Category Archives: Antivirus Vendors

Antivirus Vendors

Panda Security

The Internet collapses, brings the world to a halt for a few hours

 

young man with glasses sitting in front of his computer, programming. the code he is working on (CSS) can be seen through the screen.

A massive cyber-attack against US DNS service provider Dyn knocked out major websites across the Internet last Friday. The attack shut down several websites, including Netflix, Twitter, Amazon and The New York Times. The Internet service was disrupted for almost 11 hours, affecting more than one billion customers around the world.

Cyber crooks are always looking for ways to exploit the latest, most innovative technologies to carry out attacks like those we saw just a few hours ago. Are we in the Age of Internet Attacks? The latest PandaLabs Quarterly Report already warned of the huge number of large-scale distributed denial-of-service (DDoS) attacks that have been occurring over the last few months, and the way many of them are exploiting botnets made up of not only computers but also smart devices like IP cameras.

The recent DDoS attacks reflect the new approach taken by Black Hat hackers when it comes to launching new, more devastating campaigns that combine everyday devices and malware to form highly dangerous armies ready to launch DDoS attacks.

Probing Internet defenses

Just one month ago, security guru Bruce Schneier, published an article with the most revealing title: ‘Someone Is Learning How to Take Down the Internet.’

The recent examples of denial-of-service attacks flood servers with useless traffic that overburdens Internet bandwidth and prevents legitimate users from accessing targeted sites. Attacked servers become saturated with the huge number of requests.

The article explained that the best way to take down the Internet is through a DDoS attack like the one suffered by Dyn, and how some of the major companies that provide the basic infrastructure that makes the Internet work have seen an increase in DDoS attacks, in what seems to be an strategy to gather information and see how well these companies can defend themselves.

A few weeks ago, the website of Brian Krebs, a US journalist specialized in computer security issues, was taken offline as he fell victim to the largest DDoS attack to date. He was only able to go back online after Google came to the rescue.

This attack adds to the list of those suffered by a number of tech giants over the last few months, such as the hack of 500 million Yahoo accounts back in September, or the theft of 60 million  Dropbox user IDs and 100 million LinkedIn passwords.

It is precisely the success of the Internet, with billions of connected devices worldwide, that makes it so appealing to criminals willing to exploit its vulnerabilities. Many of these devices lack basic security measures, making them easy prey for hackers and, in this context, any organization, media company or social networking service can become the victim of the next attack.

 

The post The Internet collapses, brings the world to a halt for a few hours appeared first on Panda Security Mediacenter.

Avast

DDoS attack on Dyn took down the bulk of the Internet on Friday

iStock_67356463_MEDIUM-1.jpg

Many of us noticed that some of our favorite websites were acting a little strangely on Friday. Perhaps your tweets were failing to load or your connection to Spotify was wonky. Instead of brushing this off as the result of any regular online bug or unreliable Wi-Fi, take a moment to realize that these sites’ behavior was caused by a massive online attack that wiped out a significant portion of the Internet for hours on end.

Panda Security

Point of Sale attacks through Terminal Server

img-tpvs

Some months ago we published a technical analysis of Multigrain, a Point of Sale Trojan that uses DNS petitions in order to exfiltrate stolen information. We also wrote about one case where this PoS malware was used to infect hundreds of restaurants in the United States.

At the end of September we have seen again activity, with new attacks infecting PoS with new Multigrain variants. However, unlike this previous attack that was targeting the same kind of victims in a region (restaurants in the US) now it looks like cybercriminals are trying to find new fields where they can maximize their profit. We have seen 2 waves of attacks which victims were companies from a number of countries:

  • Argentina
  • Belgium
  • Brazil
  • Chile
  • France
  • Germany
  • India
  • Ireland
  • Norway
  • Spain
  • Sweden
  • Thailand
  • UK
  • USA

They were from different industries, including the typical restaurants and hotels, but also others not that common in these attacks: Telecommunications, Business IT Services, Engineering, Cargo Insurance, Medical Services, Logistics, Accountants, Medical Services, Unions, Engineering and Industrial Machinery Suppliers.

Why the disparity in victim profiles? It looks like the attackers were not looking for these specific industries. All attacks have been perpetrated through Terminal Server, similar to what we have seen in other cases, using brute-force attacks until they can break into the computers and infect them with Multigrain. These are automated attacks, where cybercriminals start scanning the Internet looking for potential victims, and once located they launch the attack until they gain access.

