symantec – SSL and internet security news

xHelper Malware for Android

November 8, 2019 infossl

advancedpersistentthreats, android, hacking, malware, operatingsystems, Security technology, symantec

xHelper is not interesting because of its infection mechanism; the user has to side-load an app onto his phone. It’s not interesting because of its payload; it seems to do nothing more than show unwanted ads. it’s interesting because of its persistence: Furthermore, even if users spot the xHelper service in the Android operating system’s … Read More “xHelper Malware for Android” »

Estimating the Cost of Internet Insecurity

January 29, 2018 infossl

academicpapers, costbenefitanalysis, cybercrime, economicsofsecurity, Security technology, symantec

It’s really hard to estimate the cost of an insecure Internet. Studies are all over the map. A methodical study by RAND is the best work I’ve seen at trying to put a number on this. The results are, well, all over the map: “Estimating the Global Cost of Cyber Risk: Methodology and Examples“: Abstract: … Read More “Estimating the Cost of Internet Insecurity” »

Corporate Abuse of Our Data

December 8, 2014 infossl

cyberwar, cyberweapons, disclosure, essays, fsecure, kaspersky, malware, secrecy, Security technology, symantec

Last week, we learned about a striking piece of malware called Regin that has been infecting computer networks worldwide since 2008. It’s more sophisticated than any known criminal malware, and everyone believes a government is behind it. No country has taken credit for Regin, but there’s substantial evidence that it was built and operated by … Read More “Corporate Abuse of Our Data” »

Regin: Another Military-Grade Malware

November 25, 2014 infossl

espionage, kaspersky, malware, microsoft, privacy, Security technology, surveillance, symantec

Regin is another military–grade surveillance malware (tech details from Symantec and Kaspersky). It seems to have been in operation between 2008 and 2011. The Intercept has linked it to NSA/GCHQ operations, although I am still skeptical of the NSA/GCHQ hacking Belgian cryptographer Jean-Jacques Quisquater. Powered by WPeMatico