Computers

As the malware threat landscape continues to evolve, hackers are constantly changing techniques to counteract detection technologies vendors develop. By using sophisticated methods to evade antivirus technologies, hackers continue to be relentless in their pursuit of damaging IT systems and gaining access to personal information.

In the past, hackers used polymorphism and metamorphism as tactics to constantly generate new variants of worms. Essentially, through polymorphism, the virus would morph itself into different variations to bypass signature-based technologies. The antivirus industry eventually responded to polymorphism by creating emulation technologies to counteract this new breed of virus. Emulation engines were designed to mimic the properties of the morphed virus so it could be detected by other means (signature and heuristics). This approach was dependent on the researcher's access to the polymorphic engine -- meaning the logic had to be decoded before you could develop protection for specific mutations.

Hackers are shifting their interests from fame (among shady peers) to profit and go after financial gain by developing new and innovative ways to slip below the radar. Some of these methods are innovative and are evidence of thinking out of the box when it comes to crime. Hence the development of custom HTML injection by Banker Torjans, for example, to obtain protected information.

As we begin to map the evolution of malware, there are several themes using stealth and camouflage techniques, including:

• Custom run-time packers (compression)
• Server-side polymorphism

A major risk to security is the emergence of server-side polymorphism or “Crimeware as a Service (CaaS)”, in which the polymorphic engine does not reside within the virus code itself, but rather remotely on a server. There are two forms of server-side polymorphism that we know of today: the type that distributes mutated variations of malware into the wild in volume; and PCs that are part of a botnet -- a specific bot variant can mutate remotely via a command over HTTP. This is called crimeware as a service because the actual viral code does not actually reside on the host, but in the cloud -- similar to a software-as-a-service platform. In other words, CaaS provides malware on demand to the infected host.

For the complete article written by myself please see the posting at SC Magazine online.

So there has been a lot of talk recently about this new cross-browser vulnerability known as “Clickjacking”, but what is the potential impact of such a vulnerability to users abroad?

Well essentially the exploit allows a hacker to take control of the links that your browser visits and thus if you come in contact with a malicious site or site that is tainted with malicious code (either through spam, some site tainted by a SQL injection, etc), it then gives the hackers the ability to ‘capture’ your clicks and thus trick you into clicking on links you may have not intended on clicking. At this time technical details are a little sketchy in terms of information regarding specific exploit code, but some information is available here and here. 

One could only guess what could happen next once you are forced to click on a link such as installation of a Banker Trojan or other malware is certaintly a possibility

Between Google’s 10th birthday, the third Google founder controversy, ordering your G1 and their launch of “10 to the 100th"*, you might have missed the new “Google Story”. This latest iteration of David Vise and Mark Malseed’s National Bestseller hit store shelves last Tuesday**. “Updated for Google’s 10th Birthday”, this new edition is the same “Google Story” you’ve come to know only updated with new accounts. Like previous versions, this latest edition provides an interesting and entertaining glimpse behind the curtain at Google. It’s a great read for anyone interested in learning more about Google’s greatest successes and biggest blunders from a unique, behind the scenes perspective.

The Preface provides insight into the lives of Google’s founders and how they have changed over the past ten years. From bachelors living on credit in Stanford’s dorms to married billionaires ranked among the top five wealthiest Americans, it’s a pretty remarkable story.

In terms of new information and updated statistics, the book claims that Google now has more than 20,000 employees, a million computers and produces “billions of search results with every tick of the clock”. Most of the new information is introduced around page 260. In addition to the new Preface, up to date information, expanded chapter and the addition of one new chapter, readers may notice a few things are missing from this addition edition. Interestingly, the chapter titled “Trick Clicks” about click fraud is no longer a part of “The Google Story”. Also missing, a recount of Eric Schmidt’s run-in with CNET over their publishing his personal information found via Google.***

What’s good about the book?

• The recounts in this book are fantastic! One of my favorites is the time Mikhail Gorbachev and Shimon Peres dropped in to hear Brin and Page while speaking at a Israeli high school.
• Obviously, I’ve always thought Blogoscoped’s role in “The Google Story” was an interesting one but, no updates there until next time (Chrome) I guess!
• I don’t want to give away anything but, this edition serves up lots of “juicy” details regarding Google’s move into China and the role Dr. Kai-Fu Lee played. Google CEO Eric Schmidt is quoted as saying “We actually did an ’evil scale’” in determining Google’s approach in China.
• It’s pretty amazing but according to the book, “Larry and Sergey still look at all measurements for all traffic for all applications every week”.
• Despite the free food, bean bags and lava lamps, according to Sergey Brin “... what is not apparent from the outside is the set of rigorous systems and processes that we use to manage our growth while maintaining this entrepreneurial zeal.”
• Detailed updates also include Appendix #9 and #23 as well as “The Google Financial Scorecard”.
• Paperback suggested retail price is only $14.00

What’s bad about the book?

• Somehow denoting new content would be nice for future editions.
• The book seems to indicate Google’s executives own only one aircraft but, I’m pretty sure that number is a little higher.

The Google Story Updated Edition is a great book and a highly suggested “must read”!

*See the September archive for more.

**Disclosure: The book’s co-author Mark Malseed guest-blogged here before.

***When CNet reporter Elinor Mills used Google to research Eric Schmidt within public sources, Google’s response was to tell CNet they were now blacklisted from receiving Google communication for a year – due to privacy issues with Elinor’s report.

[By Brian Ussery | Origin: The Google Story, Updated for Google's 10th B ... | Comments]

[Advertisement] Want to advertise here? Your ad will show in the blog and feed.