Latest Facebook scam.

Here is an interesting article I found about the latest scam on Facebook. Evidently, you receive an e-mail stating that there are nude pictures of you, a friend, or even a loved one online and if you click on the attached link, you can see them. Once you click on the link, a Trojan horse in uploaded to your PC.

On a side note, I think it is kind of ironic that the site I found it on is titled: "Naked Security."

http://nakedsecurity.sophos.com/2012/04/20/photo-facebook-malware/?utm_source=facebook&utm_medium=status+message&utm_campaign=naked+security

Read More

Privacy concerns after Instagram's acquisition by Facebook.

Yet another issue of privacy with Facebook.

http://nakedsecurity.sophos.com/2012/04/11/instagram-facebook-concern/?utm_source=facebook&utm_medium=status+message&utm_campaign=naked+security

Read More

A free Antivirus removal tool, with support.

In my efforts to stay ahead of the "computer gremlins,"  I came across the following free antivirus removal download. This link comes from an IT firm in the UK called Sophos. I have been following them for awhile and have even posted several other links from them in the past. I personally haven't tried this program YET, but one thing that did stand out to me was the fact that you don't have to remove or disable your current antivirus program to run it. Most antivirus/malware/spyware programs don't "play" well together and most, will only run effectively by themselves. So if you do decide to try this, make sure you set-up a system restore point first, then let me and Sophos know how you liked it.     

http://nakedsecurity.sophos.com/2012/04/11/free-virus-removal-tool-for-download-from-sophos/?utm_source=facebook&utm_medium=status+message&utm_campaign=naked+security

Read More

A critical vulnerability exists in Windows. Patch it now.

It seems that a worm is targeting a vulnerability in the Remote Desktop Protocol (RDP) of windows. As you can tell by the name, this involves accessing your desktop by Remote control. If this happens, your computer turns into a "zombie" and re sends the worm to all your email contacts. Don't fear though, Microsoft has a patch and the quicker you install it, the better. Read the following article for more info and the link to the patch or just do a Windows Update. .


http://nakedsecurity.sophos.com/2012/03/16/rdp-exploit-china/?utm_source=facebook&utm_medium=status+message&utm_campaign=naked+security

Read More

Here's How a Thief Can Steal Your Wallet without Even Touching You!

Good Morning and welcome to another installment of the Kesar Tech blog. Today I have attached an article about the latest way theives are stealing your stuff. They can steal your your money, your identity, and invade your privacy and all of this can be acheived without even touching you. Read on and findout how.

 

Imagine a thief stealing your wallet simply by waving his hand over your pocket or purse... it's possible in today's world, here's how (and how to stop it)...

Let me explain.

Thieves have found one more way to bypass supposedly "secure" technology to steal your money, your identity, and invade your privacy. In this case, they don't even need to touch you – just get close to you.

What's worse, this technology is rolling out into wider use by government agencies, both state and federal, adding one more area of risk for you and your family.

In this Executive Bulletin, we let you in on the threat and a simple step you can take to protect yourself.

Picking Your Pocket with a Wave of the Hand –

The radio frequency ID (RFID) chip is used primarily in commerce to track inventory. Applied in this respect, it's very efficient. According to the RFID Journal (an industry trade magazine): "Radio frequency identification is the next wave in the evolution of computing. Essentially, it's a technology that connects objects to the Internet, so they can be tracked..."

The problem: RFID technology is popping up on the items we carry on our own physical bodies, such as our driver's license, credit card, and passport.

For example, touchless credit cards are being issued more frequently by credit-card companies. The reason is because it makes purchases quicker, which is good for business. Just float your credit card above the touchless-equipped reader and pay; It's even faster than swiping your credit card!

It also makes theft fast and easy. Demonstrations by security experts show how a pickpocket hides a touchless credit-card reader, bought online and connected to a small netbook computer or smartphone, tucked inside a handheld organizer easily "steals" the credit-card information right through a victim's purse or pants pocket.

Armed with this information, the crook can create a fake credit card or simply use the information collected to make purchases online. One security expert says if he goes to a sports game, the mall, or movie theater on a busy day, he could someday steal thousands of credit cards without anyone ever knowing. A similar threat exists with the RFID on a driver's license and passport.

How Are Such Elaborate Thefts This Possible?

Two primary variations of the RFID chips exist, active and passive:

• The active chip has its own power source (like a battery) and sends out a signal (on a radio frequency). This signal contains information. For inventory tracking, it would be the serial number, contents, destination, name of the manufacturer, etc. The signal is captured and read by an electronic reader, stored, and integrated with the rest of the computer network. This technology is in use to track rental cars, for example.
• A passive chip doesn't have its own power source. Instead, the electronic reader sends out a radio signal that activates the chip, then the RFID chip bounces back the stored information (your credit card, driver's license, or passport information) to the reader.

Since information is floating on radio waves, any electronic reader tuned-in and at the right distance can capture your data. That's all the touchless pickpockets really do. An active RFID chip can be read up to 300 feet away, a passive chip from 30 feet!

