Thunderstrike Firmworm: A Mac’s Cyber Thorn

image

You do not have to be an outstanding computer genius or a cyber guru to know that Mac computers are considerably safer platforms compared to Windows. However, some busy little expert bees have decided to put this claim to a test. So, what were the results of this “experiment”?

This is how the so-called Thunderstruck Firmware for Mac computers was born. Its name says it all, does not it? Its ability to hide in the firmware section, combined with the ability to be set remotely makes it to be a formidable security threat. So, what can we do about it?

You can relax, there is also another group of busy little bees at Apple, which is fixing this problem as we speak. On the other side, you should be wiser, and do your best to avoid any suspicious links. How hard could it be to follow this simple advice? Otherwise, you are going to be hit by the Thunderstrike.

There is a sad conclusion. Which one? Well, it seems that there is no safe cyber place for us. Everywhere you look there is a trouble or a threat waiting for you around the next cyber corner. Yet, if you play smart and according to the rules, you are going to decrease the chances against you, at least.

Android SMS Pirates

0801_imela_4

The busy little bees in Zimperium have been particularly occupied these days. Their findings are extremely disturbing. For what is worth, Android is in a serious trouble. We just could not believe how much damage you can cause with a single SMS, or an MMS to be more precise.

So, what is going on under the Android sun? Well, it seems that you only need a phone number, in order to proceed with your vicious plans. As soon as you send this dangerous message, you are in the control of an infected device. That is only the beginning.

You have an option to destroy this message almost immediately. In this way, you victim will not have a clue what is going on with his or her smartphone. So, what is the plan of these brilliant Zimperium guys? Well, Google has been warned. They are on the move.

It is also worth mentioning that Zimperium has provided a detailed description of the problem, including a solution for it. Google is silent on this one. Google is embarrassed about it. The SMS menace is out there. What can we do about it? Google, do not keep us waiting.

The Craziest Virus Ever

0705_imela_5

Let us face it cyber boys and girls, most of the so-called visionariness and IT entrepreneurs out-of-this-world, you admire discreetly,  would bored you to death in less than five minutes. Can you imagine Steve Jobs with a beer in his hand, or Bill Gates smoking marijuana on a presentation?

Our point is simple. These, and so many other more or less known cyber guys have shaped and reshaped our world. Nevertheless, despite their contributions, we are not going to make a movie about them. We have tried that with Steve Jobs, and we know how that one ended up in flames or criticism and poor box office results.

On the other hand, we have John McAfee, who can nowadays probably earn more from selling his story to the Hollywood, than selling his antivirus solutions. It would be ridiculous to even try describing his turbulent life in one post. Right?

He was high on the ladders of business success, and also high on you know what, when he helped us to fight back some of the notorious viruses during the 1980s and 1990s. He should definitely write a book, or help some Hollywood producer make a movie about his life. Oh boy, that would have been something.

Spinning Out Of The Nuclear Control

image

There is one more than one serious rumor that the NSA messed up with the Iranian nuclear program, for real and with a success. All of that, thanks to the special stuxnet-style virus. Can you really hack someone’s nuclear facilities? Apparently you can. Do not forget the North Korea.

Do you really believe that the men-in-black in the NSA have not tried to take control over the North Korean nuclear reactors? Then, how come they have failed to “play” with the centrifuges of their reactors, just like they did in Iran? Well, being isolated has some interesting positive consequences.

How can you possibly launch a virus in the country, where there is no Internet, almost literally? The answer is, forget about it, because it is not going to work. On the other side, we have to say that this is a dangerous and reckless game played by the NSA busy little cyber bees. Why is that?

Do you also believe that the notorious North Korean Bureau 121 is not going to try to strike back? When you look at the things in this way, then the USA can look as a true candyshoop for the North Korean hackers. We do not even dare imagine the worst case scenario. How about you?

Rombertik – The AI Malware

image

Oh dear, you have been so naive. For some childish reason, you thought that the modern day viruses are not going to develop and evolve. You really need to be one hell of a brainiac to come up with a successful malicious software solution. The call of the dark-cyber-side can be a huge temptation.

Meet the latest, brightest and deadliest member of the growing malicious family called – Rombertik. This fellow has a remarkable AI potential. Some even dare to classify it as a self-aware malware. So, what does it do? What is so special and dangerous about it? Are you ready for some bad news?

Well, while at “work” this malware is in a “regular” mode for any malicious software. It steals away your financial data, while doing its best to keep a low profile. On the other side, as soon as you run an antivirus software, Rombertik strikes back in an unprecedented way.

This malware would rather destroy itself including your precious device. Now, you get it. This is a genuine and a deadly Kamikaze virus. Unfortunately, there is no much you can do about it. If lucky enough, you can reinstall your computer. Otherwise, Rombertik will make you buy a new one.

