<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/css" media="screen" href="http://s2.wp.com/wp-content/themes/vip/newyorkobserver/stylesheets/rss.css"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	xmlns:georss="http://www.georss.org/georss" xmlns:geo="http://www.w3.org/2003/01/geo/wgs84_pos#" xmlns:media="http://search.yahoo.com/mrss/"
	>

<channel>
	<title>Betabeat &#187; malware</title>
	<atom:link href="http://betabeat.com/tag/malware/feed/" rel="self" type="application/rss+xml" />
	<link>http://betabeat.com</link>
	<description>Just another WordPress.com site</description>
	<lastBuildDate>Fri, 24 May 2013 15:46:54 +0000</lastBuildDate>
	<language></language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.com/</generator>
<cloud domain='betabeat.com' port='80' path='/?rsscloud=notify' registerProcedure='' protocol='http-post' />
<image>
		<url>http://s2.wp.com/i/buttonw-com.png</url>
		<title>Betabeat &#187; malware</title>
		<link>http://betabeat.com</link>
	</image>
	<atom:link rel="search" type="application/opensearchdescription+xml" href="http://betabeat.com/osd.xml" title="Betabeat" />
	<atom:link rel='hub' href='http://betabeat.com/?pushpress=hub'/>
		<item>
				
		<title>Russian Malware Might Be Using Your Computer to Mine Bitcoins</title>

		<comments>http://betabeat.com/2013/04/russian-malware-might-be-using-your-computer-to-mine-bitcoins/#comments</comments>
		<pubDate>Fri, 19 Apr 2013 17:40:54 -0400</pubDate>
					<link>http://betabeat.com/2013/04/russian-malware-might-be-using-your-computer-to-mine-bitcoins/</link>
			<dc:creator>Jordan Valinsky</dc:creator>
				
		<guid isPermaLink="false">http://betabeat.com/?p=85619</guid>
		<description><![CDATA[<p><div id="attachment_85631" class="wp-caption alignleft" style="width: 310px"><a href="http://nyobetabeat.files.wordpress.com/2013/04/fareit-goes-bitcoin-mining-c2ab-featured-c2ab.png"><img class="size-medium wp-image-85631" alt="Bitcoins don't look like this. (Photo: ThreatTrack)" src="http://nyobetabeat.files.wordpress.com/2013/04/fareit-goes-bitcoin-mining-c2ab-featured-c2ab.png?w=300" width="300" height="158" /></a><p class="wp-caption-text">Bitcoins don't look like this. (Photo: ThreatTrack)</p></div></p>
<p>A Russian porn website is infecting people’s computers with malware that overtakes their systems to mine for Bitcoins. (Pretty sure that's the most Internetty sentence in history.) <a href="http://www.pcworld.com/article/2035749/russian-malware-mines-bitcoins-through-botnet.html">PCWorld reports</a> that the malware (called "Fareit") has been circulating for the past six months and only affects Windows computers.<!--more--></p>
<p>Bitcoin, a decentralized digital currency, is exchanged via peer-to-peer software. But, as <a href="http://www.pcworld.com/article/2035749/russian-malware-mines-bitcoins-through-botnet.html">PCWorld explains</a>, it takes computer power to "mine" the coins:</p>
<blockquote><p>New bitcoins are created by mining, or contributing computing power that is used to verify transactions, which are entered into a public ledger called the blockchain.</p>
<p>New blocks are created about every ten minutes, and miners who create a new block are rewarded with 25 bitcoins, the preset reward set by the Bitcoin's system's pseudonymous creator, Satoshi Nakamoto.</p></blockquote>
<p>Fareit, which was coded in Cyrillic, infiltrates the victim’s computer and installs a mining application to create Bitcoins. The hackers use the computer to compute parts of the blockchain which is then sent to Russian domains.</p>
<p>Since Bitcoin sellers are rewarded for adding more blocks to the chains, the sketchy sites earn a profit from your computer, according to a blog post on <a href="http://www.threattracksecurity.com/it-blog/fareit-goes-bitcoin-mining/">security firm ThreatTrack</a>.</p>
<p>To block the threat, keep your antivirus software up-to-date. Or just ignore the existence of Bitcoins</p>
]]></description>
		<content:encoded><![CDATA[<p><div id="attachment_85631" class="wp-caption alignleft" style="width: 310px"><a href="http://nyobetabeat.files.wordpress.com/2013/04/fareit-goes-bitcoin-mining-c2ab-featured-c2ab.png"><img class="size-medium wp-image-85631" alt="Bitcoins don't look like this. (Photo: ThreatTrack)" src="http://nyobetabeat.files.wordpress.com/2013/04/fareit-goes-bitcoin-mining-c2ab-featured-c2ab.png?w=300" width="300" height="158" /></a><p class="wp-caption-text">Bitcoins don't look like this. (Photo: ThreatTrack)</p></div></p>
<p>A Russian porn website is infecting people’s computers with malware that overtakes their systems to mine for Bitcoins. (Pretty sure that's the most Internetty sentence in history.) <a href="http://www.pcworld.com/article/2035749/russian-malware-mines-bitcoins-through-botnet.html">PCWorld reports</a> that the malware (called "Fareit") has been circulating for the past six months and only affects Windows computers.<!--more--></p>
<p>Bitcoin, a decentralized digital currency, is exchanged via peer-to-peer software. But, as <a href="http://www.pcworld.com/article/2035749/russian-malware-mines-bitcoins-through-botnet.html">PCWorld explains</a>, it takes computer power to "mine" the coins:</p>
<blockquote><p>New bitcoins are created by mining, or contributing computing power that is used to verify transactions, which are entered into a public ledger called the blockchain.</p>
<p>New blocks are created about every ten minutes, and miners who create a new block are rewarded with 25 bitcoins, the preset reward set by the Bitcoin's system's pseudonymous creator, Satoshi Nakamoto.</p></blockquote>
<p>Fareit, which was coded in Cyrillic, infiltrates the victim’s computer and installs a mining application to create Bitcoins. The hackers use the computer to compute parts of the blockchain which is then sent to Russian domains.</p>
<p>Since Bitcoin sellers are rewarded for adding more blocks to the chains, the sketchy sites earn a profit from your computer, according to a blog post on <a href="http://www.threattracksecurity.com/it-blog/fareit-goes-bitcoin-mining/">security firm ThreatTrack</a>.</p>
<p>To block the threat, keep your antivirus software up-to-date. Or just ignore the existence of Bitcoins</p>
]]></content:encoded>
		<wfw:commentRss>http://betabeat.com/2013/04/russian-malware-might-be-using-your-computer-to-mine-bitcoins/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/65890d44c78f5b03be4c27c5b61d2ee1?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">jvalinskyobserver</media:title>
		</media:content>

