4, 2011

Beware of Iphone Spam Emails

 The new Iphone was announced today, not the Iphone 5 many were thinking was going to be released but the Iphone 4s. However that has not stopped spammers from taking advantage of those looking for information on the new device.

 Reports have already came out with malware filled emails going out targeting those looking about Iphone information. This is likely just the start I would expect to see twitter scams, and Facebook scams on the topic to start spreading through social networks soon.

 So please be-careful when looking up information online you don't want to fall into a scam or infect your machine with malware. Malware authors and scammers love to use big news like this to attract people to their bad sites.

Monday, October 3, 2011

Facebook adds more security

 According to a new report that has just came out Facebook has teamed up with WebSense Security to add protection of bad links in Facebook links. This is great news that Facebook is working on improving the security because as I have said I have seen lots of scam and spam links spreading through the social network. You just have to look through some of the past posts here on the IGL-Security blog and you will see what I mean.

 One of the interesting tools I found at the WebSense website is called ACEInsight which is a tool I have just heard about for the first time today. ACE stands for Advance Classification Engine so I ran a quick check on the IGL-Security blog and I must say its a pretty cool tool and does provide a lot of data. If you are looking for URL information this would be one of the tools I recommend. So will this help cut back on the social spam? We will just have to wait and see if the amount of social scams and spam drop.

 If you want to read the full information Websense provides on how it works you will be able to find it here and I must say they do provide a good amount of information. 

Friday, September 30, 2011

MSE update detects Chrome as malware

   If you are a Microsoft Security Essentials user and use Chrome you may have been in for a surprise today. Today Microsoft released one of its daily antivirus updates which caused it's line of security products to detect Chrome as PWS:Win32/Zbot. This lead to a seven page thread of wondering what was going on in the Chrome support forum and most likely had some more posts around the net.

  This just goes to show every product has it's bad days, even ones known for having low FPs. If your Chrome is gone it would be a good idea to go into your security settings and un-quarantine all the Chrome files that were detected. If you prefer not to go through all that just update your AV sigs and reinstall Chrome. Reinstalling Chrome may be the better choice due to the possibility of files being broken when they get restored. Now don't go start complaining that Microsoft detected Chrome just yet this is not as big of a FP as some other vendors made, also I have had other security programs delete my install of Chrome before.

 Update: Google has posted a blog post about the issue and how to fix it.

Sunday, September 25, 2011

Facebook charging spam changes (Daily Social Scam report 9/25/2011)

 Well the Facebook is charging spam posts are going through the social network with a new message. Here is the latest message:


FACEBOOK JUST RELEASED THEIR PRICE GRID FOR MEMBERSHIP. $9.99 PER MONTH FOR GOLD MEMBER SERVICES, $6.99 PER MONTH FOR SILVER MEMBER SERVICES, $3.99 PER MONTH FOR BRONZE MEMBER SERVICES, FREE IF YOU COPY AND PASTE THIS MESSAGE BEFORE MIDNIGHT TONIGHT. WHEN YOU SIGN ON TOMORROW MORNING YOU WILL BE PROMPTED FOR PAYMENT INFO...IT IS OFFICIAL IT WAS EVEN ON THE NEWS. FACEBOOK WILL START CHARGING ..
  Now I am going to be honest. I highly think it would be a bad biz choice to make it free only if you copy and paste a simple message. Now Facebook is not going to start charging, it was not on the news, and you do not need to copy and paste in before midnight. Please just ignore the message and move on. Also before you start doing these copy and paste messages look into them and verify they are true before you post.

Friday, September 23, 2011

Daily Social Scam Report (9-23-2011)

 Time for today's daily social scam report. I only have one really important hoax to request people to stop posting for today's scam report.:

 IT IS OFFICIAL. IT WAS EVEN ON THE NEWS. FACEBOOK WILL START CHARGING DUE TO THE NEW PROFILE CHANGES. IF YOU COPY THIS ON YOUR WALL YOUR ICON WILL TURN BLUE AND FACEBOOK WILL BE FREE FOR YOU

 This was the message that has been going through the social network lately, in fact this message has been so popular that its one of the top searches on Yahoo! Search. Please do not pass the message along, Facebook is free and according to them it always will be. Please research each of these "pass it on" messages before you start spreading it through your social feed. 

 

Thursday, September 22, 2011

Facebook and Privacy

 With the recent changes to Facebook many people have been wondering what their privacy setting's should be. In fact many people just quit Facebook due to fearing they may lose their privacy. Now I have admitted before I am a rather big fan of Facebook. So I will not encourage just quitting, I recommend staying safe and using Facebook wisely.


