F-Secure Antivirus Research WeblogWeblog of F-Secure Antivirus Research TeamInternet Explorer 6 Cross-Domain Scripting Vulnerability- (Found July 2, 2008 ) Microsoft's Internet Explorer 6 has a reported cross-domain scripting vulnerability which could potentially expose user credentials (such as usernamespasswords) and allow cookie hijack sessions.Based on the results of our most recent poll:…this won't directly affect 98% of our readership.But as Mike Clark commented, "I answered Firefox, but I filled out the survey in IE6! This is because I am at work and my boss specifically refuses to allow me to use FF".So at least one of you has to...http://www.f-secure.com/weblog/archives/00001463.html Symbian Jailbreak- (Found July 2, 2008 ) A Spanish modder has developed an easy to use privilege escalation hack for Symbian S60 3rd Edition phones. The hack provides unlimited access to the phone's file system. With this access any number of modifications can be made.Mobile modding is a very dynamic scene. See our recent Motorola Razr post — and of course Apple iPhone research has had a great deal of activity from the time of its introduction. Despite the diversity of platforms, mobile phone enthusiasts are drawn to popular...http://www.f-secure.com/weblog/archives/00001451.html Storm Still Alive- (Found July 2, 2008 ) Despite reports of Storm being killed off, it's still very much alive. As recently as earlier today we saw an upswing in e-mails being sent out attempting to trick people into visiting Storm sites such as the one below.While the Storm botnet certainly isn't as big as it used to be, it's definitely one of the most persistent botnets we've ever seen… and we've not seen the last of it.P.S. Nowadays Storm drops a filed called "farkrish.exe" to the system… we wonder if that means...http://www.f-secure.com/weblog/archives/00001452.html iFone 3G- (Found July 2, 2008 ) One year ago many of us in the lab were rather curious about the Apple iPhone.We conducted a poll — What is your level of interest in the iPhoneMost of you weren't interested at the time. But that was then.Now it's one year later and Apple has announced the iPhone 3G.So let's conduct another poll:What's your level of interest in iPhone 3GWould you jailbreak your iPhoneAdded: If you decide to jailbreak your iPhone, maybe you should wait until you've left the store. On 100608 At 05:28 PMhttp://www.f-secure.com/weblog/archives/00001453.html June Updates- (Found July 2, 2008 ) Microsoft released their monthly updates yesterday. There are three critical updates.The Security Bulletin Summary for June 2008 has more details.Apple also released a security update yesterday for QuickTime. Users should update to version 7.5.Apple's Software Update is one method:Apple's security article has additional details and you can also read our vulnerability report.In other updates, Skype 3.8 was released last week. You can read vulnerability report SA30547 for details, and can...http://www.f-secure.com/weblog/archives/00001454.html 419 SMS Scams- (Found July 2, 2008 ) There's an ongoing SMS e-mail fraud underway.People are receiving text messages to their phones that look something like this:If you send an e-mail to the listed address, this is what you'll get back:From: Gsm Notification (gsmn92yahoo.com)Date: 11.06.2008 11:49FROM THEDESK OF THE PROMOTION OFFICER,GSM MOBILE SWEEPSTAKES PROMO.CALLE CLAUDIO COELLO 41, 28001 MADRID,SPAIN.UNITED KINGDOM ( UK ) SPANISH ALLIANCE GSM SUBSCRIBERS PROMOTION.To,Mr. Xxxx Xxxxxxx .Verification No:...http://www.f-secure.com/weblog/archives/00001455.html Firefox 3 Aims for Guinness World Record- (Found July 2, 2008 ) Firefox 3 will be released today. Many of us in the lab were not aware that Mozilla is pushing for a Guiness World Record. Mozilla is aiming for a record number of downloads within the first 24 hours.Kudos to Jay, from our Vulnerability Team, for pointing it out to us.There's already a large number of pledges and it should be interesting to see how many of those are fulfilled.This release kicks off a browser skirmish…Firefox 3 will introduce a number of new security features that look...http://www.f-secure.com/weblog/archives/00001456.html Storm Rumbles Beijing- (Found July 2, 2008 ) One of the trademarks of the Storm gang's 18 month lifespan has been that they're very creative and current when it comes to their social engineering techniques, e.g. 1, 2, 3, et cetera. The latest variant is e-mail that arrives to your inbox reporting a violent earthquake in Beijing.If you click on the link you are taken to a page which seem to contain a video that would show you these tragic events but if you click to see the video the site will ask you download and run a file called...http://www.f-secure.com/weblog/archives/00001457.html Firefox 3 Vulnerability Discovered- (Found July 2, 2008 ) Firefox 3 has suffered its first reported code execution vulnerability.About five hours after its release, TippingPoint's Zero Day Initiative received a critical vulnerability affecting Firefox 3.0. Earlier versions of Firefox are also affected.TippingPoint confirmed the vulnerability, got it from the researcher, then contacted Mozilla. A fix is now in progress. You can read more details from TippingPoint.TippingPoint hasn't revealed any technical details of the vulnerability. They will not do..http://www.f-secure.com/weblog/archives/00001458.html Lots of Subjects and One Video- (Found July 2, 2008 ) Earlier today we saw a big increase in e-mails going around with all sorts of interesting subjects, not totally unlike the ones used by the latest Storm.So far we've seen subjects talking about everything from White House hit by lightning, catches fire to Italy knocked out of Euro 2008 and Nokia unveils revolutionary new phone design. It's a pretty long list of different subjects — too long to list them all here so we've put them in a downloadable TXT file instead.All of the messages...http://www.f-secure.com/weblog/archives/00001459.html |