		<media:content url="http://nyobetabeat.files.wordpress.com/2013/04/fareit-goes-bitcoin-mining-c2ab-featured-c2ab.png?w=300" medium="image">
			<media:title type="html">Bitcoins don&#039;t look like this. (Photo: ThreatTrack)</media:title>
		</media:content>
	</item>
		<item>
				
		<title>Scumbag Scammers Using the Boston Bombing to Spread Malware</title>

		<comments>http://betabeat.com/2013/04/scammers-sophos-boston-marathon-bombing-malware-trojan-windows/#comments</comments>
		<pubDate>Wed, 17 Apr 2013 15:01:59 -0400</pubDate>
					<link>http://betabeat.com/2013/04/scammers-sophos-boston-marathon-bombing-malware-trojan-windows/</link>
			<dc:creator>Kelly Faircloth</dc:creator>
				
		<guid isPermaLink="false">http://betabeat.com/?p=85368</guid>
		<description><![CDATA[<p><div id="attachment_85374" class="wp-caption alignleft" style="width: 359px"><a href="http://nyobetabeat.files.wordpress.com/2013/04/boston-malware-website.jpg"><img class=" wp-image-85374 " alt="Scumbags. (Photo: Sophos)" src="http://nyobetabeat.files.wordpress.com/2013/04/boston-malware-website.jpg" width="349" height="283" /></a><p class="wp-caption-text">Scumbags. (Photo: Sophos)</p></div></p>
<p>The dirtbags who make malware are at it again. Sophos's <a href="http://nakedsecurity.sophos.com/2013/04/17/malware-boston-marathon-bombing/">Naked Security blog reports</a> that scammers are already taking advantage of Monday's bombing at the Boston Marathon, because they have zero sense of decency.</p>
<p>Scammers are sending out emails with subject lines like, "2 Explosions at Boston Marathon," "Aftermath to explosion at Boston Marathon," and "Boston Explosion Caught on Video." Inside the emails is a link to a website with the promised YouTube videos--plus a Windows virus. "Clearly, there are no depths to which cybercriminals are not prepared to stoop in their hunt for victims," Sophos said.<!--more--></p>
<p>As <a href="http://www.dailydot.com/news/boston-marathon-twitter-parody-banned/">the Daily Dot points out</a>, it's not the first attempt to capitalize on the horrible incident--see the fake Twitter account that popped up almost immediately, soliciting RTs for $1 donations--and it probably won't be the last. A little skepticism goes a long way. Sophos concludes acidly:</p>
<blockquote><p>"Remember to be on your guard against such tactics. Maybe it's time to get your news from legitimate news websites rather than an unsolicited email which arrives in your inbox?"</p></blockquote>
<p>Might want to pass that along to your great aunt that forwards all the chain letters.</p>
]]></description>
		<content:encoded><![CDATA[<p><div id="attachment_85374" class="wp-caption alignleft" style="width: 359px"><a href="http://nyobetabeat.files.wordpress.com/2013/04/boston-malware-website.jpg"><img class=" wp-image-85374 " alt="Scumbags. (Photo: Sophos)" src="http://nyobetabeat.files.wordpress.com/2013/04/boston-malware-website.jpg" width="349" height="283" /></a><p class="wp-caption-text">Scumbags. (Photo: Sophos)</p></div></p>
<p>The dirtbags who make malware are at it again. Sophos's <a href="http://nakedsecurity.sophos.com/2013/04/17/malware-boston-marathon-bombing/">Naked Security blog reports</a> that scammers are already taking advantage of Monday's bombing at the Boston Marathon, because they have zero sense of decency.</p>
<p>Scammers are sending out emails with subject lines like, "2 Explosions at Boston Marathon," "Aftermath to explosion at Boston Marathon," and "Boston Explosion Caught on Video." Inside the emails is a link to a website with the promised YouTube videos--plus a Windows virus. "Clearly, there are no depths to which cybercriminals are not prepared to stoop in their hunt for victims," Sophos said.<!--more--></p>
<p>As <a href="http://www.dailydot.com/news/boston-marathon-twitter-parody-banned/">the Daily Dot points out</a>, it's not the first attempt to capitalize on the horrible incident--see the fake Twitter account that popped up almost immediately, soliciting RTs for $1 donations--and it probably won't be the last. A little skepticism goes a long way. Sophos concludes acidly:</p>
<blockquote><p>"Remember to be on your guard against such tactics. Maybe it's time to get your news from legitimate news websites rather than an unsolicited email which arrives in your inbox?"</p></blockquote>
<p>Might want to pass that along to your great aunt that forwards all the chain letters.</p>
]]></content:encoded>
		<wfw:commentRss>http://betabeat.com/2013/04/scammers-sophos-boston-marathon-bombing-malware-trojan-windows/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/0bbc75db8f7be0cab7d4698c7cd08df2?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">kfairclothobserver</media:title>
		</media:content>

		<media:content url="http://nyobetabeat.files.wordpress.com/2013/04/boston-malware-website.jpg" medium="image">
			<media:title type="html">Scumbags. (Photo: Sophos)</media:title>
		</media:content>
	</item>
		<item>
				
		<title>Like a Sociopathic Ex, Porn Sites Claim They Did Not Give You Digital STDs</title>

		<comments>http://betabeat.com/2013/04/like-a-sociopathic-ex-porn-sites-claim-they-did-not-give-you-digital-stds/#comments</comments>
		<pubDate>Mon, 15 Apr 2013 09:11:49 -0400</pubDate>
					<link>http://betabeat.com/2013/04/like-a-sociopathic-ex-porn-sites-claim-they-did-not-give-you-digital-stds/</link>
			<dc:creator>Jessica Roy</dc:creator>
				