 1. Set Facebook posts to friends only, however this will only work if you follow another important Facebook rule. Only add people you know. It's not a popularity race to see who has the most friends. In fact I go through my friends list every once in a while and clear out people I no longer talk to. If you want to know random people with thoughts you don't care about the world seeing creating a twitter account for that purpose may be a better idea. Facebook is more about sharing personal things with friends and not posting things for random strangers to see. Twitter is more about sharing your random thoughts with the world and not making personals relations.

 2. Don't post photos and statuses you would not want others to see. Remember latter on in life people that may want to hire you, colleges, and even bosses may look at your profile. In fact people have even been fired due to what they have posted about their job. So always think before you post.

 3. Ignore the spam apps: Please ignore all the apps that say they can tell you who is viewing your profile, tell you to watch some amazing or creepy video, will give you a free ipad, or will give you free facebook credits. They are all a scam and should be ignored.

4. Look at the privacy controls: They are there to be used not just ignored. You can't blame Facebook for not having enough privacy when the controls are there for you. Take action, do not just react.

 5. Follow the TOS, don't blame Facebook when you kid under 13 has a loss of privacy because they have an underage account.

More Lulzsec hackers arrested

 Well media sites are reporting that two more Lulzsec hackers have been arrested. Although the news is being overshadowed by: Cellular South changing its name, HP replacing its CEO, and the F8 Facebook news spreading it still did happen.

 It has been reported that one of the hackers was homeless. One of the hackers is being accused of hacking Sony Pictures when that large Sony hacking spree happened. You can read more of the details over at the FoxNews website and I will post more information as it comes out.

Tuesday, September 20, 2011

Google Plus open to everyone...not really

So today you may have seen the headlines Google Plus is now open for everyone. In fact in the official Google Blog they say its open to everyone. So since they said everybody I decided to go and attempt to sign up, however I was once again welcomed by the "You must be over a certain age to use this feature". Yes Google still has that same age requirement even though they have said they have opened it to everybody.

 So once again as I have said before I will continue waiting for them to truly open their door's for everyone. I greatly discourage anyone to make a new account and attempt to bypass the rules. However I do feel this limit is holding them back. Let's take a look at Facebook, I know a lot of parents have gotten into Facebook because their kids wanted to create an account so they made one. Once they made one they learned they really liked it and decided to stay expanding the number of members on Facebook.

 So I am sorry I have no news on when the age limit of Google Plus will change. As I watch my blog stats I notice a lot of people reaching my site because they are looking up information about the age limit. So what are your thoughts? Share you thoughts down in the comment section to share with the world how you feel about it.

Sunday, September 18, 2011

Daily Social Scam Report (9-18-2011)

  For today's daily social report we are going to take a look at some of the hoax's going through the social network.


ALERT..... ATTENTION!!!!! IF ANY OF YOU GET A PADLOCK ON TOP RIGHT HAND CORNER OF FACEBOOK HOME PAGE SAYING YOUR SECURITY IS LOW.. IGNORE.. DO NOT, DO NOT, DO NOT ANSWER THE QUESTIONS.. IT IS SO HACKERS CAN ACCESS YOUR ACCOUNT
  So some of you may have already seen this hoax going through the social network. Facecrooks  has already disproved this one. I highly recommend before you going and start copying and pasting alerts to go and research them before you spread them.
 
WARNING ! ! ! ! THIS NOTICE IS DIRECTED TO ALL ON FACEBOOK: IF SOMEONE
IN YOUR PROFILE OR A FRIEND SENDS YOU A LINK THAT SAYS "VISIT THE NEW FACEBOOK", DO NOT OPEN. . . IF YOU DO, YOU CAN SAY GOODBYE TO YOUR FACEBOOK PAGE! THIS IS ACTUALLY THE WORK OF A HACKER WHO STEALS YOUR DETAILS AND REMOVES YOU PERMANENTLY FROM YOUR OWN PAGE. PLEASE COPY......paste ....not just your friends......but everyone should know it...pls.
 
 To be honest I have not yet seen this one but this one sounds possible. However I not recently seen any reports of this happening recently.
 
 
WARNING!!!!! DO NOT ACCEPT FRIEND REQUESTS FROM~~~BOBBY ROBERTS~~~Profile picture is four colored picture~~ A hacker and fake name!!!! the name will DESTROY EVERYTHING!!! Please... COPY THIS TEXT ON YOUR STATUS SO THAT YOUR FRIENDS ARE WARNED******************PASS ON ALONG A.S.A.P
 
 I have also not seen this one happen yet however I do agree on one thing. Do not add someone you don't know. Its dangerous for they can gain personal information about you but I don't see how they can destroy everything.
 
