F-Secure Antivirus Research WeblogWeblog of F-Secure Antivirus Research TeamPretty Good Key- (Found July 2, 2008 ) I've been using PGP (Pretty Good Privacy) since version 2.1.I generated my first publicsecret keypair in March 1993. Here's a screenshot of it:As you can see, I underestimated the need for sufficient keylengths; my first key was a 384-bit RSA key.Keylengths actually mattered in 1993 — we were running 486 processors at the time, and using long keys was slow.However, I quite quickly realized that 384 bits wasn't going to be enough and my key would eventually became crackable as factoring...http://www.f-secure.com/weblog/archives/00001460.html Two New Mac OSX Trojans- (Found July 2, 2008 ) Trojan number one:A report of an Apple Remote Desktop Agent vulnerability recently surfaced. Now there's news of a trojan that can exploit the flaw.The exploit tool, called "Applescript Trojan horse template" was crafted by forum participants of MacShadows.com. These guys appear to have been hobbyist hackers interested in testing the ARDAgent vulnerability. It doesn't appear to be in the wild at present. We detect it as Backdoor.Mac.Hovdy.a.What's the ARDAgent flaw In a nutshell, ARDAgent runs..http://www.f-secure.com/weblog/archives/00001461.html Data Security Summary - January to June 2008- (Found July 2, 2008 ) We've published our Security Threat Summary for the First Half of 2008.You find the report and video from www.f-secure.com2008.You can watch the video via our video-channel:Or you can watch the video via our lab's YouTube Channel:If you're behind some restrictive firewalls, such as .mil domains, e-mail and we'll provide you a link for a download. Cheers! On 250608 At 04:25 PMhttp://www.f-secure.com/weblog/archives/00001462.html Creating Malicous PDF Files- (Found July 2, 2008 ) Yesterday's post discussed a mystery PDF file that was booby trapped to drop a backdoor.Today we'll look at how these documents are created.Here's an example of a tool called Y08-40 aka GenMDB.When run, it displays this user interface:The apparent purpose of this tool is to create trojanized PDF files. You select which EXE you want to embed, which PDF file you want to trojanize, and which platform you expect the victim to be using.Cool. Now, the real question is this: How on earth did we get...http://www.f-secure.com/weblog/archives/00001450.html |