		<guid isPermaLink="false">http://betabeat.com/?p=85125</guid>
		<description><![CDATA[<p><div id="attachment_85127" class="wp-caption alignleft" style="width: 310px"><a href="http://nyobetabeat.files.wordpress.com/2013/04/istock_000005897908xsmall1.jpg"><img class="size-medium wp-image-85127" alt="(Photo: 24fix.co.uk)" src="http://nyobetabeat.files.wordpress.com/2013/04/istock_000005897908xsmall1.jpg?w=300" width="300" height="199" /></a><p class="wp-caption-text">(Photo: 24fix.co.uk)</p></div></p>
<p>Do you prefer your porn with a side of malware? <a href="http://betabeat.com/2013/04/your-favorite-porn-sites-are-giving-your-computer-digital-stds/">According</a> to one British researcher, users who visit popular porn sites like PornHub and xHamster have a 42 percent chance of contracting digital STDs (a.k.a. malware) on their computers. Naturally, online porn purveyors sites <a href="http://www.bbc.co.uk/news/technology-22153527">did not take kindly</a> to the study, which they say overinflated the risk.</p>
<p><!--more-->PornHub called it "grossly exaggerate(d)," and xHamster said that while it has suffered from malware issues in the past, it's worked hard to find reliable advertising partners that don't infect your computer.</p>
<p>Just remember, folks: your computer can contract a digital STD even from browser-on-infected-ad contact.</p>
]]></description>
		<content:encoded><![CDATA[<p><div id="attachment_85127" class="wp-caption alignleft" style="width: 310px"><a href="http://nyobetabeat.files.wordpress.com/2013/04/istock_000005897908xsmall1.jpg"><img class="size-medium wp-image-85127" alt="(Photo: 24fix.co.uk)" src="http://nyobetabeat.files.wordpress.com/2013/04/istock_000005897908xsmall1.jpg?w=300" width="300" height="199" /></a><p class="wp-caption-text">(Photo: 24fix.co.uk)</p></div></p>
<p>Do you prefer your porn with a side of malware? <a href="http://betabeat.com/2013/04/your-favorite-porn-sites-are-giving-your-computer-digital-stds/">According</a> to one British researcher, users who visit popular porn sites like PornHub and xHamster have a 42 percent chance of contracting digital STDs (a.k.a. malware) on their computers. Naturally, online porn purveyors sites <a href="http://www.bbc.co.uk/news/technology-22153527">did not take kindly</a> to the study, which they say overinflated the risk.</p>
<p><!--more-->PornHub called it "grossly exaggerate(d)," and xHamster said that while it has suffered from malware issues in the past, it's worked hard to find reliable advertising partners that don't infect your computer.</p>
<p>Just remember, folks: your computer can contract a digital STD even from browser-on-infected-ad contact.</p>
]]></content:encoded>
		<wfw:commentRss>http://betabeat.com/2013/04/like-a-sociopathic-ex-porn-sites-claim-they-did-not-give-you-digital-stds/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://2.gravatar.com/avatar/b59d8cbbeb9009e27771e8c6863ee21a?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">jroyobserver</media:title>
		</media:content>

		<media:content url="http://nyobetabeat.files.wordpress.com/2013/04/istock_000005897908xsmall1.jpg?w=300" medium="image">
			<media:title type="html">(Photo: 24fix.co.uk)</media:title>
		</media:content>
	</item>
		<item>
				
		<title>Your Favorite Porn Sites Are Giving Your Computer Digital STDs</title>

		<comments>http://betabeat.com/2013/04/your-favorite-porn-sites-are-giving-your-computer-digital-stds/#comments</comments>
		<pubDate>Fri, 12 Apr 2013 09:54:40 -0400</pubDate>
					<link>http://betabeat.com/2013/04/your-favorite-porn-sites-are-giving-your-computer-digital-stds/</link>
			<dc:creator>Jessica Roy</dc:creator>
				
		<guid isPermaLink="false">http://betabeat.com/?p=85034</guid>
		<description><![CDATA[<p><div id="attachment_85036" class="wp-caption alignleft" style="width: 310px"><a href="http://nyobetabeat.files.wordpress.com/2013/04/xhamster-icon.png"><img class="size-medium wp-image-85036" alt="(Photo: Github)" src="http://nyobetabeat.files.wordpress.com/2013/04/xhamster-icon.png?w=300" width="300" height="300" /></a><p class="wp-caption-text">(Photo: Github)</p></div></p>
<p>Bad news for the porno pervs among us (a.k.a. <a href="http://betabeat.com/2013/04/survey-finds-36-percent-of-americans-dont-watch-porn-and-are-total-liars/">everyone</a>). As it turns out, websites that stream free porn are actually laden with malware that could completely destroy your computer. But it's totally worth it, right?</p>
<p><!--more-->Researcher Conrad Longmore <a href="http://www.independent.co.uk/life-style/gadgets-and-tech/news/popular-porn-websites-host-adverts-with-malware-8568608.html">told</a> <em>The Telegraph</em> that a number of ads on popular streaming sites like xHamster and PornHub can automatically install malware on your computer. Mr. Longmore said that the sites aren't purposefully hosting malware, but because the process for buying and packaging ads is so complex, they're likely running malicious ads without being aware of it.</p>
<p>Mr. Longmore <a href="http://www.independent.co.uk/life-style/gadgets-and-tech/news/popular-porn-websites-host-adverts-with-malware-8568608.html">found</a> that xHamster, for example, has malicious advertising on 5 percent of its content. Since the average user looks at 10 pages per visit, that gives them a 42 percent chance of contracting malware from the site.</p>
<p>Think Bill Gates would give us <a href="http://betabeat.com/2013/03/bill-gates-will-grant-you-100000-to-invent-a-next-gen-condom/">grant money</a> for a condom that protects against digital STDs?</p>
]]></description>
		<content:encoded><![CDATA[<p><div id="attachment_85036" class="wp-caption alignleft" style="width: 310px"><a href="http://nyobetabeat.files.wordpress.com/2013/04/xhamster-icon.png"><img class="size-medium wp-image-85036" alt="(Photo: Github)" src="http://nyobetabeat.files.wordpress.com/2013/04/xhamster-icon.png?w=300" width="300" height="300" /></a><p class="wp-caption-text">(Photo: Github)</p></div></p>
<p>Bad news for the porno pervs among us (a.k.a. <a href="http://betabeat.com/2013/04/survey-finds-36-percent-of-americans-dont-watch-porn-and-are-total-liars/">everyone</a>). As it turns out, websites that stream free porn are actually laden with malware that could completely destroy your computer. But it's totally worth it, right?</p>
<p><!--more-->Researcher Conrad Longmore <a href="http://www.independent.co.uk/life-style/gadgets-and-tech/news/popular-porn-websites-host-adverts-with-malware-8568608.html">told</a> <em>The Telegraph</em> that a number of ads on popular streaming sites like xHamster and PornHub can automatically install malware on your computer. Mr. Longmore said that the sites aren't purposefully hosting malware, but because the process for buying and packaging ads is so complex, they're likely running malicious ads without being aware of it.</p>
<p>Mr. Longmore <a href="http://www.independent.co.uk/life-style/gadgets-and-tech/news/popular-porn-websites-host-adverts-with-malware-8568608.html">found</a> that xHamster, for example, has malicious advertising on 5 percent of its content. Since the average user looks at 10 pages per visit, that gives them a 42 percent chance of contracting malware from the site.</p>
<p>Think Bill Gates would give us <a href="http://betabeat.com/2013/03/bill-gates-will-grant-you-100000-to-invent-a-next-gen-condom/">grant money</a> for a condom that protects against digital STDs?</p>
]]></content:encoded>
		<wfw:commentRss>http://betabeat.com/2013/04/your-favorite-porn-sites-are-giving-your-computer-digital-stds/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://2.gravatar.com/avatar/b59d8cbbeb9009e27771e8c6863ee21a?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">jroyobserver</media:title>
		</media:content>