WARNING : Virus spreading like wildfire on FB and My Space, it is a trojan worm called koobface; it will steal your info, invade your system and shut it down. DO NOT open the link Barack Obama Clinton Scandal. If SmartGirl15 requests you as a friend, don't accept it; its a virus. If somebody on your list adds her, you get the virus too. Confirmed on MSNBC AND Snopes. PLEASE HELP TO SPREAD THIS NEW EVERY BODY HAVE TO BE ALERT ON THIS.
   Just thought it would be a good idea to add that snopes actually called this one a hoax themselves. I just thought it would be a good to idea to say that this hoax contradicts itself.

Saturday, September 17, 2011

Daily Social Scam Report (9-17-2011)

 For today's daily social scam report I want to take a look at two of the common questions I get about social networks: "How can I find out who viewed my twitter profile" and "Are the 8 people that appear on the left of my Facebook page my stalkers"

 First I will just plainly say its impossible to see who viewed your twitter profile. I highly recommend you ignore any apps that can say they are able to tell you who viewed it. If you want to make your twitter account secure just set your account as private so no one can see what you are saying without you confirming them.

 The next common question I get is "Are the 8 people that appear on the left of my Facebook page my stalkers?". The answer to that is no it is just randomly selected people you have recently interacted with. The people on the left have nothing to do with who is viewing your profile the most. However it is a very common theory when I talk to people.

Friday, September 16, 2011

Daily Social Scam report (9-16-2011)

 Its time for today's daily social scam report.

 Comment Spam

  You know those comment messages you see at time. The ones that say things like "I just got a new Ippad for $(money).(cents)" or "I just got a cheap machine here:" I highly recommend you do not click them. If a site were to really be giving out Ipads and computers for $19.00 I would have already bought a few and shared the details with y'all!


  

Profile views: 1494  
Boys: 645   
Girls: 844  
Check yours here:

 I was not originally go to post that post but as I was URLVoiding messages switched urls as I was on the other tab. So I went a grabbed a new one and started URLvoiding it and all the messages switched again. It just goes to show how quickly scam and spam posts start and die through the social network.


You vvill be amazed to find out who checks your profiIe and pictures. Click to see your profile activity! >> (bad link) My ProflIe Activity
Total Profile Views::5922
Total Photo Views::45
Total Friends Deleted Me::14
Total Friends Blocked Me::11
  This is the first time I have seen ones grouped like this. However this one just lead to a Facebook app. Remember no app can tell you who is viewing your profile, photos, who deleted you, or who blocked you.
  

Thursday, September 15, 2011

Can I really get a free Apple Product or Dell PC for FREE? (Daily Social Scam Report 9-15-2011)

 The free offer scams have really taken off over the past few weeks. However the two scams I have seen more then others are: "Get a free Apple Product" or "Get a free Dell computer". Why do these scams work so well?

 First because they seem to come from trusted friends. Most of the scam/spam posts say "I love Apple" or "I love Dell". Its all apart of getting them to believe that its a real post. Spammers also program their app to use your Facebook name in the spam posts on your Facebook wall to make it more personal. Most of the sites I have seen running these offers have real nice looking sites which helps them trick people into believing its real.

 So how do these spammers make their money? Eventually in these process you will end up at a survey, and if you take the survey or sign up to some service the page operators will make some cash for referring you to the survey/service.

Wednesday, September 14, 2011

Windows 8: Built-in Antivirus Protection?

 So now that Microsoft has released a lot of information on Windows 8 lets take a look at one of the new Computer Security Features. One of the new security features is built-in antivirus protection. Yes that is right Windows Defender (as it is being called in the current builds) has the full protection of MSE now. So what will this mean? Lets take a look at the possibility's:

 First this will mean we will have a lot of users using one antivirus program. The will make malware writers set their targets upon Windows Defender/MSE more and they will most likely test their "malware" more to make sure it bypasses them. I have already seen malware that disables Windows Defender and sometimes MSE so I think we will be seeing a lot more of it.

 This also leads to the question what will Vendors do? We know before when Microsoft started pushing MSE through Windows Update many vendors were not happy that Microsoft was not giving the user the ability to chose from all antivirus products. So how will the vendors react this time? We will just have to wait and see how they react. Once a good amount of vendors comment/respond to this change I will do a roundup of how everyone responded.

Monday, September 12, 2011

Daily Social Scam report (9-12-2011)

 Its once again time for the daily social scam report:


Get 2 Free Southwest Airline Tickets

 First off I am sad to report that the "Free Southwest" ticket scams and spam posts are back and are spreading through the social network again. Doing a URLVoid no services were detecting the sites as bad.


Get Your Free Dell XPS M1530!

  Yes the get a free Dell computer scam is also back, it seems like these types of free offers are once again rising into popularity. Doing a URLVoid none of the services were detecting the site as bad.

