Osama Bin Laden news spurs wave of scams, malware
It only took a few hours for cyber criminals to start finding ways to use the Bin Laden news as fresh trap for malware-laden links
By Joan Goodchild , Senior Editor
Ducklin offers several tips to avoid being trapped. They include:
- Don't blindly trust links you see online, whether in emails, on social networking sites, or from searches. If the URL and the subject matter don't tie up in some obvious way, give it a miss.
- Use an endpoint security product which offers some sort of web filtering so you get early warning of poisoned content. (Sophos Endpoint Security and Control and the Sophos Web Appliance are two examples.)
- If you go to a site expecting to see information on a specific topic but get redirected somewhere unexpected - to a "click here for a free security scan" page, for instance, or to a survey site, or to a "download this codec program to view the video" dialog - then get out of there at once. Don't click further. You're being scammed.
Researchers with Imperva captured the inner workings of a black-hat SEO effort on a hacker forum. In Imperva's blog post, they provide details on the campaign, which is designed to generate inauthentic Facebook likes through obfuscated links.
Read more about data protection in CSOonline's Data Protection section.
Other stories by Joan Goodchild
The challenge of true data protection spans databases, internal and external networks, physical and offsite storage, business partners and more. These resources offer expert perspective from the basics through specific key elements of data protection strategies.
Network security basics
Protection, detection, and reaction—those are the three underlying principles your security program must embody
Computer incident detection, response, forensics
Richard Bejtlich shows how to measure and improve the maturity of your incident response
A few good IT security metrics
Stop counting blocked malware attachments and measure things that can contribute to meaningful change
5 key cloud security trends
Cloud security is evolving rapidly—stay on top of it
Database security: At rest, not at risk
IT risk assessment frameworks
How to do end-to-end encryption
Also find sample data protection policies in CSO's tools, templates and policies library
- Enterprise File Sharing: All You Need to Know
- Forrester Research and EMC on Continuous Availability
- Big Ideas; Big Tech-Continuous Availability for VMware
- Reduce Costs, Maximize Performance and Ensure High Availability of your Business Critical Applications
- Software Asset Management - Program Considerations to Help Reduce Risk and Lower Costs
- Content Analytics Explained
- Attacks from China: A survival guide
Chinese cyberattack activity is back in the news this morning, with new details emerging on new attacks. Here's a collection of stories to help infosec pros better understand the threat. - #FFSec: Infosec pros who bring value to Twitter
- B-Sides Boston is Saturday
More Salted Hash with Bill Brenner
