Live Chat & Podcast at 1:00PM Eastern on Sunday!
There's no such thing as a stupid question, but they're the easiest to answer.
JoinTour
Login
Search
General Security
Tag Cloud
access acer asus bios bsod computer crash desktop driver drivers error ethernet excel freeze gaming hard drive hardware hdmi internet laptop malware memory modem monitor motherboard network printer problem ram registry router security slow software sound toshiba trojan ubuntu 11.10 uninstall usb video virus vista wifi windows windows 7 windows 7 32 bit windows 7 64 bit windows xp wireless
Search
Search for:
Tech Support Guy Forums > Security & Malware Removal > General Security >
Researcher Uncovers Massive, Sophisticated Trojan Targeting Top Businesses

Reply  
Thread Tools
lotuseclat79's Avatar
Distinguished Member with 21,345 posts.
 
Join Date: Sep 2003
Location: -71.45091, 42.27841
30-Jul-2009, 12:10 PM #1
Researcher Uncovers Massive, Sophisticated Trojan Targeting Top Businesses
Researcher Uncovers Massive, Sophisticated Trojan Targeting Top Businesses.

Trojan may already have infected hundreds of thousands of PCs, botnet expert says

Quote:
"We weren't all that worried about Storm, and we weren't all that worried about Conficker," Stewart says. "This one you need to worry about."
...
The best strategy to defend against Clampi -- and other attacks that use a similar approach -- is to use separate machines for Web surfing and funds transfer, Stewart says. "Using Windows, it's too dangerous to do transactions on the same machine you do for Web surfing," he says. "You can't have any crossover between them."
-- Tom
skyfox's Avatar
Computer Specs
Member with 50 posts.
 
Join Date: Apr 2007
Experience: beginner-intermediate
04-Aug-2009, 03:15 AM #2
Posted via Mobile Device
Look_Whos_Typing's Avatar
Computer Specs
Member with 30 posts.
 
Join Date: Jul 2009
Experience: I know the raw basics
05-Aug-2009, 04:14 AM #3
Lotusclat,

Hi, I am just fixing a nasty little bug with the help of Cookiegal. I decided to browse in the general security posts and yours intrigued me. I am wondering if my problem is not part of your above mentioned problem.

If you would like to view the thread on my problem and see if they are connected I would be so greatful.

LWT
Thread is "Completley Baffled"
perfume's Avatar
perfume has a Photo Album
Computer Specs
Account Disabled with 2,011 posts.
 
Join Date: Sep 2008
Location: A DUDE WITH ATTITUDE! ALIEN.
Experience: Intermediate++
05-Aug-2009, 12:19 PM #4
Dear Tom,
Thank you for the info'! In the article" Enterprises currently can block Clampi with an intrusion prevention system, but Stewart says he doesn't expect that defense to last very long before the Trojan adapts.", interested me!

What's your take on Web Application Firewalls (WAFs) to counter this threat? I have stopped using the net totally for financial transactions since almost a year and half, so what's the risk of my PC becoming a botnet? I'll be eagerly waiting for your response!
Regards,
perfume.
lotuseclat79's Avatar
Distinguished Member with 21,345 posts.
 
Join Date: Sep 2003
Location: -71.45091, 42.27841
05-Aug-2009, 12:34 PM #5
Quote:
Originally Posted by Look_Whos_Typing View Post
Lotusclat,

Hi, I am just fixing a nasty little bug with the help of Cookiegal. I decided to browse in the general security posts and yours intrigued me. I am wondering if my problem is not part of your above mentioned problem.

If you would like to view the thread on my problem and see if they are connected I would be so greatful.

LWT
Thread is "Completley Baffled"
Hi Look_Whos_Typing,

Unless you are one of the Top Wealthy businesses cited in the article, it is very doubtful your problem is related to that cited in the article. You were not targeted, you were, however, pnwded by a piece of malware that Cookiegal has helped you fix.

-- Tom
lotuseclat79's Avatar
Distinguished Member with 21,345 posts.
 
Join Date: Sep 2003
Location: -71.45091, 42.27841
05-Aug-2009, 12:39 PM #6
Quote:
Originally Posted by perfume View Post
Dear Tom,
Thank you for the info'! In the article" Enterprises currently can block Clampi with an intrusion prevention system, but Stewart says he doesn't expect that defense to last very long before the Trojan adapts.", interested me!

What's your take on Web Application Firewalls (WAFs) to counter this threat? I have stopped using the net totally for financial transactions since almost a year and half, so what's the risk of my PC becoming a botnet? I'll be eagerly waiting for your response!
Regards,
perfume.
Hi perfume,

The chances of anyone running a Windows computer becoming a member of a botnet is a lot higher if they are not attentive to their computer's security. Do you have a link about WAFs?

Good for you to not use a computer for financial transactions - neither do I.

-- Tom
__________________
The independence created by philosophical insight is - in my opinion - the mark of distinction
between a mere artisan or specialist and a real seeker after truth. - Einstein 1944
Imagination is more important than knowledge. - Einstein
perfume's Avatar
perfume has a Photo Album
Computer Specs
Account Disabled with 2,011 posts.
 
