Security Geek

How to avoid used car scam over internet?

2010-03-15T07:33:00.000-07:00

Having a car is always wonderful if you not effected by recession. A car show standarity and sometime authority of yours but buying something over internet always have a reason to worry about. According to FBI record 1,095,769 car was stolen in 2007 and there is a silent buzz that some of those stolen cars usually sell over internet. So, you have to be careful before buying.

The cheaper rate of used car over internet always delicious but that delicious test most of the time end with bitter. Here is some basic guideline, you better follow to safely buy a used car over internet.

1. Cheaper rate is always have a reason to fool you, you have to be careful when buying something which is way to low than usual market price.

2. It's always good to know the market price from dealer before buying the same product over internet.

3. Check the vehicle identification number(VIN) to see if it corresponds with the vehicle papers if not then there is a high chance that the car is stolen one.

4. Check the history record of services to better understand the product and avoid scam. Don't forget to checkout if that vehicle get serviced from registered dealer or not.

5. Don't buy the car instantly, always try to check it out before buying. Request the online seller for real view of that vehicle.

6. Always remember don't share sensitive and personal data over internet.

There is always another better way to be smart when buying and these are some basic point you have to note along with other advice.

Be safe and be scam free!

BSNL Broadband still in limited phaze

2010-03-11T04:57:00.000-08:00

Hi readers,

Sorry, unable to update this blog and don't blame me; it's BSNL who should take responsibility. Unable to visit over 80% internet site now. Waiting for a fix. Will update this blog when everything fixed.

Regards

Arafat H. Piyada

Now USB Battery Can Distribute Malware?

2010-03-09T06:57:00.000-08:00

The system security goes from worst to worst. Now a USB battery can distribute malware. One more in the dead line, what next?

After Vodafone GTC Magic now another well known corporate product Energizer DUO able to break customer trust. For those who don't know about Energizer DUO, It's a charger for two AA or AAA batteries that can be plugged into USB ports. While no software is needed to use the charger, Energizer did provide an application that would display the charge level of the batteries inserted into the charger.

However, the application do something more now. It also includes a backdoor BKDR_ARUGIZER.A. This particular backdoor opens port 7777 to incoming connections, allowing it to receive various commands from remote users. Among the possible commands are to:

Download and execute files
Delete files on affected systems
Upload files from affected systems to a server

Windows 7 & Vista user do get a warning when a program try to open a port but average user usually avoid the warning as they trust the vendor. The good thing is Energizer announced they going to discontinued sale of the charger in question and currently working with the US-CERT and U.S. government officials to understand how the code was inserted into the software.

You can use Trend Micro's HouseCall program which capable to remove this type of backdoor and also it's free.

Source: Trend Lab

Antivirus XP 2010 is a fake antivirus, Remove it

2010-03-09T06:22:00.000-08:00

It's look like fake virus author targeting windows like a storm. Last month we saw 5 new fake antivirus and here is another one for this March - Antivirus XP 2010. This is an adware that warn users with fake security alert of viruses and ask users to purchase a certain program that removes those those viruses from their system.

Additionally, it also prevents users from working with the computer, as it blocks the execution of several daily use applications like the Internet Explorer and Firefox browsers, and several security solutions, displaying a message informing them that these programs are infected.

This fake antivirus Antivirus XP 2010 usually reach the computer in email messages that seem to contain a postcard attached.

If your system is already infected then you can try MalwareBytes, a free program that have expertise to remove this type of fake antivirus.

Vodafone HTC Magic Distributing Mariposa Botnet

2010-03-09T06:03:00.000-08:00

Though the Mariposa botnet heads are captured but it now found it's new reputed home and it's non other than one of the most recognized telecom service provider Vodafone. According to a news served by Panda Research Blog - a brand new Vodafone HTC Magic with Google's Android OS cost merely 0€ or 1€ under certain conditions comes with the notorious botnet Mariposa.

Here is a clip from that article:

The interesting thing is that when she plugged the phone to her PC via USB her Panda Cloud Antivirus went off, detecting both an autorun.inf and autorun.exe as malicious. A quick look into the phone quickly revealed it was infected and spreading the infection to any and all PCs that the phone would be plugged into.

So, what you think? Does big brand care about user interest? Vodafone obviously won't take responsibility as they only provide service and depend on another company for software. It's always better to buy product from a company those in charge of the WHOLE product they sell.

Comodo Internet Security - Free Firewall & Antivirus Combo

2010-03-07T22:33:00.000-08:00

Internet security is the main topic, I want to discuss in this blog to make internet more safe for you. Today we going to discuss a trusted name on security world Comodo Internet Security. This tool is developed by Comodo Group and a free version of their paid tool Comodo Internet Security Pro.