		<media:content url="http://nyobetabeat.files.wordpress.com/2013/04/xhamster-icon.png?w=300" medium="image">
			<media:title type="html">(Photo: Github)</media:title>
		</media:content>
	</item>
		<item>
				
		<title>Malware Is Your Punishment For Using Bing</title>

		<comments>http://betabeat.com/2013/04/google-is-doing-a-least-crappy-job-at-protecting-you-from-malware-compared-to-bing/#comments</comments>
		<pubDate>Thu, 11 Apr 2013 16:55:49 -0400</pubDate>
					<link>http://betabeat.com/2013/04/google-is-doing-a-least-crappy-job-at-protecting-you-from-malware-compared-to-bing/</link>
			<dc:creator>Jordan Valinsky</dc:creator>
				
		<guid isPermaLink="false">http://betabeat.com/?p=84999</guid>
		<description><![CDATA[<p><div id="attachment_85004" class="wp-caption alignleft" style="width: 310px"><a href="http://nyobetabeat.files.wordpress.com/2013/04/malware.png"><img class="size-medium wp-image-85004" alt="Malware selfie. (Photo: Hahsgram)" src="http://nyobetabeat.files.wordpress.com/2013/04/malware.png?w=300" width="300" height="294" /></a><p class="wp-caption-text">Malware selfie. (Photo: Hahsgram)</p></div></p>
<p dir="ltr">Perhaps Binging it too often has some unintended and harmful side effects. According to a <a href="http://www.av-test.org/fileadmin/pdf/avtest_2013-03_search_engines_malware_english.pdf">new study</a> from a German security firm, the Microsoft-owned search engine is five times more likely to link you to a malware-infected page than Google.</p>
<p>In a high-tech humblebrag, AV-Test Institute reported that its initial suspicions that Google and Bing do a poor job of protecting their users from delivering Trojan-laden websites were correct. But Google isn’t really a winner here: it’s just that it did a less shitty job of indexing infected websites compared to Bing.<!--more--></p>
<p>For 18 months, the lab surveyed the harmfulness of 40 million websites from seven search engines. More than half of the results came from Bing and Google, with the other portion being pulled from search sites popular in other countries, like China’s Baidu and Russia’s Yandex.</p>
<p><em>PC Magazine</em> <a href="http://securitywatch.pcmag.com/security/310268-bing-delivers-five-times-as-many-malicious-websites-as-google">writes</a> that Yandex was the least safe. You've been warned, Russia's one Betabeat reader.</p>
<blockquote><p>The 5,000 pieces of malware the study found are concentrated in Yandex results—which had 3,330 malicious links out of the 13 million the AV-Test looked at. Bing had a little under half that, with 1,285 malicious results out of 10 million pages. Google returned a mere 272 malicious results in 10 million while Bleko had even fewer: 203 out of around three million.</p></blockquote>
<p>Guess we'll go back to using Lycos.</p>
]]></description>
		<content:encoded><![CDATA[<p><div id="attachment_85004" class="wp-caption alignleft" style="width: 310px"><a href="http://nyobetabeat.files.wordpress.com/2013/04/malware.png"><img class="size-medium wp-image-85004" alt="Malware selfie. (Photo: Hahsgram)" src="http://nyobetabeat.files.wordpress.com/2013/04/malware.png?w=300" width="300" height="294" /></a><p class="wp-caption-text">Malware selfie. (Photo: Hahsgram)</p></div></p>
<p dir="ltr">Perhaps Binging it too often has some unintended and harmful side effects. According to a <a href="http://www.av-test.org/fileadmin/pdf/avtest_2013-03_search_engines_malware_english.pdf">new study</a> from a German security firm, the Microsoft-owned search engine is five times more likely to link you to a malware-infected page than Google.</p>
<p>In a high-tech humblebrag, AV-Test Institute reported that its initial suspicions that Google and Bing do a poor job of protecting their users from delivering Trojan-laden websites were correct. But Google isn’t really a winner here: it’s just that it did a less shitty job of indexing infected websites compared to Bing.<!--more--></p>
<p>For 18 months, the lab surveyed the harmfulness of 40 million websites from seven search engines. More than half of the results came from Bing and Google, with the other portion being pulled from search sites popular in other countries, like China’s Baidu and Russia’s Yandex.</p>
<p><em>PC Magazine</em> <a href="http://securitywatch.pcmag.com/security/310268-bing-delivers-five-times-as-many-malicious-websites-as-google">writes</a> that Yandex was the least safe. You've been warned, Russia's one Betabeat reader.</p>
<blockquote><p>The 5,000 pieces of malware the study found are concentrated in Yandex results—which had 3,330 malicious links out of the 13 million the AV-Test looked at. Bing had a little under half that, with 1,285 malicious results out of 10 million pages. Google returned a mere 272 malicious results in 10 million while Bleko had even fewer: 203 out of around three million.</p></blockquote>
<p>Guess we'll go back to using Lycos.</p>
]]></content:encoded>
		<wfw:commentRss>http://betabeat.com/2013/04/google-is-doing-a-least-crappy-job-at-protecting-you-from-malware-compared-to-bing/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/65890d44c78f5b03be4c27c5b61d2ee1?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">jvalinskyobserver</media:title>
		</media:content>

		<media:content url="http://nyobetabeat.files.wordpress.com/2013/04/malware.png?w=300" medium="image">
			<media:title type="html">Malware selfie. (Photo: Hahsgram)</media:title>
		</media:content>
	</item>
		<item>
				
		<title>Malware Has Speed Cameras in Moscow All Effed Up</title>

		<comments>http://betabeat.com/2013/02/malware-russia-cameras-speed-network-kaspersky-virus-traffic-police/#comments</comments>
		<pubDate>Thu, 28 Feb 2013 11:15:07 -0400</pubDate>
					<link>http://betabeat.com/2013/02/malware-russia-cameras-speed-network-kaspersky-virus-traffic-police/</link>
			<dc:creator>Kelly Faircloth</dc:creator>
				
