Security watchers warned on Friday that a new variant of a Mac-specific password-snatching Trojan horse is spreading in the wild.
Flashback-G initially attempts to install itself via one of two Java vulnerabilities. Failing that, the malicious applet displays a self-signed certificate (claiming to be from Apple) in the hope users just install the malware.
Once snugly in place, the malware attempts to capture the login credentials users enter on bank websites, PayPal, and many others.
OS X Lion did not come with Java preinstalled, but Snow Leopard does, so users of Mac’s latest OS are more at risk of attack.
Source: The Register
In a report that acknowledged the “tremendous” growth of mobile software, the Federal Trade Commission said app developers are not making “simple and short” declarations of their privacy policies.
Analysis Cryptography researchers have discovered flaws in the key generation that underpins the security of important cryptography protocols, including SSL.
“My friend called me and told me that I was on the website, and I was in shock because I kept checking it every day to see if I wasn’t,” one 18-year-old student told 7 News. “Being on that website and being on a child porn website just makes me look bad as a person.”
Eight in the morning is a good time to grab some coffee, but not to check your e-mail.