This free version don't have LivePCSupport (Total Security & Support Package)—a 24 hour per day, unlimited incident support services package which usually markets for $99 per year and TrustConnect - a secure Internet proxy service that ensures 128 bit encrypted connectivity from any public wireless hot-spot.

Both the above mentioned packages usually don't have much value on average people world. So, free package is better to complete protect your Windows system from malicious content and attack.

This suite comes with:

Firewall: Slam the door shut on hackers and identity thieves.

Antivirus: Track down and destroy any existing malware hiding in a PC.

Defense+: Protects critical system files and blocks malware before it installs.

Memory Firewall: Cutting-edge protection against sophisticated buffer overflow attacks.

Anti-Malware Kills malicious processes before they can do harm.

Supported OS: Windows 7 / Vista / XP SP2

Download Comodo Internet Security

9 ways to browse the internet securely

2010-03-07T22:11:00.000-08:00

Usually most of us know about online security but, either those knowledge are not sufficient or not implemented and that's the reason why we get caught by malicious tools or by notorious hackers. Here, I'm going to share some basic security tips which can make your online life more secure.

1. Use Cloud OS: If you use broadband then it is always a best idea to use cloud OS when you only want to surf the internet and want to update your social profile. Dial-up user may not find this tool handy due to their internet speed.

2. Antivirus: You already know it right! You must have at least one good antivirus before going online. I recommend you Avast Home Edition and Microsoft Security Essential, both are very good in their business.

3. Firewall: It protect you from hacker as it mask your system with protection shield which is hard to break however not impossible. Online Armor is a good firewall utility you can use.

4. WOT: It's a browser addon which shows you a website rating in term of security. This help you to know, which website you should visit and which are not.

5. Trusteer: This site tell you is that site which you willing to visit targeted by malware or not.

6. LinkScanner: This is another online tool that's help you to scan site which you want to visit and so the report if that site have any malicious code or not.

7. Use Proxy: Proxy is a good way to hide your original ip from hacker. It's not completely protected process but definitely increase your security shield strength. You can find good amout of free proxy site name on Free Proxy Site.

8. Avoid Pirated Content: Avoid using warez, dll, torrent in site domain and search term. Don't try to download paid software for free. It's illegal and also most of the time those free download contain malware. If you spend little more time on search engine you will definitely able to find a free alternative.

9. Never ever share personal data and bank details online. Always remember, whatever you share online can be use against you in future.

All this are basic advice which strengthen your security shield. Only a security concern people can secure themselves more improve way than other. Stay secured!

Amateur Hacker Gang Trying To Control PC Using Free Hacking Tool

2010-03-07T21:21:00.000-08:00

Yes! We are not alone who are addicted on free tools, some hackers live in same planet. Recently a gang of hacker trying to gather logon information using a free version of hacking tool ZeuS. Though the hacker look like amateur as they not tried to hide their path.

Its look like hacker gang more and more people in their notorious world. May be this new hacker look amateur now but who knows about their future.

According to source Don Jackson, senior researcher at SecureWorks, "The gang most likely began by hiring spam specialists to send out e-mail and social-networking Relevant Products/Services posts to lure recipients into clicking on a tainted Web link."

"They then used a dated free version of a hacking tool called ZeuS and did nothing to hide their tracks, indicating that they're probably amateurs," Jackson says.

So, we have to take care of our social account. We should not click on unknown links or suspicious links even those send from our friends. It will be best idea to use a cloud OS to surf social websites, that will give you extra protection and save you from hackers.

Source: Enterprise Security Today

Win a Free Wireless Spy Camera Worth $150

2010-03-07T09:57:00.000-08:00

Like online security, offline security also important. We usually use spy camera to make our offline property more protected. Wireless spy camera is one of the hottest security gadget as it hard to detect in naked eye. Well! Now, for a limited time, you can get this valuable security gadget absolutely free.

All you need to do, be a fan of Advance Security on Facebook. That's it, you don't need to refer other or anything else. Even you don't need to wait long time, the result will be announced on coming 12th March. Absolutely no string.

They will contact the winner through Facebook to find out where to ship the camera to.

Rush now. You only need little bit of luck and 30 sec to win a Wireless Spy Camera absolutely free. A reward for Fans from Security Advance team.

Source: Security Advance

3 Browser Based OS For Extra Online Security

2010-03-07T09:41:00.000-08:00

Cloud computing is the future of online security. If you need some basic tool like browser, movie player, mp3 player, MS Office then cloud computing is better as it's portable. You can access your desktop anywhere in the world with cloud computing. Most of this cloud OS come with lots of free space which you can use to save document online securely. With cloud OS you don't need to think about virus and malware as all file accessed and downloaded through cloud interface. Here are 3 cloud operating system or virtual operating system for you to make your online life little bit more safer.

