Posts Tagged: ‘zombie computers’

While controversy and allegations swirl around Julian Assange and Wikileaks, virtual warriors either siding with Wikileaks or opposing it are squaring off with their armies of infected computers around the world. They wage war against targets they’ve identified as possessing a conflicting philosophy from their own. Some people call such actions hactivism — using hacking tactics to push forward a particular agenda. Others just call it cyberwar.

Tags: , , , , , , , , , , ,

The Chinese government is infamous for controlling the information Chinese citizens have access to. The country uses several methods (including firewalls and proxy servers) to restrict access to various Web sites that criticize Communism or promote the causes of groups like the Falun Gong. Officially, these methods are part of the Golden Shield Project. But we know it better as “the Great Firewall of China.” And while restrictions are tight, a person with the right software and technical know-how can get around many of the obstacles.

Earlier this month, word spread that the Chinese government would require PC manufacturers to install the Green Dam-Youth Escort software before selling the machines to the public. The censorship software will block access to certain Web sites. The Chinese government claims that the purpose of the software is to censor pornography. But some people worry that it will do much more than that, making it even more difficult for Chinese citizens to access information from sources other than Chinese Web sites.

Tags: , , , , , , ,

Something strange is going on across the Internet. Some Norton Anti-Virus users are receiving pop-up messages alerting them about an application called PIFTS.exe that is trying to connect to a server. But what is PIFTS.exe? Why does it need to access the Internet? What is it trying to access? What connection does it have to Norton (or Symantec, the company that produces Norton-branded products)?

As of right now, we don’t have many answers to these questions. What we do know is that it appears to be linked to a Norton update cycle. Whether Symantec is responsible for the application or not is still not known. Nor do we know what the application’s purpose is. All we know is that the application appears to connect the user’s computer to a remote server.

To make matters more confusing, it appears that inquiries posted by Symantec customers to the official Norton forums have been removed.

Tags: , , , , ,

Earlier today Microsoft issued security advisory 968272 regarding a vulnerability discovered in the Office application Excel. According to the advisory, the user’s computer would become vulnerable to a malicious hacker (aka cracker) if the user opened a specifically designed Excel file. The cracker would then have the ability to perform remote code execution.

The cracker would gain the same user rights as the local user. That means if the user has administrator rights, the cracker would have practically unrestricted access to the user’s computer.

Zombie computers and botnets are always scary, but you should remember that the only way to become a victim of this particular attack is to open the special Excel file. To pull off an attack, the cracker would first need to distribute or host the Excel file and convince people to download it and open it. If you practice safe Web surfing habits, you should be fine.

Tags: , , , , , ,

Recent Postings by Category