Slashdot Mirror
Predicting Malware
Pseudonymous B*ard writes "SANS has an interesting article showing how to predict what forms future malware will take. For example, last year there were many hurricane-related scams, while this year, another bad hurricane season is predicted. SANS has noticed that the scammers are gearing up for this and that many new domains with the words Alberto, Beryl, donation, and hurricane have been registered (Alberto & Beryl are the first two names on the hurricane list). The only question now is whether hackers will be able to preempt any of these scams before they have a chance to be used?"
SANS has noticed that the scammers are gearing up for this and that many new domains with the words Alberto, Beryl, donation, and hurricane have been registered (Alberto & Beryl are the first two names on the hurricane list).
This wouldn't be a problem if the Federal government wasn't in such a hurry to shovel cash out the door everytime there's a natural disaster to some politician's poll numbers.
As both of those things cause people to become incredibly gullible, whether it be pictures of tennis stars or the possiblity of "inheriting" or "winning the lottery" a large sum of money.
Also, you can pretty much guarantee it will start off as a Windows malware attempt.
-- Tigger warning: This post may contain tiggers! --
But this boils down to Malware will likely be associated with major events. Color me unimpressed. I have another one future malware will exploit unpatched security flaws.
Obligatory grammar post.
"Last year X, while this year X again." "And" for pete sakes. If you are comparing two things which are the same in nature but different in time, it should be "and". "While" would be used if, say, it was hurricanes last year and earthquakes this year (i.e., things which are different in their nature).
Unpleasantries.
Summary of article: malware authors may try to take advantage of disasters. That's not exactly cutting edge reporting. What I would be more interested in hearing about is if malware authors start creating rumors of disasters in order to cash in anyways if nothing bad happens. Let's say Alberto fizzles. Will we still get spam asking for donations to help the newly homeless? I guess I'll have to wait and see.
Philosophy.
if they succeed everything they have thought of will probably be abused :)
It's interesting that a Grammar Nazi can't spell "for Pete's sake" correctly :)
Clearly, the solution is to infect natural disasters with malware before they can strike.
Shouldn't one assume that the scammers and the cr|hackers are working hand in hand with the former providing technical services and entire networks of compromised computers to the latter who perform the commercial tasks?
Happy National Day Sweden 060606 (play some Slayer please)
# ~: no sigs today
If you don't consider the Feds shoveling cash out the door as "easy money", I got a bridge on the West Coast that I can sell to you. :P
Two little words, kid: Pluto's Kiss. Only Linux will be spared!
(rot13) rpbzbab@tznvy.pbz
As much as I think it sucks that people would actually do such things, they do. And they have been doing it for ages (anyone up to buy a bridge?). In the "real world" people still get caught in naughty scams, but maybe they are a little more aware nowadays. When online, however, I guess most people lower the guard; maybe it is "the internet" or the fact that it is in written form that gives some sense of seriousness to them. Add to it the fact that the vast majority of internet users does not know how easy it is to register ANY domain name in the US and there you are...
A little more education might be useful here. Also, maybe there should be a little higher barriers to domain registration. In Brazil, it is a little more difficult to set-up a domain name: you have to have an actual company, otherwise you have to restrict yourself to the "personal" TLDs. This was originally put in place to avoid a parallel market for domain names (much like what exists in the US today; in Brazil, the registrar is government-managed).
In the end, however, many people are just naïve. It would be nice if that could be a compliment...
The article isn't about folks scamming the feds, its about bogus "relief" sites taking money given by ordinary folks trying to help out a storm ravaged area. Like collecting door to door for AIDS relief and keeping the $$$ yourself. (assuming you don't have AIDS)
I'm a wizard!