Tips to prevent attacks in companies

In order to minimize the risk, companies must remember that these services, when possible, are better out of the Internet. In case there is a need for them to be in the open, be sure to use strong credentials (with a strong enough password you can basically avoid brute-force attacks), to use 2FA when possible, use non-standard ports and of course monitor all incoming connections from the outside.

 

The post Point of Sale attacks through Terminal Server appeared first on Panda Security Mediacenter.

AVG

Why AVG is the #1 AntiVirus & Security Product for Staying Safe While Online Dating

In an increasingly interconnected community where more relationships are formed through online connections, people not only need a way to safeguard their information, but to protect themselves from cyber threats.

 

Short Version: Since 1991, AVG products, which are now part of Avast, have been one of the most popular providers of online security software, offering a free-to-download antivirus product for Windows, Mac, and Android devices. For those wanting additional features and functionality, the subscription option, AVG Internet Security, automatically scans your system and gets rid of any harmful malware and viruses while keeping your security up to date against the latest threats. For online daters, that means instant peace of mind. While you browse through a dating site, the HMA! Pro VPN application will automatically encrypt sensitive information, hide your location, and keep you safe online. You can maintain your privacy on a dating site by using AVG Internet Security, the #1 resource for security software.

Tony Anscombe, AVG Product Evangelist, has made online security his life’s work. For over two decades, his job has been to speak directly to consumers and raise awareness about cyber-security issues by writing blog posts and articles and giving lectures around the world.

Photo of Tony Anscombe, Senior Security Evangelist at AVG

A while back, in London, he gave a memorable presentation to a group concerned about privacy online. Before the talk, he asked their permission to do some digging and see what he could pull up about an attendee’s online footprint — using just her name.

Even those who consider themselves very private often leave a trail. Someone who knows what they’re doing (like Tony) can follow old accounts and access data that users may not want to be public knowledge.

In the case of one woman, he was able to find old dating profiles where many personal details lay hidden. He’d never met her, but suddenly he was an expert on her.

As Tony rattled off her favorite song, favorite car, and where she vacationed last year, she sat dumbfounded. She hadn’t imagined so much information existed about her online. “That’s remarkable,” she said.

When you enter the world of online dating, you don’t want to reveal too much information to the wrong people. The AVG product line, one of most popular brands of security software, provides the best options to keep you safe while flirting over the web. Since 1991, this tech-savvy team has backed up singles online with state-of-the-art protection from phishing, spamming, malware, viruses, and other threats to personal information.

“We believe everybody has a right to a certain level of protection,” Tony said. “If somebody’s got a laptop or a phone today, there are so many cyber threats that it’s essential they have a security product to protect them from bad guys.”

 

AVG’s Free Online Security Protects You on Any Device

 

AVG security products provide protection, performance, and privacy for people, and you can get a great product immediately at no cost. If you want more features, you can also sign up for the free 30-day trial of AVG Internet Security to experience enhanced firewall, disk cleaner, automatic updates, and other functions that keep all your devices running smoothly.

Whether you’re a fan of desktop dating using your Mac computer or you like to date on the go with your Android phone, AVG Internet Security protects consumers from the latest threats ranging from malware to email spam.

Anyone can be hacked, even Mark Zuckerberg, if proper measures of protection aren’t in place. To keep your dating profile as safe as possible, Avast also offers proactive solutions like the HMA! Pro VPN application, which encrypts your Internet connection and hides your location to keep you and your information safe. In the unlikely event you are hacked, its Remote Virus Removal service can get rid of any viruses or malware on your computer and restore your devices.

Screenshot of AVG's antivirus product page

As his family’s resident IT guy, Tony said he uses AVG Internet Security to manage everyone’s software, sometimes running a scan for his son or updating the software for his parents. “I’ve become their remote IT manager, and I can do all that from my phone,” he said. “There’s a whole host of protection products to choose from.”

The company sees 1 billion malware attacks per month, blocks more than 500 million malicious URLs per month, and blocks around 50 million phishing attacks per month. When it comes to protecting people on their mobiles, in 2010, the AVG AntiVirus for Android app was the first antivirus app available on Google Play to surpass 100 million downloads. Free for the first 30 days, the AVG app comes with a device lock, app backup, and other features to protect mobile users.

