• Evolution of Event Data Warehouse
• News Update: Sex Still Sells Malware on the Internet
• Press Release: Cyber-Ark Asks: What's Changed in IT Security Since the Terry Childs Network Lockout Incident?
• Upcoming Events: How Browser Exploits Lead to Web 2.0 Hacking Webinar
• VoIP Security Workshop
• 6 Steps in Owning Xceedium GateKeeper

Sex Still Sells: Malware On The Internet

A new video is reportedly making the rounds on the Internet – supposedly a keyhole camera was used to tape an unsuspecting ESPN Reporter Erin Andrews undressing in a hotel room. While lawyers for Erin Andrews work to have sites posting the video immediately remove it, the bad guys are yet again taking advantage of a timely “event” by quickly putting up fake websites to dupe unsuspecting web surfers into downloading malware.

And this time around they are targeting both PC and Mac users. Here’s how it works. When an unsuspecting web surfer conducts a Google search for the video and then visits a random returned link to view the video, they are first directed to a fake CNN site (Figure 1) indicating that the content is “suggestive” and includes a link to view the video. When the web surfer clicks on that link, they receive a pop-up (Figure 2) indicating that they must first download a video viewer. On a Mac, you are downloading malware in the form of a .dmg file OSX/Jahlav-C (Figure 3) and on a PC you are downloading a malicious .exe Mal/EncPk-IF. >> Read More

(This news is courtesy of Paul Henry, Lumensio Security and Forensic Analyst. Read the entire news from his Lumension Security blog or from his Forensic and Recovery website.)

Traditionally, Virtual Private Networks (VPNs) and other security products, such as firewalls, have been deployed to create a secure tunnel across the Internet and to protect the enterprise against attack. But are traditional data security products such as Internet Protocol Security (IPSec) VPNs able to handle VoIP remote users, or do you need VoIP-specific products? Are IPSec VPNs even an option for unified communications on a mobile phone or hard phone? What are all the security issues that need to be addressed to enable VoIP remote users?

Download the free white paper from Sipera that answers theses questions and find out how you can securely enable VoIP remote users with a VoIP-specific solution.