2015 First Quarter With Kaspersky Lab

image

Every now and then, we simply have to include some of the dark cloud reports, which come from the Kaspersky Lab mountains. You know how it goes, don’t you? There is no good news with the busy little bees from the Kaspersky Lab. So, let us see what wrong has happened in 2015 first quarter for us to worry about.

The number of cyber threats and attacks have simply doubled in comparison to the identical period of the previous year. We are talking only about malware and viruses registered by the Kaspersky products and solutions. Unfortunately, that is only the beginning of bad news.

There is a new bad guy in our cyber-town and it is called the Equation Group. These guys are dead serious about their malicious work. They can infect your device’s firmware. How? That is something, Kaspersky would like to know, as well. What is the moral of this depressive story?

Well, for Kaspersky and other cyber security service providers the business is as usual. They will have plenty of work to do in the future. On the other side, we do not have a choice, than to become a little bit more religious. Pray that an Equation Group’s malware does not find you in the cyberspace.

Through Congress To Security Progress

image

It may sound a little bit unorthodox, but in the world of cyber security a debate is actually a positive thing to witness first-hand. So, who has a responsibility of pushing the security things in the right direction? Some fingers pointing impatiently and with expectations in the Congress’ direction.

Do we really need a legislative “motivation” to improve the security standards associated with our credit cards and available online payment solutions? As you might have guessed from the enclosed picture in this post, there is no opinion free of dispute nor controversy.

Business representative would gladly accept the push from the Congress in this field. On the other side, the busy little bees behind the cyber security industry are surprisingly up to a more flexible approach. Why? If there is a law, there has to be some responsibility, as well. Right?

We sure hope that the hackers will not take an advantage of this ridiculous situation where two sides are arguing over a simple and painfully obvious thing. You do not have to go to Congress, in order to achieve security progress, do you? Or, maybe there is no other way?

Banzai! Kamikaze Virus!

image

Here it goes. We have a bad and a less bad news for you. Why do you look so surprised? Take this innocent look off your face. Right now. There is no such a thing as a good news in the heartbreaking world of cyber security. So, which one of these two, you want to hear first?

Let us start with the bad one. There are some really nasty cyber guys, called the Kamikaze Viruses. You do not have to be a rocket scientist to know what these malicious busy little cyber bugs are all about, do you? They destroy both themselves and your computer as well. So, what now?

The only positive thing in this situation is that there are not too many of these killers. They are simply too bad for the business. What is the use for a hacker, if he or she kills your machine straight away? However, this does not mean that you will not hear banzai at some point in time.

So, what can you do about it? Buy yourself a new cyber ride. What else? In the meantime, think twice before you open a suspicious attachment. Yes, cyber boys and girls your own private Kamikaze Virus is not going to come out of the blue. You will hear gentle knocking on your door.

The Vawtrak Is On The Attack

image

The latest cyber monster, which is after your virtual money, has a name. The Vawtrak malware has begun with its global domination in Japan. So far, the serious estimates say that more than 100,000 computers have been infected. This malicious software follows your online banking transactions.

It has a simple goal. The Vawtrak transfers your money to the third party bank accounts. The users all over Asia have already lost more than hundreds of millions of dollars. Now, when we are fully aware about this financial danger, what can we do in order to eliminate it, for good?

You can rest assured that quite a few busy little bees in the cyber security sector work day and night on an efficient solution. As always, it is a merciless race against the time itself. The Vawtrak is moving from the West toward the East. How much time we have left before the real trouble?

As soon as it hits the cyber shores of Europe and the USA, we will be facing the completely new level of the cyber disaster. One important piece of the cyber puzzle is missing, though. No one told us, how all of those computers got infected in the first place. That is worth knowing. Is not that right?

Rent Your Own Cyber Lizard

image

Unbelievable. One more time we have realized that there is no such category called the dumb hacker. Why in the world, would you attack some of the most popular gaming networks during the Christmas week? It just does not make any sense. Unless. Unless, you are promoting yourself, for real.

Let us put it this way. If you are making weapons, what is the best possible way to promote your products? Oh dear, you either have to shoot someone or even worse to initiate a war. Forget about the ethics for a moment, and focus on the effectiveness itself, shall you? What is the result?

The Lizard Squad, which literally played with both the PSN and Xbox Live, was actually promoting its DDoS tools. Now, just like you are buying a legit software or a book online, you can acquire a DDoS package, which can guarantee you down time for a certain server for no less than 100 seconds.

In addition, for an affordable price of just six bucks you can do such a nasty thing. If you want to eliminate a website for the period of eight hours, then you will have to pay $130. How about that for a change? They are selling DDoS attacks per kilos. Unbelievable. What is next? Renting viruses or Trojans?