		<guid isPermaLink="false">http://betabeat.com/?p=80621</guid>
		<description><![CDATA[<p><div id="attachment_80639" class="wp-caption alignleft" style="width: 318px"><a href="http://nyobetabeat.files.wordpress.com/2013/02/screen-shot-2013-02-28-at-11-02-24-am.jpg"><img class=" wp-image-80639 " alt="It's like they're TRYING to troll George Orwell. They know he's dead, right? (Photo: screencap, Russia Today)" src="http://nyobetabeat.files.wordpress.com/2013/02/screen-shot-2013-02-28-at-11-02-24-am.jpg" width="308" height="217" /></a><p class="wp-caption-text">It's like they're TRYING to troll George Orwell. They know he's dead, right? (Photo: screencap, Russia Today)</p></div></p>
<p>How's that brave new world  of connected devices faring so far? It's going just great if you're a Russian who drives like a bat out of hell, because some sort of malware infection has got Moscow's network of speed cameras all screwed up. Welcome to the autobahn, baby!</p>
<p>The report comes <a href="http://translate.google.com/translate?hl=es&amp;sl=auto&amp;tl=en&amp;u=http://izvestia.ru/news/545688">from Russia's <i>Izvestia</i></a>, <a href="http://www.theregister.co.uk/2013/02/28/malware_hobbles_moscow_speed_cams/">via </a><em><a href="http://www.theregister.co.uk/2013/02/28/malware_hobbles_moscow_speed_cams/">The Register.</a> </em>The city has an <a href="http://rt.com/news/prime-time/speed-cameras-moscow-installed-711/">extensive system of cameras</a> designed to catch offenders in the act and mail them tickets. It's supposed to net something like $3.2 million in fines every month, which no doubt buys a whole lot of umbrellas for the meter maids.<!--more--></p>
<p>Only, the network hasn't been working properly for the last couple of weeks. Research by--who else?--Kaspersky Lab suggests that a virus got into the servers for the Office of Traffic Police, which infected other parts of the system with malware that prevents individual cameras from transmitting. Presumably the perpetrator is someone who's always in a rush to get to the supermarket that closes really early because sometimes you just can't go another day without Ben  &amp; Jerry's, toilet paper and a couple cans of cat food, am I right? </p>
<p>But it wasn't just newfangled hacking creating problems, though. Some of the cameras had decidedly low-tech problems:</p>
<blockquote><p>A virus infection may be a secondary cause of failure at many of the 144 camera sites on the network: inspections of the gear at 13 locations revealed evidence that cameras were not connected to a power supply. Dirty glass lenses and corroded metal was also discovered.</p></blockquote>
<p>Well just unplugging the damn things is one manner of virus protection, we suppose. <i><br />
</i></p>
]]></description>
		<content:encoded><![CDATA[<p><div id="attachment_80639" class="wp-caption alignleft" style="width: 318px"><a href="http://nyobetabeat.files.wordpress.com/2013/02/screen-shot-2013-02-28-at-11-02-24-am.jpg"><img class=" wp-image-80639 " alt="It's like they're TRYING to troll George Orwell. They know he's dead, right? (Photo: screencap, Russia Today)" src="http://nyobetabeat.files.wordpress.com/2013/02/screen-shot-2013-02-28-at-11-02-24-am.jpg" width="308" height="217" /></a><p class="wp-caption-text">It's like they're TRYING to troll George Orwell. They know he's dead, right? (Photo: screencap, Russia Today)</p></div></p>
<p>How's that brave new world  of connected devices faring so far? It's going just great if you're a Russian who drives like a bat out of hell, because some sort of malware infection has got Moscow's network of speed cameras all screwed up. Welcome to the autobahn, baby!</p>
<p>The report comes <a href="http://translate.google.com/translate?hl=es&amp;sl=auto&amp;tl=en&amp;u=http://izvestia.ru/news/545688">from Russia's <i>Izvestia</i></a>, <a href="http://www.theregister.co.uk/2013/02/28/malware_hobbles_moscow_speed_cams/">via </a><em><a href="http://www.theregister.co.uk/2013/02/28/malware_hobbles_moscow_speed_cams/">The Register.</a> </em>The city has an <a href="http://rt.com/news/prime-time/speed-cameras-moscow-installed-711/">extensive system of cameras</a> designed to catch offenders in the act and mail them tickets. It's supposed to net something like $3.2 million in fines every month, which no doubt buys a whole lot of umbrellas for the meter maids.<!--more--></p>
<p>Only, the network hasn't been working properly for the last couple of weeks. Research by--who else?--Kaspersky Lab suggests that a virus got into the servers for the Office of Traffic Police, which infected other parts of the system with malware that prevents individual cameras from transmitting. Presumably the perpetrator is someone who's always in a rush to get to the supermarket that closes really early because sometimes you just can't go another day without Ben  &amp; Jerry's, toilet paper and a couple cans of cat food, am I right? </p>
<p>But it wasn't just newfangled hacking creating problems, though. Some of the cameras had decidedly low-tech problems:</p>
<blockquote><p>A virus infection may be a secondary cause of failure at many of the 144 camera sites on the network: inspections of the gear at 13 locations revealed evidence that cameras were not connected to a power supply. Dirty glass lenses and corroded metal was also discovered.</p></blockquote>
<p>Well just unplugging the damn things is one manner of virus protection, we suppose. <i><br />
</i></p>
]]></content:encoded>
		<wfw:commentRss>http://betabeat.com/2013/02/malware-russia-cameras-speed-network-kaspersky-virus-traffic-police/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/0bbc75db8f7be0cab7d4698c7cd08df2?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">kfairclothobserver</media:title>
		</media:content>

		<media:content url="http://nyobetabeat.files.wordpress.com/2013/02/screen-shot-2013-02-28-at-11-02-24-am.jpg" medium="image">
			<media:title type="html">It&#039;s like they&#039;re TRYING to troll George Orwell. They know he&#039;s dead, right? (Photo: screencap, Russia Today)</media:title>
		</media:content>
	</item>
		<item>
				
		<title>Kaspersky Lab Unearths Cyber-Spying Operation, Christens It &#8216;Red October&#8217;</title>

		<comments>http://betabeat.com/2013/01/kaspersky-lab-russia-cyberwar-cyber-spying-red-october-malware/#comments</comments>
		<pubDate>Mon, 14 Jan 2013 10:30:43 -0400</pubDate>
					<link>http://betabeat.com/2013/01/kaspersky-lab-russia-cyberwar-cyber-spying-red-october-malware/</link>
			<dc:creator>Kelly Faircloth</dc:creator>
				