Join Date: Sep 2008
Location: A DUDE WITH ATTITUDE! ALIEN.
Experience: Intermediate++
05-Aug-2009, 01:07 PM #7
Dear Tom,
It's you who taught me how dangerous the web can be for conducting financial transactions! That was a good lesson i learnt, lucky me! I am seriously considering shifting to a Linux Distro after MS has decided to launch Windows 7! As RootbeaR said he's getting tired of "keeping the Windows on his PC secure"!

Yes, i have a link to some free WAF scanners and i have checked the site with both "Interclue" and "Dr.Web Link Scanner" which have given a clean chit to the link. (link removed by Cookiegal)

Last edited by Cookiegal; 05-Aug-2009 at 01:58 PM.. Reason: Warez link removed
Cookiegal's Avatar
Administrator & Malware Removal Specialist with 79,286 posts.
 
Join Date: Aug 2003
Location: Quebec, Canada
05-Aug-2009, 01:58 PM #8
Quote:
Originally Posted by perfume View Post
Dear Tom,
It's you who taught me how dangerous the web can be for conducting financial transactions! That was a good lesson i learnt, lucky me! I am seriously considering shifting to a Linux Distro after MS has decided to launch Windows 7! As RootbeaR said he's getting tired of "keeping the Windows on his PC secure"!

Yes, i have a link to some free WAF scanners and i have checked the site with both "Interclue" and "Dr.Web Link Scanner" which have given a clean chit to the link. (link removed by Cookiegal)
I've removed the link. We do not link to warez sites here as we don't support that activity.
Look_Whos_Typing's Avatar
Computer Specs
Member with 30 posts.
 
Join Date: Jul 2009
Experience: I know the raw basics
05-Aug-2009, 02:14 PM #9
Tom,

Nope that wouldn't be me. On a secondary note. What about using a prepaid credit card to do financial transactions. That way you can have the convenience without the fear. Is this ok to do?

Thanks
LWT
perfume's Avatar
perfume has a Photo Album
Computer Specs
Account Disabled with 2,011 posts.
 
Join Date: Sep 2008
Location: A DUDE WITH ATTITUDE! ALIEN.
Experience: Intermediate++
05-Aug-2009, 10:46 PM #10
Dear cookiegal,
Sincerely did not know it was on the banned list! Accept my unreserved apologies ! I will give Tom, a valid site for WAFs this time!
perfume's Avatar
perfume has a Photo Album
Computer Specs
Account Disabled with 2,011 posts.
 
Join Date: Sep 2008
Location: A DUDE WITH ATTITUDE! ALIEN.
Experience: Intermediate++
05-Aug-2009, 11:00 PM #11
Dear Tom,
Linux seems to score a point over Windows every time! This article mentions four WAFs for Linux,namely :
These have been lifted from this need-to-know educative article: http://en.wikipedia.org/wiki/Application_firewall

This link leads to OnIt Personal Firewall (application firewall) download : http://download.cnet.com/OnIt-Personal-Firewall/3000-10435_4-10548233.html

Hope this will be useful! Dear Tom, Kindly let me know your opinion on both these types of firewalls!
lunarlander's Avatar
Computer Specs
Senior Member with 3,491 posts.
 
Join Date: Sep 2007
06-Aug-2009, 02:49 AM #12
Hi Perfume,

I think your definition of WAF is a bit broad, given the examples you gave above. I follow this definition here :
http://www.owasp.org/index.php/Web_Application_Firewall
perfume's Avatar
perfume has a Photo Album
Computer Specs
Account Disabled with 2,011 posts.
 
Join Date: Sep 2008
Location: A DUDE WITH ATTITUDE! ALIEN.
Experience: Intermediate++
06-Aug-2009, 04:37 AM #13
Dear lunarlander,
" Web application firewalls (WAF) are a new breed of information security technology designed to protect web sites from attack. WAF solutions are capable of preventing attacks that network firewalls and intrusion detection systems can't, and they do not require modification of application source code. It is vitally important to develop a standardized criteria for product evaluation. How else can we accurately compare or measure the performance of a particular solution?

Establishing an evaluation criteria can be a difficult task even for a skilled web security professional. This fact makes it very difficult to compare WAF products offered by various different vendors. source : http://www.webappsec.org/projects/wafec/

Generally an application layer firewall is a host using various forms of proxy servers to proxy traffic instead of routing it. Source : http://en.wikipedia.org/wiki/Application_layer_firewall

I use this wiki's def. of a WAF!
Reply

THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
WELCOME TO TECH SUPPORT GUY! Are you looking for the solution to your computer problem? Join our site today to ask your question -- for free! Our site is run completely by volunteers who want to help you solve your computer problems. See our Welcome Guide to get started.
Thread Tools



Facebook Facebook Twitter Twitter TechGuy.tv TechGuy.tv Mobile TSG Mobile
You Are Using:
Server ID
Advertisements do not imply our endorsement of that product or service.
All times are GMT -4. The time now is 10:09 PM.
Copyright © 1996 - 2011 TechGuy, Inc. All rights reserved.

Powered by Cermak Technologies, Inc.