My favorite is the Camera Trap, which takes a picture of anyone snooping on your phone or tablet. If a nosy partner tries and fails to unlock your device, it’ll snap a photo and email it to you. Caught red-handed!

A Security Expert Gives 4 Safety Tips to Online Daters

With 20 years of background working as a technician and consumer advocate, Tony has plenty of expertise regarding how to date safely on the web. He takes his security-conscious perspective everywhere he goes.

Sitting at the airport during our phone interview, he looks around and sees people on their phones, most likely using public WiFi to surf online. Unless it’s encrypted, he told us, that traffic can easily be turned into public information.

 

Screenshot of AVG AntiVirus Free

“Especially when you’re dating, you’re sending lots of personal contact information back and forth,” he said. “All of that is flowing in free texts. It’s like sending a love letter via postcard. Everyone along the delivery train is probably going to read it.”

To help you secure your information, Tony shared four essential tips for safely creating an online dating profile.

1. Research Your Electronic Footprint Beforehand

Tony is happily married but tells singles if he were online dating, his first step would be “to actually go out on the Internet and find out what’s out there about me already.”

This is as easy as Googling your name or your username. You’ll see what someone searching for you will find — hopefully, nothing too embarrassing — and you can make sure your virtual identity appears the way you want it. Goodbye, embarrassing LiveJournal profile from 2005.

You can also set up Google Alerts to let you know automatically if any new information about you enters the public domain. That way no one can share any details about you without your knowledge.

2. Create a Separate Email Account With a Unique Password

When you actually set up your dating account, you should have an escape route mapped out, just in case. That means creating a profile that is totally separate from your other online identities: new email account, new username, and new password.

You don’t want people to be able to cross-reference your dating profile with social media accounts. A burner email account will lead any potential stalkers to a dead end, with no way to find your more permanent profiles.

“If everything doesn’t work out on the dating site,” Tony said, “you can kill your existence.”

3. Make Sure Your Pictures Don’t Reveal Your Location

You may not intend to broadcast your location when you post a picture, but for someone who knows where to look, that could be exactly what happens.

Thanks to geo-tagging, when you send your potential match a quick selfie, you could also be sending your exact whereabouts.

“A lot of Internet safety is as much about education and the person behaving responsibly as it is about the technology. Our technology is there as a line of defense to support your good behavior.” — Tony Anscombe, AVG Product Evangelist

“You need to start thinking about if you’re advertising your location,” Tony explained. “If you’re sending a picture in its raw format, and you have your location setting turned on on your camera, your GPS coordinates are attached to it.”

If you’re not ready to share your home address with someone you met online, be sure to extract that data from any media you send.

4. Pay With a Burner Credit Card

“I would also recommend somebody get a burner credit card to pay for a dating profile,” Tony said. “That way it keeps people away from your permanent life.”

You can pick up a prepaid card at the supermarket or buy a virtual visa online. However you go about it, the point is keeping your primary credit card safe from hacking. This way, if the company itself is hacked into — as AshleyMadison was in 2015 — your payment information won’t be compromised.

“Make sure, whatever you’re doing, you’re using different, complex passwords,” he added. “You don’t want to be the next victim of a data breach.”

The Company Continues Growing & Updating Their Safeguards

In 1991, AVG was a small company based out of the Czech Republic. Their security products soon generated high demand, and the company grew to have hundreds of millions of users, and to be known as one of the most reliable products on the market.

By 1998, they were selling products in Europe and the U.S., and in October they were acquired by Avast, an industry-leading maker of the most trusted security software in the world.

Photo of the AVG logo

Because of AVG’s relentless support, singles signing up on a dating site don’t need to feel vulnerable to online scammers or hackers anymore. Daters have the power to keep themselves safe from cyber threats by downloading the AVG software or apps.

As Tony demonstrated in London, a lot of information is floating freely on the web — AVG has an array of versatile products that can hide details you don’t want to become part of the public domain.

“Keeping ahead of cyber criminals is a huge task,” Tony said. “We are continually developing new engines, new techniques, and new mechanisms to keep people safe.”

 

*This article was also featured on Dating Advice online site www.datingadvice.com