		<guid isPermaLink="false">http://betabeat.com/?p=76425</guid>
		<description><![CDATA[<p><div id="attachment_76430" class="wp-caption alignleft" style="width: 378px"><a href="http://nyobetabeat.files.wordpress.com/2013/01/208194085.png"><img class=" wp-image-76430  " alt="RED OCTOBER " src="http://nyobetabeat.files.wordpress.com/2013/01/208194085.png" width="368" height="260" /></a><p class="wp-caption-text">RED OCTOBER</p></div></p>
<p>The Russian antivirus firm that first fingered Stuxnet as a state-sponsored cyberattack is outing massive clandestine digital operations once more. This time, Kaspersky Lab <a href="The_Red_October_Campaign_An_Advanced_Cyber_Espionage_Network_Targeting_Diplomatic_and_Government_Agencies">says</a> they've uncovered a massive, years-long cyber-espionage campaign. The perpetrators: unknown. Demonstrating a rather charming flare for the dramatic, the Moscow-based researchers have dubbed the network "Red October."</p>
<p>We had long suspected the lads and ladies of Kaspersky were Tom Clancy types.</p>
<p>Researchers announced the discovery <a href="http://www.securelist.com/en/blog/785/The_Red_October_Campaign_An_Advanced_Cyber_Espionage_Network_Targeting_Diplomatic_and_Government_Agencies">in a blog post</a>:</p>
<blockquote><p>During the past five years, a high-level cyber-espionage campaign has successfully infiltrated computer networks at diplomatic, governmental and scientific research organizations, gathering data and intelligence from mobile devices, computer systems and network equipment.</p></blockquote>
<p>Whoever it was tipped Kaspersky to the malware "<span style="font-size:13px;">prefers to remain anonymous."</span></p>
<p>The perpetrators target organizations in the Russian Federation, Eastern Europe, and Central Asia--but North America and Western Europe aren't immune, either. "Hundreds" worldwide have been affected, across categories like military, research institutions, aerospace, oil and gas, and so forth--"all of them in top locations such as government networks and diplomatic institutions."</p>
<p>As for who's behind the network, researchers write that they "strongly believe that the attackers have Russian-speaking origins." However, anybody starts hallucinating the rumbling guns of distant cyberwar:</p>
<blockquote><p>Currently, there is no evidence linking this with a nation-state sponsored attack. The information stolen by the attackers is obviously of the highest level and includes geopolitical data which can be used by nation states. Such information could be traded in the underground and sold to the highest bidder, which can be of course, anywhere.</p></blockquote>
<p>Capitalism!</p>
]]></description>
		<content:encoded><![CDATA[<p><div id="attachment_76430" class="wp-caption alignleft" style="width: 378px"><a href="http://nyobetabeat.files.wordpress.com/2013/01/208194085.png"><img class=" wp-image-76430  " alt="RED OCTOBER " src="http://nyobetabeat.files.wordpress.com/2013/01/208194085.png" width="368" height="260" /></a><p class="wp-caption-text">RED OCTOBER</p></div></p>
<p>The Russian antivirus firm that first fingered Stuxnet as a state-sponsored cyberattack is outing massive clandestine digital operations once more. This time, Kaspersky Lab <a href="The_Red_October_Campaign_An_Advanced_Cyber_Espionage_Network_Targeting_Diplomatic_and_Government_Agencies">says</a> they've uncovered a massive, years-long cyber-espionage campaign. The perpetrators: unknown. Demonstrating a rather charming flare for the dramatic, the Moscow-based researchers have dubbed the network "Red October."</p>
<p>We had long suspected the lads and ladies of Kaspersky were Tom Clancy types.</p>
<p>Researchers announced the discovery <a href="http://www.securelist.com/en/blog/785/The_Red_October_Campaign_An_Advanced_Cyber_Espionage_Network_Targeting_Diplomatic_and_Government_Agencies">in a blog post</a>:</p>
<blockquote><p>During the past five years, a high-level cyber-espionage campaign has successfully infiltrated computer networks at diplomatic, governmental and scientific research organizations, gathering data and intelligence from mobile devices, computer systems and network equipment.</p></blockquote>
<p>Whoever it was tipped Kaspersky to the malware "<span style="font-size:13px;">prefers to remain anonymous."</span></p>
<p>The perpetrators target organizations in the Russian Federation, Eastern Europe, and Central Asia--but North America and Western Europe aren't immune, either. "Hundreds" worldwide have been affected, across categories like military, research institutions, aerospace, oil and gas, and so forth--"all of them in top locations such as government networks and diplomatic institutions."</p>
<p>As for who's behind the network, researchers write that they "strongly believe that the attackers have Russian-speaking origins." However, anybody starts hallucinating the rumbling guns of distant cyberwar:</p>
<blockquote><p>Currently, there is no evidence linking this with a nation-state sponsored attack. The information stolen by the attackers is obviously of the highest level and includes geopolitical data which can be used by nation states. Such information could be traded in the underground and sold to the highest bidder, which can be of course, anywhere.</p></blockquote>
<p>Capitalism!</p>
]]></content:encoded>
		<wfw:commentRss>http://betabeat.com/2013/01/kaspersky-lab-russia-cyberwar-cyber-spying-red-october-malware/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://0.gravatar.com/avatar/0bbc75db8f7be0cab7d4698c7cd08df2?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">kfairclothobserver</media:title>
		</media:content>

		<media:content url="http://nyobetabeat.files.wordpress.com/2013/01/208194085.png" medium="image">
			<media:title type="html">RED OCTOBER </media:title>
		</media:content>
	</item>
		<item>
				
		<title>Sorry, Forever Alones: Those Bikini Pics in Your Inbox Probably Contain Malware</title>

		<comments>http://betabeat.com/2013/01/sorry-foreveralones-those-bikini-pics-that-landed-in-your-inbox-probably-contain-malware/#comments</comments>
		<pubDate>Wed, 02 Jan 2013 09:07:56 -0400</pubDate>
					<link>http://betabeat.com/2013/01/sorry-foreveralones-those-bikini-pics-that-landed-in-your-inbox-probably-contain-malware/</link>
			<dc:creator>Jessica Roy</dc:creator>
				
		<guid isPermaLink="false">http://betabeat.com/?p=75388</guid>
		<description><![CDATA[<p><div id="attachment_75393" class="wp-caption alignleft" style="width: 276px"><img class="size-medium wp-image-75393" alt="(Photo: Emsi Soft)" src="http://nyobetabeat.files.wordpress.com/2013/01/bikini_01_2.jpeg?w=266" width="266" height="300" /><p class="wp-caption-text">(Photo: Emsi Soft)</p></div></p>
<p>Did you receive an email this holiday season from a kind-hearted woman who just wanted to celebrate Christmas by sending random strangers pictures of herself in skin-bearing bikinis? Free noodz from an anonymous hottie seemed too good to be true! And indeed, it was.</p>
<p>Sophos' Naked Security <a href="http://nakedsecurity.sophos.com/2013/01/02/bikini-screensaver/?utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+nakedsecurity+%28Naked+Security+-+Sophos%29">reports</a> that malware is currently circulating via screensavers of bikini shots landing in the inboxes of hapless Internet folks.</p>
<p><!--more-->According to Naked Security, a malicious Trojan horse is embedded within an executable screensaver file sent by a woman who claims to have attached those bikini pics she promised you. If you open it expecting to see a sexy screensaver, all you'll get is a computer full of malware.</p>
<p>If a lady didn't actually promise you pics of herself in a bikini, <em>probably</em> don't open the email. Plus, if you're that starved for naked lady pics, might we suggest you explore the Internet outside of your work inbox?</p>
]]></description>
		<content:encoded><![CDATA[<p><div id="attachment_75393" class="wp-caption alignleft" style="width: 276px"><img class="size-medium wp-image-75393" alt="(Photo: Emsi Soft)" src="http://nyobetabeat.files.wordpress.com/2013/01/bikini_01_2.jpeg?w=266" width="266" height="300" /><p class="wp-caption-text">(Photo: Emsi Soft)</p></div></p>
<p>Did you receive an email this holiday season from a kind-hearted woman who just wanted to celebrate Christmas by sending random strangers pictures of herself in skin-bearing bikinis? Free noodz from an anonymous hottie seemed too good to be true! And indeed, it was.</p>
<p>Sophos' Naked Security <a href="http://nakedsecurity.sophos.com/2013/01/02/bikini-screensaver/?utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A+nakedsecurity+%28Naked+Security+-+Sophos%29">reports</a> that malware is currently circulating via screensavers of bikini shots landing in the inboxes of hapless Internet folks.</p>
<p><!--more-->According to Naked Security, a malicious Trojan horse is embedded within an executable screensaver file sent by a woman who claims to have attached those bikini pics she promised you. If you open it expecting to see a sexy screensaver, all you'll get is a computer full of malware.</p>
<p>If a lady didn't actually promise you pics of herself in a bikini, <em>probably</em> don't open the email. Plus, if you're that starved for naked lady pics, might we suggest you explore the Internet outside of your work inbox?</p>
]]></content:encoded>
		<wfw:commentRss>http://betabeat.com/2013/01/sorry-foreveralones-those-bikini-pics-that-landed-in-your-inbox-probably-contain-malware/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:content url="http://2.gravatar.com/avatar/b59d8cbbeb9009e27771e8c6863ee21a?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">jroyobserver</media:title>
		</media:content>

