Computers

We don't usually talk about Lineage malware. We use to receive samples almost every week.  Those samples used to be trojans, specifically password stealers, which affected players of this game.

But we have come across something new. This time, it is different, as we are talking about a worm (and indeed, it is a worm, unlike the last sk-hype worm which morphed the other way around into a trojan). It uses a vulnerability in Windows, that allows it to replicate itself. Once it infects a new machine, it acts as usual. We have called this one Lineage.BXJ

For those who love this game, beware, some people still love your passwords

If you've noticed that IE 7 can be a little sluggish at times, you’re not alone. One reason is the new browser’s phishing filter. The problem is partly caused by your browsing habits and part is dependent on a web site's use of frames. The good news is Microsoft has posted a free fix for this problem.

In the beginning was the Month of the Browser Bugs (http://browserfun.blogspot.com/). In November was the Month of the Kernel Bugs (http://kernelfun.blogspot.com/) and now it's time for the Month of the Apple Bugs.

Two security researchers have promised to release information on security bugs in Apple's software on a daily basis, for a month. They have discovered 31 vulnerabilities in Apple's Mac OS X and other Apple software, and they plan to release the information in a few weeks time.

After the failed Week of Oracle Database Bugs (http://www.argeniss.com/woodb.html), for unknown reasons, (perhaps suspended by Oracle pressures, but who knows), we hope this "Month of the Apple Bugs" make Apple's software more secure.

We want to thank Ismael Briones for providing this information.

After two days of confussion, it seems that the skype-related piece of malware is not really a worm, but a trojan, though there can be different points of view:

http://www.websense.com/securitylabs/alerts/alert.php?AlertID=716

http://www.f-secure.com/weblog/archives/archive-122006.html#00001054

The aim of this creature is to steal information from the victim; nothing new so far. The news is that it tries to propagate via skype. However, the fact that it may use skype, does not mean it uses a vulnerability.

So, after all, there was some kind of sk-hype, as it was not a worm (from our point of view...)

Not long ago, there was much talk about default search providers and browsers and unfair competition. All these providers cherish that default slot for good reason. Many users don't change this setting, but keep the original search engine. Those who do care often install 3rd party toolbars such as Google or Yahoo!. That behavior may change as Microsoft Internet Explorer 7.0. offers an array of alternate providers, but makes it simple to add a new one. In fact, you could even add the Google Custom Search on our site. (Includes flash tutorial)