malware – Official TechtalkRadio Blog https://blog.techtalkradio.com The Blog for the TechtalkRadio Show Wed, 15 Mar 2017 20:26:28 +0000 en-US hourly 1 https://wordpress.org/?v=6.6.2 63714750 “Dirty” devices…fresh out the box! https://blog.techtalkradio.com/dirty-devices-fresh-out-the-box/?utm_source=rss&utm_medium=rss&utm_campaign=dirty-devices-fresh-out-the-box https://blog.techtalkradio.com/dirty-devices-fresh-out-the-box/#respond Wed, 15 Mar 2017 20:26:28 +0000 http://blog.techtalkradio.com/?p=6264 Read More]]> Android devices, after being unpacked, have been found to have malware. The devices were not sold via retail outlets. But this is an example of why no device can be considered absolutely safe…anyone can be vulnerable when it pertains to issues of security.


“The Check Point Mobile Threat Prevention has recently detected a severe infection in 36 Android devices, belonging to a large telecommunications company and a multinational technology company. While this is not unusual, one detail of the attacks stands out. In all instances, the malware was not downloaded to the device as a result of the users’ use, it arrived with it.

“According to the findings, the malware were already present on the devices even before the users received them. The malicious apps were not part of the official ROM supplied by the vendor, and were added somewhere along the supply chain. Six of the malware instances were added by a malicious actor to the device’s ROM using system privileges, meaning they couldn’t be removed by the user and the device had to be re-flashed.”

http://blog.checkpoint.com/2017/03/10/preinstalled-malware-targeting-mobile-users/

]]>
https://blog.techtalkradio.com/dirty-devices-fresh-out-the-box/feed/ 0 6264
No internet July 9…for some… https://blog.techtalkradio.com/no-internet-july-9-for-some/?utm_source=rss&utm_medium=rss&utm_campaign=no-internet-july-9-for-some https://blog.techtalkradio.com/no-internet-july-9-for-some/#respond Sat, 07 Jul 2012 02:52:29 +0000 http://blog.techtalkradio.com/?p=1745 Read More]]> (I apologize: this post is LONG overdue. I have been actively battling other malware, which kept me too busy to warn you earlier about this one…)

July 9, if you have trouble with the internet…don’t be surprised:

Lots of computers, “servers”, that help to make the internet work were infected.

“The clean DNS servers will be turned off on July 9, 2012, and computers still impacted by DNSChanger may lose Internet connectivity at that time.”

From as many computers as you can, I want you to do some things:

Go to the “DNS Changer Check-Up” website at http://dns-ok.us/ . If the computer is infected with DNS changer malware, you might see a red background…

Next, consider going to http://www.dcwg.org/detect/ and read the section “Manually Checking if your DNS server have been Changed”.

Facebook and Google are trying to help with this problem. You can read more about it at these webpages:

https://www.facebook.com/notes/facebook-security/notifying-dnschanger-victims/10150833689760766

http://googleonlinesecurity.blogspot.com/2012/05/notifying-users-affected-by-dnschanger.html

To try to help you not become infected in the future, take a look at http://www.stopbadware.org/home/badware_prevent

It’s best to use the latest and greatest operating systems (Windows, Mac, Linux, etcetera), and keep all of your software (and hardware) updated. But you also need to be careful when using technology, and the internet and other services you connect to.

]]>
https://blog.techtalkradio.com/no-internet-july-9-for-some/feed/ 0 1745
Worms and viruses…via the postal service? https://blog.techtalkradio.com/worms-and-viruses-via-the-postal-service/?utm_source=rss&utm_medium=rss&utm_campaign=worms-and-viruses-via-the-postal-service https://blog.techtalkradio.com/worms-and-viruses-via-the-postal-service/#respond Mon, 06 Dec 2010 11:06:50 +0000 http://blog.techtalkradio.com/?p=1240 Read More]]> I received an e-mail message stating some products were being sent to me that I had inquired about.  When the package arrived, I noticed it had been sent from Hong Kong.  Interesting…

What arrived was a “USB Flash Drive with Voice Recording”, and “USB 2-in-1 Web Cam”.

Let’s begin with my experience with the web cam.

USB 2-in-1 Web Cam, Product Code: UWCAM003200

The packaging identifies it as a Minocam High Speed Web Cam.  A web cam, flash memory storage device, and…well, I have no idea what the third definitive function is.  I was the “2G” version, that has 2 gigabytes worth of storage.

There were many problems.

The USB Type A plug slides in and out of the device.  The piece on the side of the web cam, that is used to slide the plug in and out, broke off.

Software for it was provided on a Mini CD.  My computer from Alienware was not able to read it.  (I recommend NEVER using Mini CDs:  they don’t work in all devices.)

I connected the web cam to my computer, and Microsoft Windows Vista had compatible drivers for it.  The camera worked…but, the image rendered was as if the lens element had been knocked sideways about 45 degrees.  I attempted to adjust the lens, to turn it to see if I could straighten the image, and the lens came off and out of the camera.  I was able to see inside of the device.  It seems as if a mirror that reflects, or an element that captures, is misaligned.

Software was on the flash drive.  I copied it to a folder on my hard drive, and warnings appeared from Microsoft Security Essentials.

Category: Worm
Description: This program is dangerous and self-propagates over a network connection.
Items:
file:E:\AutoRun.inf

Category: Virus
Description: This program is dangerous and replicates by infecting other files.
Items:
file:E:\RavMon.exe

Category: Backdoor
Description: This program provides remote access to the computer it is installed on.
file:E:\Recycle.exe

Category: Worm
Description: This program is dangerous and self-propagates over a network connection.
file:RavMon.exe

After a search via the internet that, I found reports of others that had used the software…and then had problems with Windows Explorer.  I did not install the software.

I’ve read about horror stories of devices having malware on them (Seagate had shipped infected drives), as well as embedded in them (digital picture frames sold by Best Buy and Sams Club)…and those are just the two I can remember and mention this moment.  I never thought I would have a similar experience.  Especially when what I received did not come via a retail channel.

I don’t know who to blame:
the manufacturer…
the promotional agency…
the distributor…
or the Chinese postal service.

The packaging for the web cam was not “secure”…it could have been opened.

————————————————————————————————-

The best item of the two is the “USB Flash Drive with Voice Recording“, which I do recommend.

From their website:
“This USB flash drive is not only data storage, but also a voice recorder. You can records any sound into the memory with WAV format. Built-in a rechargeable battery, let you has 5 hours continuous recording…”

Price:  US$23.00

2GB (1GB ~ 70 hours recording)
Built-in voice recording On/Off switch
LED indicator
Support Window 7 / Vista / XP, Linux 2.4, Mac OS X or latest version
Colors:  Blue, Black

]]>
https://blog.techtalkradio.com/worms-and-viruses-via-the-postal-service/feed/ 0 1240