Slashdot Mirror

We've gotten a number of submissions about the new tricks the massive Storm botnet has been up to. Estimates of the size of this botnet range from 250K-1M to 5M-10M compromised machines. Reader cottagetrees notes a writeup at Exploit Prevention Labs on a new social engineering attack involving YouTube. The emails, which may be targeted at people who use private domain registrations, warn the recipient that their "face is all over 'net" on a YouTube video. The link is to a Storm-infected bot that attacks using the Q4Rollup exploit (a package of about a dozen encrypted exploits). And reader thefickler writes that the recent wave of "confirmation spam" is also due to Storm, as was the earlier, months-long "e-card from a friend" series of attack emails.

An anonymous reader writes "Just a few days after it was discovered, Symantec has posted a fix to a critical flaw with its Antivirus software." From the article: "The eEye digital security firm reported the problem initially, and discovered it was present in the newest versions of the affected Symantec products. Further research noted by Symantec described the problem as a flaw that made the products vulnerable to a stack overflow. Once exploited, that overflow could have permitted an attacker to execute code on the machine, with System level rights. The issue was made worse by being one that impacted enterprise-level customers, big spenders that purchase hundreds or thousands of licenses depending on the size of the business. "

theodp writes "How do you reward Google for letting your CEO buy stock for six cents a share? If you're Amazon, you dump Google for Windows Live Search to power subsidiary Alexa, who has not yet commented on the switch. Other Windows Live Search sightings are being observed at Amazon subsidiary a9.com." From the Search Engine Lowdown article: "The Alexa toolbar's gotten Alexa a bad rap from privacy advocates, though in function it's effect on search results is similar to click stream data that Google, Yahoo, MSN, Ask may or may not be using in their determinations of relevance. Wall points out that 'A9 is still powered by Google...' A9 is Amazon's primary search project. Wall wonders, however, if the change in Alexa indicates a larger coming change in Amazon's relationship to Google. I agree. In fact, I see the move as the first Google Dump in the post eBay's-seeking-partners-against-Google era."