To *** or Not to Mask: Usability Versus Security in Password Masking

On June 23, Jakob Nielsen posted an article declaring that password masking on the user interface is more harmful in terms of usability than helpful to the security of an application to which Bruce Schneier, in a June 26 blog post agreed. Both argued that masking the characters when a user enters a password [...]

Better Business Endpoint Security Solutions

I thought I would respond as a business owner to the BizFeed column published a few weeks ago about not running any endpoint protection. Certainly, you need something, and while there are numerous security suites from Symantec, McAfee, and the like that provide firewall and anti-virus, they aren’t integrated programs: more a collection of [...]

Files for Ransom… or Not

A new ransomware spreading through email is on the loose. On the outset, the worm detected by Trend Micro as WORM_RANSOM.FD may look like a normal mass-mailing worm but further analysis reveals that this comes with a deadly payload. With only a few exceptions (files with .rwg, .dll, .exe, .ini, .vxd, and .drv extensions [...]

Michael Jackson Video Leads to Malware Download

Cybercriminals once again used the passing of Michael Jackson, the ‘King of Pop,’ a few days ago as an opportunity to go about with their malicious activities and attack innocent users. We spotted an email (see Figure 1 below) about Michael Jackson’s death written in Spanish claiming to be from CNN Mexico.

Upon closer analysis [...]

New Koobface Component: A DNS Changer

Aside from the new Twitter component we’ve also seen Koobface download a new component with the filename dns.exe, whose main purpose, it seems, is to modify the system’s DNS registry settings. It is accomplished by inserting 213.174.139.72 (IP of the rogue DNS server) into the values of NameServer and DhcpNameServer found in the following registry [...]