Hackers recently attacked several government websites to protest Poland's signing of the Anti-Counterfeiting Trade Agreement (ACTA.)......
Click here to read more ....
Solutions : www.xcyss.in
Cyberspace has become all pervasive. Every facet of a modern life has elements of cyberspace embedded in it. Therefore securing the cyberspace has become a necessity, which can no more be wished away. This space collate the news and views affecting the security of our cyberspace.
A Muslim cleric from Iran has claimed that the social networking site Facebook is un-Islamic and being a member of it is a sin, the ISNA news agency reported.
"Basically, going to any website which propagates immoralities and could weaken the religious belief is un-Islamic and not allowed, and membership in it is therefore a sin," the unnamed cleric said, replying to the news agency's question regarding Facebook and Iranian citizens who are members of Facebook.
"Only the use of websites propagating religious criteria and not leading to any kind of ethical immoralities is of no problem," he added.
Being an Islamic nation, Iran's senior clerics have the right to pronounce opinions on matters pertaining to the society and citizens in the light of religion, which are regarded as decrees to be followed.
Facebook's official figures released last October stated that 17 million Iranians have a Facebook account, despite government restrictions on the Internet.
Iran uses a filtering system developed by Secure Computing Corporation, SmartFilter, to block high traffic Web sites including Facebook and New York Times.
The filter also blocks access to most pornographic sites, gay and lesbian sites, activist sites, news media, sites that provide tools to help users cloak their Internet identity and other sites defined as immoral on various grounds by the government.
Researchers at Computer Security Company Trend Micro are reporting non-government organizations (NGOs) that are getting attacked with backdoor-assaults resulting from a website hijack that unleashed one destructive Java applet identified to be JAVA_DLOAD.ZZC and abusing a security flaw within Java.
The flaw, JAVA_DLOAD.ZZC exploits, is called CVE-2011-3544 and its exploitation results in the installation of TROJ_PPOINTER.SM that in turn plants BKDR_PPOINTER.SM. Linking up with one particular URL, BKDR_PPOINTER.SM exchanges instructions with its controller. Moreover, while on the infected PC, it collects information regarding that machine too.
Furthermore, investigation reveals that the first NGO struck is probably one target from the several within this assault, while the assault as such is particularly devised to hit the targets. Investigators during the probe discovered that cyber-criminals used the attack strain associated with the NGO on human rights for labeling both the newly created file and associated folder within the hijacked Brazilian site: "hxxp://{BLOCKED}.com.br/cgi-bin/ai/ai.jar" and "hxxp://{BLOCKED}.com.br/cgi-bin/ai/ai.html."
Nart Villenueve, Researcher at Trend Micro tested this and discovered more files and their folder that were supported on the same hijacked site although with separate strains, thus strongly indicating that other targets too existed.
What's more, the files recovered via the web addresses such as "hxxp://{BLOCKED}.com.br/cgi-bin/so/so.html," "hxxp://{BLOCKED}.com.br/cgi-bin/hk/hk.jar" and "hxxp://{BLOCKED}.com.br/cgi-bin/hk/hk.html" too contained the identical strain, with the files currently identified as BKDR_PPOINTER.SM and JAVA_DLOAD.ZZC.
Researchers from the Trend Micro Company said that the attack seemed as being related to one wicked plan for striking human rights activists.
HMRC officials have warned taxpayers not to fall victim to "phishing" emails sent out by fraudsters in the run-up to the self-assessment deadline at the end of this month.
People receiving the emails are told they are due a tax refund and are directed to a fake website where they will be asked for bank or credit card details so that the fictitious sum can be paid out.
Once the information has been obtained, the site then redirects people to the real HMRC website. Many victims have no idea that they have been conned until alerted by their banks.
Customers who provide their details risk their accounts being emptied and credit cards used to their limit. The phoney emails resemble HM Revenue & Customs' website (hmrc.gov.uk), using the same graphics, fonts and styling.
Does Mark Zuckerberg have a special place in your heart? Do you like Apple? Scammers are using the popularity of the Facebook chief executive officer and Apple in yet another phishing scheme via email claiming you are the lucky winner of an iPhone and iPad.
Do yourself a favor and delete any message you receive that says:
My name is Mark Zuckerberg, Chief Executive Officer of Facebook. We have recently partnered up with Apple company for a one-time promotional event today, we are giving away free Apple iPhones and iPads to randomly selected individuals who have been fortunate to be picked as one of our newest winners for today. We randomly selected users from our systems database and you have matched with our latest drawing.
We have partnered up with Apple to advertise their most popular product yet, the Apple iPhone and iPad. Once again, we are running this campaign for one-day only. All you need to do is CLICK HERE to check out our web site made for this promotion and fill out this short survey to get yours for free. Simply make sure you enter your email so we may locate our records to guarantee that we have reserved one for you. That is it!
Clicking on the link within the email takes you to a survey which claims that you could win an iPhone 4S.
The incongruence between the promised iPhone and iPad, and the chance to win an iPhone 4S are beside the point. The probability of you actually receiving something from emails like this is zero. In this particular case, the survey takes you to a mobile phone service, which you can sign up for, from which the scammer earns a commission.
U.S. authorities are investigating allegations that an Indian government spy unit hacked into emails of an official U.S. commission that monitors economic and security relations between the United States and China, including cyber-security issues.
The request for an investigation came after hackers posted on the Internet what purports to be an Indian military intelligence document on cyber-spying, which discusses plans to target the commission - apparently using technical know-how provided by Western mobile phone manufacturers.
Appended to the document are transcripts of what are said to be email exchanges among commission members.
The document's authenticity could not be independently verified. But the U.S.-China commission is not denying the authenticity of the emails.
Officials in India could not be reached for comment on the document's content or authenticity. One India-based website quoted an unnamed army representative as denying that India used mobile companies to spy on the commission and calling the documents forged.
The purported memo says that India cut a technological agreement - the details are not clear - with mobile phone manufacturers "in exchange for the Indian market presence." It cites three: Research in Motion (RIM.TO), maker of the BlackBerry; Nokia (NOK1V.HE); and Apple (AAPL.O).
Apple spokeswoman Trudy Muller said her company had not provided the Indian government with backdoor access to its products. A spokesman for Nokia declined comment; RIM officials could not be reached for comment.
The U.S. Congress created the commission in 2000 to investigate and report on the national security implications of the economic relationship between the United States and China. The bipartisan, 12-member panel holds periodic hearings each year on China-related topics such as cyber security, weapons proliferation, energy, international trade compliance, and information policy.
The email breach, if confirmed, would be the latest in a series of cyber intrusions that have struck U.S. institutions ranging from the Pentagon and defense contractors to Google Inc (GOOG.O).
Many of the previous hacks have been blamed on China. In this case, it is unclear whether India might have been eavesdropping on the U.S.-China commission for itself or sought to pass any information collected to authorities in China.