  Free Facebook credits

 No site or service will give you free Facebook credits so please ignore all the messages that say you can get free credits

Sunday, September 11, 2011

Daily Social Scam report (9-11-2011)

 Time for today's daily social scam report:

 
Yeey finally!! Its unbelievable now you can get to know who views your facebook profile and who are your top 10 profile-pictures stalkers.. I am so shocked by the results. Check yours at :
    First I never knew yeey was a word. I did a URLVoid     and found that only one service was detecting it as bad and that was MyWot. The next thing I checked was how many clicks the link was getting, and so far at the time of the writing more then 3000 people have clicked it. Which it is sad to see how many people are falling for the scam posts.
 OMG! i just received my Awsome FREE FB T-shirt, Request your free FB-Tshirt from here:
  This is another one of those free T-Shirt offers as you can see from the Facecrooks security center. Doing a stat check only 1000 people have fell for this one but that's still a pretty large number of people. Doing a URLVoid no services were detecting it as bad.
  Get a free $100 Pizza hut gift card
  Yeah these free offers are real popular with the scammers. Also reported on the Facecrooks site you can see an example of the scammers site. Doing a URLVoid none of the services are currently detecting it at the moment.
 
   

 

Remember those from 9-11

 Today is the 10 year anniversary of the sad attacks that happened on 9-11 in New York. The IGL-Security blog just wants to say thanks for all those that were responders in the attacks. I'd also like to say I will be praying for all those who have lost family and friends in the terrible attacks that hit that day.

 I'm sure all of us can remember where we were at that moment when the towers were attacked. I am also sure that the thoughts of what happened that day will not be something we will forget, and we will continue to remember those from 9-11 in the years to come.

 Now like I always add watch out for scams about 9-11, we have already seen how hackers are willing to hack accounts (NBC News) and spread fake news about attacks and scare people. So be on the lookout for that.

Friday, September 9, 2011

NBC News twitter account hacked

 September 11th is coming up and hackers are taking advantage of it. Now in my opinion its very sad that they would try to take advantage of such a sad time in America's history however I guess they don't care. On the NBC twitter account they hacked they replaced it with fake news that another flight was taken over as seen in these NakedSecurity photos. When I went to take a look twitter has suspended the NBCNews account and it can no longer be accessed. It's just sad and the first posts most likely gave a huge scare to a lot of people, especially since enough people were tweeting about it that it became a trending topic.

 Always remember to use a set of strong passwords to prevent something like this from happening on your account.

Anonymous releasing new Twitter tool

 Well it seems Anonymous is now taking to twitter via a new app to spread their message according to CNET. According to the report they are tired of "unimportant topics" filling up the twitter trending topics. Its going to be interesting to see if this really has an effect on twitters trending topic. Its always possible twitter will change the way trending topics work and then remove anything the app would do.

 So do y'all pay attention to what the trending topics are?

Thursday, September 8, 2011

Daily Social Scam report (9-8-2011)

 Sorry that this daily social scam report is so late, its been a pretty busy day. Here are today's active social scams

 Spam Photos:

 Once again be on the lookout for spam apps tagging you in photos. I saw a spam post going around trying to get you to head to a blogspot to buy some stuff. Not many places do sales off of a blogspot blog.

  Profile views:


   WOW!! I just checked who views my profile, it's really unbelievable to see my profile top visitors. Check yours at (bad short URL)

 Sadly once again doing a URLVoid no services were detecting anything bad with it. Something I did notice is spam urls are starting to use .info domains a lot more. Like always remember no app can tell you who is viewing your profile

 Fake Facebook shutting down messages

  Facebook is shutting down spam messages have traveled across the social network a lot. Remember Facebook is not really going to shut down, just ignore all the messages like this.

 You account will be shut down unless you give us your credit card number. 

  This is once again a scam message going around, please avoid it and do not give anyone your credit card number.  

Wednesday, September 7, 2011

Daily Social Scam Report (9-7-2011)

 Time for today's daily social scam report. First up lets take a look at the profile viewers and/or profile stalker scam/spam posts:

 My profile views are 4856 
 Get your profile views count @

 Checking out the stats about clicks show that link had been clicked 258 times total which although smaller then some waves it still pretty big.

 WOW!! I just checked who views my profile, it's really unbelievable to see my profile top visitors. Check yours at

  Doing a URLVoid  on the URL showed that no services at the moment were detecting the URL as bad. In my opinion link scanner services really should work on black listing bad social scam sites.


 
GREAT NEWS ! Be the first one to use Apple - iPhone 5 as Apple is giving FREE iPhone 5 on demo bases before launch. THIS IS LIMITED HURRY....!Get your free iPhone 5 here HURRY. I got mine :D -
  Great news the new Iphone 5 has not even been released yet, so don't get your hopes to high yet. So don't just instantly believe its true.