Select Real Security

http://www.selectrealsecurity.com/

What information does this website provide? 

This website provides you with useful resources and information on computer security. It contains over 100 links to a variety of useful security related resources and information, including articles, guides, malware prevention, tips, and more. It also contains information on how to secure your computer, data, and internet connection from malicious attacks.

This Month in the Threat Webscape - March 2010

Websense Security labs has released their monthly video report covering web threat activity for the month of March.

"This month, we look at:
• RSA and CanSecWest
• Websense Security Labs discovery of more than 250,000 malicious Facebook posts
• More huge patches for browsers, plugins and operating systems
• Another bad month for Apple security"

Anti-Rootkit Detection and Removal Test (April 2010)

Anti-malware.ru has published their latest test. The test is on anti-rootkit detection and removal.

Test results:

"Gold Award
1. GMER 1.0.13 (10.5 of 12 points)
2. VBA32 Antirootkit 3.12 (beta) (10 out of 12 points)

Silver Award
3. RootRepeal 1.3.5 (9 out of 12 points)
4. Online Solutions Autorun Manager 5.0.11926.0 (8 out of 12 points)
5. XueTr 1.0.2.0 (8 out of 12 points)
6. Rootkit Unhooker 3.8.386.589 (7.5 of 12 points)

Bronze Award
7. SysReveal 1.0.0.27 (6.5 of 12 points)
8. KernelDetective 1.3.1 (6 out of 12 points)
9. Sophos Anti-Rootkit 1.5.0 (6 out of 12 points)

Failed the test
10. Trend Micro RootkitBuster 2.80 (3 out of 12 points)
11. Eset SysInspector 1.2.012.0 (2.5 of 12 points)
12. Panda Anti-Rootkit 1.0.8.0 (1.5 of 12 points)

The best anti-rootkit on the test results are recognized GMER and VBA32 Antirootkit, who deservedly received the award Gold Anti-Rootkit Protection Award. Their superiority over the other can be clearly seen in the last three samples of rootkits in table 4."

Test: http://translate.google.com/translate?hl=en&sl=ru&u=http://www.anti-malware.ru/antirootkits_test_2010

China: The Hacker Capital Of The World

China has been identified as the worlds largest country of cyber-espionage.

"China is the world center for malicious computer use. Computer security experts have exposed China as the base of operations for 30% of the world’s malicious email, making China a haven for hackers, crackers, spy ware nuts, and general bad apples. However, within China, there is the city called the cybercrime capital of the world, Shaoxing. This eastern Chinese city is responsible for 21.3 percent of all targeted computer attacks." Article

It's not surprising when you look at the recent news and reports.

MRG: Malwarebytes 1.45 Vs. Early Life Malware

MRG ran an on-demand scan test on MBAM!



MBAM did a good job!

Matousec: New Firewall Test Results (Online Armor & Trend Micro)

"2010-03-30: New results have been published for:
Online Armor Free 4.0.0.35
Trend Micro Internet Security Pro 2010 17.50.1647.0000

Trend Micro Internet Security Pro 2010 finished with 9 %. Online Armor Free performed much better. We can see major improvements in Online Armor Free compared to its previously tested version. Its new score of 96 % is good enough for today to take the lead in Proactive Security Challenge. Congratulations!"

Well done Online Armor!

Link: http://www.matousec.com/projects/proactive-security-challenge/

How I’d Hack Your Weak Passwords

I came across a very interesting blog article by John P. about password security. He warns you of the dangers of a weak password and tells you what you should do. Well worth reading!

"If you invited me to try and crack your password, you know the one that you use over and over for like every web page you visit, how many guesses would it take before I got it? ...

... pay particular attention to the difference between using only lowercase characters and using all possible characters (uppercase, lowercase, and special characters – like @#$%^&*). Adding just one capital letter and one asterisk would change the processing time for an 8 character password from 2.4 days to 2.1 centuries."

Full article: http://onemansblog.com/2007/03/26/how-id-hack-your-weak-passwords/

MessageLabs Intelligence: March 2010 Report (Latest Threat Trends)

MessageLabs Intelligence has released a new report on the latest malware threat trends:

Highlights:

Most dangerous email attachments: 

You can download the full report in PDF format here: http://www.messagelabs.com/mlireport/MLI_2010_03_Mar_FINAL-EN.pdf