		<media:content url="http://nyobetabeat.files.wordpress.com/2013/01/bikini_01_2.jpeg?w=266" medium="image">
			<media:title type="html">(Photo: Emsi Soft)</media:title>
		</media:content>
	</item>
		<item>
				
		<title>That&#8217;s Not the World Ending, That&#8217;s Malware</title>

		<comments>http://betabeat.com/2012/12/mayans-2012-end-of-world-powerpoint-virus-malware/#comments</comments>
		<pubDate>Thu, 20 Dec 2012 09:34:38 -0400</pubDate>
					<link>http://betabeat.com/2012/12/mayans-2012-end-of-world-powerpoint-virus-malware/</link>
			<dc:creator>Kelly Faircloth</dc:creator>
				
		<guid isPermaLink="false">http://betabeat.com/?p=74627</guid>
		<description><![CDATA[<p><div id="attachment_72024" class="wp-caption alignleft" style="width: 254px"><a href="http://betabeat.com/2012/11/oh-my-god-shut-up-about-the-world-ending-already-says-nasa/6a00d83451c64169e20120a5cb338d970b-800wi/" rel="attachment wp-att-72024"><img class=" wp-image-72024  " alt="NOPE, ALL BULLSHIT. " src="http://nyobetabeat.files.wordpress.com/2012/11/6a00d83451c64169e20120a5cb338d970b-800wi.jpg" width="244" height="362" /></a><p class="wp-caption-text">The apocalypse has been cancelled. No rain date has been set.</p></div></p>
<p>Everyone and his brother is chattering away about the Mayan apocalypse, which supposedly happens tomorrow. If you’re just now learning the world might end, you might be tempted to Google around for more info. Just don't open any sketchy powerpoint presentations on the matter, Naked Security <a href="http://nakedsecurity.sophos.com/2012/12/20/is-the-world-ending-friday-maybe-maybe-not-but-curiosity-could-be-infectious/">warns</a>.</p>
<p>That's because there's one circulating with the SEO friendly title of "Will the world end in 2012?" and it's brimming with malware.</p>
<p><!--more--></p>
<p>You open the document, enable macros and boom, nasties on your hard drive. So tomorrow the world will turn on, but your computer will be compromised.</p>
<p>Naked Security explains where this little Christmas present originated:</p>
<blockquote><p>The presentation about the world ending was created by a preacher in the United States who appears to have nothing to do with this booby-trapped version. Don't go looking for this presentation though!</p>
<p>His legitimate WordPress blog has been compromised and is currently performing search engine manipulation duties for Viagra pushers, "off-shore" casinos, forex fraud and payday loans.</p></blockquote>
<p>Spammers--or <a href="http://www.businessinsider.com/planet-nibiru-2012-12"><em>the planet Nibiru</em></a>???</p>
]]></description>
		<content:encoded><![CDATA[<p><div id="attachment_72024" class="wp-caption alignleft" style="width: 254px"><a href="http://betabeat.com/2012/11/oh-my-god-shut-up-about-the-world-ending-already-says-nasa/6a00d83451c64169e20120a5cb338d970b-800wi/" rel="attachment wp-att-72024"><img class=" wp-image-72024  " alt="NOPE, ALL BULLSHIT. " src="http://nyobetabeat.files.wordpress.com/2012/11/6a00d83451c64169e20120a5cb338d970b-800wi.jpg" width="244" height="362" /></a><p class="wp-caption-text">The apocalypse has been cancelled. No rain date has been set.</p></div></p>
<p>Everyone and his brother is chattering away about the Mayan apocalypse, which supposedly happens tomorrow. If you’re just now learning the world might end, you might be tempted to Google around for more info. Just don't open any sketchy powerpoint presentations on the matter, Naked Security <a href="http://nakedsecurity.sophos.com/2012/12/20/is-the-world-ending-friday-maybe-maybe-not-but-curiosity-could-be-infectious/">warns</a>.</p>
<p>That's because there's one circulating with the SEO friendly title of "Will the world end in 2012?" and it's brimming with malware.</p>
<p><!--more--></p>
<p>You open the document, enable macros and boom, nasties on your hard drive. So tomorrow the world will turn on, but your computer will be compromised.</p>
<p>Naked Security explains where this little Christmas present originated:</p>
<blockquote><p>The presentation about the world ending was created by a preacher in the United States who appears to have nothing to do with this booby-trapped version. Don't go looking for this presentation though!</p>
<p>His legitimate WordPress blog has been compromised and is currently performing search engine manipulation duties for Viagra pushers, "off-shore" casinos, forex fraud and payday loans.</p></blockquote>
<p>Spammers--or <a href="http://www.businessinsider.com/planet-nibiru-2012-12"><em>the planet Nibiru</em></a>???</p>
]]></content:encoded>
		<wfw:commentRss>http://betabeat.com/2012/12/mayans-2012-end-of-world-powerpoint-virus-malware/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
	
		<media:thumbnail url="http://nyobetabeat.files.wordpress.com/2012/11/6a00d83451c64169e20120a5cb338d970b-800wi.jpg?w=101" />
		<media:content url="http://nyobetabeat.files.wordpress.com/2012/11/6a00d83451c64169e20120a5cb338d970b-800wi.jpg?w=101" medium="image">
			<media:title type="html">6a00d83451c64169e20120a5cb338d970b-800wi</media:title>
		</media:content>