1. iCloud

2. Cloudo

3. Glide

One of the most well known virtual OS Ghost will down soon for public use which is really bad but the good news is Google browser based OS will come soon.

Restore Microsoft Windows Security Setting With Rizone Security Restore

2010-03-07T06:55:00.000-08:00

After a virus attack or a malware attack we usually get access denied error when we want to access files which open normally before the attack. Virus usually play with our system security setting and trick it the way that malicious software want and as a result we face those access problems. You can fix this by restoring your security setting.

Rizone Security Restore help you here. It helps you restore your setting to default. Additionally it also repair the dreaded 0×80070005 error messages when trying to register dll files while installing certain Windows components or programs.

Download Rizone Security Restore

3rd Party Twitter Apps May Exploit Your Online Reputation

2010-03-07T06:22:00.000-08:00

Building online reputation always need hard work and honesty, specially when you are an average person not a celebrity. However, losing reputation will take only few second or minute; so you have to be careful. Twitter is one of the best tool to build online reputation. People nowadays use to it. However, smart mind always needed to build and maintain reputation.

Most of us use 3rd party program to access twitter account, usually because 3rd party programs are more flexible than twitter itself. But, there is a bad news for all 3rd part tool users. Mashable, a reputed technology blog, report about spam on twitter which generated through 3rd party application.

The spam tweet are about health. Here is an example tweet:

So, try to use 3rd party program less to be secure from any unwanted situation.

3 Mariposa Botnet Head Captured

2010-03-07T01:59:00.001-08:00

Security concern people going to get one less botnet that willing to attack their computer. Spanish Police recently arrested 3 member of that notorious botnet maintenance group but yet one suspect is out of the net and Spanish Polish suspect the alleged member hiding somewhere in South America. This one of the largest botnet in internet planet was responsible for attacking millions of business server including Fortune 1000 companies.

This Mariposa botnet was first discovered by the Mariposa Working Group, an informal group of volunteers from the security industry and law enforcement agencies, formed to specifically investigate and to eventually eliminate the said botnet. In its short lifetime it was able to compromised nearly 12.7 millions computers from around the world. One of the known malware distributed by this botnet was WORM_AUTORUN.ZRO. Usually your Antivirus and Firewall combo able to detect most of this botnet but for extra security you can use RUBotted, a tool that monitors computers for suspicious activities and regularly checks with an online service to identify behaviors associated with bots. It prompts users to scan and clean their computers when suspicious element discovered.

Source:Trend Labs

OpenedFilesViews : Tools To Delete Blocked Files on Windows

2010-03-02T20:57:00.000-08:00

It happen some time where we want to delete a file or folder but we see some error message regarding sharing violation. Usually, it's hard for an average user to understand this, even pro user sometime get hard time. OpenedFilesViews is a great tool to handle those file here. Its tell you which files handle by which tool. Additionally it allow you to terminate any file handling process which will help you to delete those locked files.

Download OpenedFilesViews

Is Your Image Are Safe On Social Media?

2010-03-02T19:29:00.000-08:00

These day if you have an internet connection then it's impossible for you to avoid social media. Social media make us live digital on a digital environment. We share our emotion, anger or happiness over the net with our online friends. Facebook, MySpace, Orkut, Twitter all are some well known and big name on social media. Social media help you to secure your pictures from other. It basically follows two ways - one is Blocking Right Click and another is Blocking user access.

The first method is useless and anybody with minimum or no skill can break the shield. In this Google era nothing is impossible on internet. All s/he need to search it on Google and they will get step-by-step instruction how to download it. So this method only for those who don't really need it.

Another method and powerful than former is blocking user access. Most social media give you the power or flexibility to choose who should watch the pic and who not. This way you can minimize the miss use of your pic but not completely secure it as any of your friend can save it and share it with others.

There is no other way to protect your picture completely, other than not to sharing it online. It is true that if you have something on net, then you giving someone a chance to get it.

2 Safe Site To Download Softwares From Internet

2010-03-02T19:15:00.000-08:00

Free may be the most use and most wanted word in our daily life. We all love free things and cyber criminals use this weakness to fulfill their own purpose. Free not only means freeware; we have a tend to use warez and torrent site to get pirated content. There are two purpose of this, one is saving money and another is trying the product before going to buy it.