Is There Really a Risk for You?

The more this technology is used and the more information RFID chips contain, the more reason criminals have to abuse it, compromise it, and render it useless. Today, many driver's licenses, passports, and credit cards already contain RFID chips, so the security risk is real and growing.

• Security researchers argue it's possible to read RFID chips from inside a passing car!
• Even government encryption used to protect data has already been cracked;
• Information can be copied, as in the case with the credit card example above;
• In some instances, information on an RFID chip can be changed by the reader itself. In other words, researchers rigged readers to write over and change information stored on an RFID chip. Someone with bad intentions could conceivably corrupt the information on your driver's license or passport and cause you much grief with the authorities while trying to cross a border, for example;
• Regarding RFID-equipped passports, each country's passport sends out its own unique radio signal. This poses a security threat while traveling if you happen to carry a non-politically correct passport – even if it's safely stored in your luggage or jacket pocket.
• Privacy advocates fear governments will use these chips more for surveillance and identity verification. Reports from China suggest government officials are already using this technology to scan crowds of protesters to help stifle anti-government activism.

What Can You Do about It?

One individual demonstrated how he destroyed the RFID chip in his new credit card by hammering a small nail through it. He reasoned the magnetic strip still worked, and he didn't need or want his credit card broadcasting his information. (You could go this route, but it's probably not advisable with your government-issued RFID documents, because it could come with a penalty.)

Your other options are to wrap the document in a metal like aluminum foil or buy a protective sleeve or stylish wallet designed to block the radio signals from the RFID chip. In fact, the State Department actually recommends doing this with your passport.

RFID may have some benefits, but it is a major threat to your privacy. Be wary.

 

Read More

Pink Facebook App.

The following is a link to an article about the latest scam going around Facebook. A message comes across Facebook offering to change the color of your page. But, it's a scam just trying to get access to your information.

http://nakedsecurity.sophos.com/2012/02/27/pink-facebook-survey-scam/?utm_source=facebook&utm_medium=status+message&utm_campaign=naked+security

Read More

What is Malware & how do I avoid it?

Recently, I've had a few people ask me what the difference between Malware & a virus is. I thought that maybe someone out there way have the same question, so here is my answer:

• MALWARE VS. VIRUS: The first thing you need to know is that malware is a generic term used to describe any malicious program. If it's unwanted and insidious, it's malware. Even though they're often confused, malware is not the same as a virus, though a virus is a common form of malware. Viruses are pieces of unwanted code that latch on to legitimate programs and can self-replicate. They're often unwittingly spread though email attachments, USB thumb drives, and file sharing.

• WORMS: Like a virus, a worm self-replicates, but it doesn't need to attach itself to a host file. Worms burrow into your network looking for vulnerabilities to exploit and spread to other systems.

• TROJAN: Like the horse of Greek mythology, a trojan masquerades as something awesome—a psychedelic screensaver or card game, for instance—but hides a terrible surprise. In other words, it appears to be something that it's not. Trojans can't replicate themselves like a virus, but once you run or install a trojan, it gets to work opening back doors or whatever evil deed the author intended it to do.

• SPYWARE: Just what it sounds like, spyware is any unwanted program designed to spy on your activities. It might be a program that logs your keystrokes (keylogger) or tracking software that gather information about you without your knowledge or consent.

• ADWARE: To keep it short and simple, adware bombards you with ads. Some examples include random pop-ups, unwanted banner ads, and browser redirects.

Now that you know the difference between the different things that can take over your computer, here is how you avoid getting them in the first place.

The best protection against malware isn’t security software, it’s you, the user. You should consider antivirus software as your last line of defense, and if you really want to avoid malware—you should steer clear of high-risk situations altogether. Here are some tips:

• Above all else, keep your software up to date. It starts with Windows but extends to all of your system software, especially programs that connect to the Internet. If you have a lot of programs installed, Secunia PSI (free, bit.ly/DW9u) will sift through them and let you know which ones are out of date. It will even fetch updates for you.

• Be extra cautious when connecting to open Wi-Fi networks like the ones you find at coffee shops, airports, and other public places. It doesn’t take much effort for a hacker to set up a fake free Wi-Fi hotspot in hopes that you’ll connect to his laptop instead of the real hotspot.

• Whenever possible, try to avoid using someone else’s computer to check your webmail. Can you really trust that their system isn’t infected with a keylogger or a screen‑capture utility? It just isn’t worth the risk. If you simply must, don’t forget to log out.

• Finally, check the file extension before you open what you think is a JPEG or some other picture format. We’ve seen dirty executables hide behind picture icons. Right-click and select Properties, or configure Windows to “Show hidden files, folders, and drives” by opening a folder and going to Tools > Folder Options > View.

Well, there it is, the tools you need to begin your fight for a clean and trouble free PC. Keep your questions and comments coming and see you soon.

Read More