		<media:content url="http://0.gravatar.com/avatar/0bbc75db8f7be0cab7d4698c7cd08df2?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">kfairclothobserver</media:title>
		</media:content>

		<media:content url="http://nyobetabeat.files.wordpress.com/2012/11/6a00d83451c64169e20120a5cb338d970b-800wi.jpg" medium="image">
			<media:title type="html">NOPE, ALL BULLSHIT. </media:title>
		</media:content>
	</item>
		<item>
				
		<title>Researchers Find New Mac Keylogging Trojan on Site About Dalai Lama</title>

		<comments>http://betabeat.com/2012/12/researchers-find-new-mac-keylogging-trojan-on-site-about-dalai-lama/#comments</comments>
		<pubDate>Mon, 03 Dec 2012 13:42:21 -0400</pubDate>
					<link>http://betabeat.com/2012/12/researchers-find-new-mac-keylogging-trojan-on-site-about-dalai-lama/</link>
			<dc:creator>Steve Huff</dc:creator>
				
		<guid isPermaLink="false">http://betabeat.com/?p=72350</guid>
		<description><![CDATA[<p><div id="attachment_69798" class="wp-caption alignleft" style="width: 310px"><a href="http://betabeat.com/2012/11/new-apple-store-palo-alto-unbearably-loud-decibals-noise-pollution-jean-louis-gassee/applestore_palo_alto/" rel="attachment wp-att-69798"><img class="size-medium wp-image-69798" alt="Now more hackable. (Photo: Monday Note)" src="http://nyobetabeat.files.wordpress.com/2012/11/applestore_palo_alto.jpeg?w=300" height="200" width="300" /></a><p class="wp-caption-text">Now more hackable. (Photo: Monday Note)</p></div></p>
<p>Dockster is a recently discovered <a href="http://www.intego.com/mac-security-blog/new-mac-spyware-discovered-osxdockster-a/" target="_blank">Mac-based malware program</a> that functions as a keylogger, among other things. It's also a trojan, which means it can hide on a host computer quietly recording every keystroke before it contacts a remote server for further instructions. Dockster is considered "low risk," but it has been <a href="http://www.f-secure.com/weblog/archives/00002466.html" target="_blank">found embedded on gyalwarinpoche.com</a>--a site dedicated to the Dalai Lama.</p>
<p>F-Secure confirmed the infection and reported that Tibetan sites appear to be frequent targets for similar exploits:<!--more--></p>
<blockquote><p>This is not the first time gyalwarinpoche.com has been compromised and it certainly isn't the first time Tibetan related NGOs have been targeted.</p></blockquote>
<p>Researchers <a href="http://www.f-secure.com/weblog/archives/00002348.html" target="_blank">also say</a> that the Mac malware found on this and other Tibetan sites are "very unlikely to be encountered 'in-the-wild' by day to day Mac users."</p>
<p>Don't rest easy assuming these sneaky programs are isolated, state-sponsored efforts targeting one prominent figure or one beleaguered nation like Tibet. As illustrated by <a href="http://www.securelist.com/en/blog/208193470/New_Version_of_OSX_SabPub_Confirmed_Mac_APT_attacks" target="_blank">this April report from Kaspersky Lab on the SabPub Mac trojan</a>, cyber attackers are finding their way into Macs for a wide variety of reasons. Mac holdouts who have abstained from downloading antivirus software may have some thinking to do.</p>
]]></description>
		<content:encoded><![CDATA[<p><div id="attachment_69798" class="wp-caption alignleft" style="width: 310px"><a href="http://betabeat.com/2012/11/new-apple-store-palo-alto-unbearably-loud-decibals-noise-pollution-jean-louis-gassee/applestore_palo_alto/" rel="attachment wp-att-69798"><img class="size-medium wp-image-69798" alt="Now more hackable. (Photo: Monday Note)" src="http://nyobetabeat.files.wordpress.com/2012/11/applestore_palo_alto.jpeg?w=300" height="200" width="300" /></a><p class="wp-caption-text">Now more hackable. (Photo: Monday Note)</p></div></p>
<p>Dockster is a recently discovered <a href="http://www.intego.com/mac-security-blog/new-mac-spyware-discovered-osxdockster-a/" target="_blank">Mac-based malware program</a> that functions as a keylogger, among other things. It's also a trojan, which means it can hide on a host computer quietly recording every keystroke before it contacts a remote server for further instructions. Dockster is considered "low risk," but it has been <a href="http://www.f-secure.com/weblog/archives/00002466.html" target="_blank">found embedded on gyalwarinpoche.com</a>--a site dedicated to the Dalai Lama.</p>
<p>F-Secure confirmed the infection and reported that Tibetan sites appear to be frequent targets for similar exploits:<!--more--></p>
<blockquote><p>This is not the first time gyalwarinpoche.com has been compromised and it certainly isn't the first time Tibetan related NGOs have been targeted.</p></blockquote>
<p>Researchers <a href="http://www.f-secure.com/weblog/archives/00002348.html" target="_blank">also say</a> that the Mac malware found on this and other Tibetan sites are "very unlikely to be encountered 'in-the-wild' by day to day Mac users."</p>
<p>Don't rest easy assuming these sneaky programs are isolated, state-sponsored efforts targeting one prominent figure or one beleaguered nation like Tibet. As illustrated by <a href="http://www.securelist.com/en/blog/208193470/New_Version_of_OSX_SabPub_Confirmed_Mac_APT_attacks" target="_blank">this April report from Kaspersky Lab on the SabPub Mac trojan</a>, cyber attackers are finding their way into Macs for a wide variety of reasons. Mac holdouts who have abstained from downloading antivirus software may have some thinking to do.</p>
]]></content:encoded>
		<wfw:commentRss>http://betabeat.com/2012/12/researchers-find-new-mac-keylogging-trojan-on-site-about-dalai-lama/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
	
		<media:thumbnail url="http://nyobetabeat.files.wordpress.com/2011/04/apple-logo.jpg?w=75" />
		<media:content url="http://nyobetabeat.files.wordpress.com/2011/04/apple-logo.jpg?w=75" medium="image">
			<media:title type="html">apple logo</media:title>
		</media:content>

		<media:content url="http://1.gravatar.com/avatar/12d391316d94afeef01bd9a987c847fe?s=96&#38;d=identicon&#38;r=G" medium="image">
			<media:title type="html">shuffobserver</media:title>
		</media:content>

		<media:content url="http://nyobetabeat.files.wordpress.com/2012/11/applestore_palo_alto.jpeg?w=300" medium="image">
			<media:title type="html">Now more hackable. (Photo: Monday Note)</media:title>
		</media:content>
	</item>
	</channel>
</rss>