Please put the old css code back please?
http://saveie6.com/
For those of you who've never heard of it:
Kaspersky Anti-Virus is the top of the line when it comes to protecting your system from all current and future virus and malware threats. I was skeptical until I tried it, but it really does work. It protects your system at an extremely low level without degrading performance, preventing the mal in malware, and requiring you to OK the way applications access your system sort of like how ZoneAlarm confirms each time a program accesses the internet. ANY possibly harmful action is checked against and you can set up very complex exception rules, so in a few days all your regular apps are up and running like normal and absolutely nothing slips into your system without you knowing about it.
No, I don't work for them, just want to share a wonderful product.
But you're gay
You can be confident a major nuisance will be gaining momentum on June 30, 2006, just in time to ruin your major US holiday weekend.
Help stamp out iliturcy.
Like collecting door to door for AIDS relief and keeping the $$$ yourself. (assuming you don't have AIDS)
But, if you were going to use the money to go on a safari tour in Africa, then you might have a possibility of getting it, so isn't that ok?
Hey, we had a theory that there might be a possibility of WMD, so we went to Iraq, same logic, right?
In the end, though, I think it all boils down to gullibility and people's innate desire to help out those who actually need help - a good thing - and the unscrupulous people who feed off of our good impulses.
-- Tigger warning: This post may contain tiggers! --
You will be able to track the world's hurricanes here. Thanks, Googlemaps! :)
Go on, then, get to it.
Even those who arrange and design shrubberies are under considerable economic stress at this period in history.
I have to ask this, just who is SANS, anyway? We get tons of alarmist reports from them, but nobody ever checks the source. I haven't been able to find much more than this entry on Wikipedia: "The SANS Institute (SysAdmin, Audit, Networking, and Security) is a trade name owned by the for-profit Escal Institute of Advanced Technologies. SANS provides computer security training, professional certification, and a research archive . It was founded in 1989."
And Wiki doesn't even have an entry for "Escal Institute of Advanced Technologies". Try Google, there's also next-to-nothing there. I don't like placing a lot of trust in something when I don't even know the source.
Does anyone have any more information?
www.lucernesys.comHorizon: Calendar-based personal finance
Of programs that take advantage of flaws in Internet Explorer and Windows. ;)
IMHO, the far more likely purpose of registering domains related to the next hurricane names are simply for SPAM. When the hurricanes hit, tens of thousands of people will mistype or find some other way of ending up on what I expect will be plain old ad serving pages. Considering the miniscule costs of setting this up, I'd suspect that it would make a few bucks. Especially compared to some of the other ad based domains I've stumbled on in the past...
i guess my old crystal ball and tarot cards just aren't cutting it anymore. I foresaw future malware being based on Vista.
Only if you know why Forth is called Forth.
Please, for the good of Humanity, vote Obama.
I am not sure about you, but to me malware is clearly distinct from e-mail scams.
Malware is a program that do nasty things to your computer. e-mail scams have nothing to do with that.
: SIG ( -- ) CR ." The fourth wave of attackers approaches. Go forth, and conquer them!" ;
:D
SIG
Looking up "Hello, world!" format for weird languages on wikipedia ftw.
Unpleasantries.
Only one force can stop this evil: a handful of brave men; in specially created exoframes they can sniff packets anywhere to fuse with incredible anti-malware weapons. Beamed down from the space station Sky Vault, becoming man and machine,
Power Xtreme!
The SANS turions
* lon3st4r *
He will come in one of the pre-chosen forms. During the rectification of the Vuldrini, the malware came as a large and moving Torg! Then, during the third reconciliation of the last of the McKetrick supplicants, they chose a new form for him: that of a giant Slor! Many Shuvs and Zuuls knew what it was to be roasted in the depths of the Slor that day, I can tell you!
Stupidity is the major vector, though.
Patents Drive Free Software as Hurricanes Drive Construction Industry
Actually, the NOAA and NWS are telling us that last year's hurricane season was unusally busy (translation: most years have fewer storms than that), and that this year will see fewer hurricanes.
Many scientists have explained in detail that the average temperature of the water in the Gulf of Mexico is much lower this year, which means hurricanes won't be as strong / plentiful as they were last year.
Oh yeah, before I forget