Apart from warez and torrent site we also use another tool 'p2p software' like lemon share or so. All these download habit have a common thing that is security vulnerability. I'm using internet over a year and I tested so many tool and site to get full version tools for test purpose. I spend sometime today too, to find out how this thing actually expose our security. I download a small software from torrent site and when I scan it I found win32 Trojan, now again I download a file from well known warez site and I get a good return in the name of Koobface trojan horse. However, it is very small thing in respect of p2p software uses. I use lemon share to check p2p and I not able to find a single .exe file which don't encrypt with a virus or trojan.

So all those things bring one conclusion buy original software or else download freeware alternative from original source or from reputed source. If you love freeware then I recommend Softpedia and Cnet Download.

SuperAntiSpyware : A Powerful Free Anti Spyware Program

2010-03-02T19:02:00.000-08:00

Spyware is a type of malicious tool that is installed on computers and collects little bits information at a time about users without their knowledge. The presence of spyware is typically hidden from the user, and can be difficult to detect. Usually Antivirus program comes with Antispyware program but it's always great to have another specialized tool to strengthen your system security. SuperAntiSpyware comes handy to give your system additional security.

Description: SUPERAntiSpyware Free Edition is 100% Free and will detect and remove thousands of Spyware, Adware, Malware, Trojans, KeyLoggers, Dialers, Hi-Jackers, and Worms. SUPERAntiSpyware features many unique and powerful technologies and removes spyware threats that other applications fail to remove.

Download SuperAntiSpyware

4 Free AntiKeylogger Softwares

2010-03-02T18:42:00.000-08:00

Before knowing Antikeylogger tool, we have to understand what is keystroke logging.

"Keystroke logging (often called keylogging) is the practice of tracking (or logging) the keys struck on a keyboard, typically in a covert manner so that the person using the keyboard is unaware that their actions are being monitored. There are numerous keylogging methods, ranging from hardware and software-based to electromagnetic and acoustic analysis." - Wikipedia.

Keylogger software is used to capture your key stroke and use it to fulfill a purpose. The most harmful keylogger is remote key logger which will transmit your data to a remote portion who might use it to make a harm. Usually they used it to capture your private data. Like CC information, Bank login information and so on. It is also used to reach your PC and demand some money. So it is better to protect yourself using this free software.

1. MyPlanetSoft Anti-Keylogger: It only protects you from hook based keylogger. Avialable for Windows 95, 98, ME, NT, 2000, XP based system.

2. PSMAntiKeyLogger: This program protects you realtime. However it not updated long time so maybe is back dated.

3. KL-Detector: It detects the keylogger program but you have to delete manually that program. Avilable For Windows NT 3.51 SP3, Windows 2000, and Windows XP based system.

4. Universal anti-keylogger: You can use it for an unlimited period but it will add a pop up every time you open it. You have to pay a one time fee to remove it. Avilable only for XP and Vista based system.

8 Tips to do banking safely online as well as offline?

2010-03-02T18:32:00.000-08:00

Everyday we see lot of scam related incident in our daily newspaper. Their are lot of article avilable both for offline and online reader on print media and online media but yet people not able to learn how to be safe in online banking. After doing 10-15 similar case study I bring this conclusion that only sincerity can help these people. Here I'm going to share some security advice regarding this:

1. Always log out and don't confirm saving password when asked by browser in a public computer.

2. If you get any email about winning then always do a search on good search engine (ex. Google, Yahoo, MSN) about that email. I think it is better to search on sender email.

3. Don't supply your Credit Card to any third party if you don't know them.

4. If you get any email which you thought a scam but not find any information on net then asked about it on joewein.de or fraudwatchers.org or consumerfraudreporting.org or any such website to help other from spam.

5. Don't believe anyone when online or offline electronic transaction concern.

6. Don't believe any email from unknown sender and always give a search on search engine before doing any further activity.

7. Believe that your email or mobile number will never won any cash in online.

8. Believe that earning money is never easy.

What is Identity Theft and how to get protected?

2010-02-26T09:41:00.000-08:00

If you visiting web regularly and have read news then you may hear the word Identity Theft, which usually means that somebody use trick to fool you and use your personal information for their own financial gain.

As written in Wikipedia:

Identity theft is a term used that is to refer to fraud that involves someone pretending to be someone else in order to steal money or get other benefits. The term dates to 1964[1] and is actually a misnomer, since it is not inherently possible to steal an identity, only to use it. The person whose identity is used can suffer various consequences when he or she is held responsible for the perpetrator's actions. In many countries specific laws make it a crime to use another person's identity for personal gain.

The cyber criminal usually use a technique which known as phishing to exploit users identity. The cyber thief sends an e-mail that look like genuine and send from reputable site (mostly from financial institutions like eBay, PayPal etc.), telling you there is a problem with your account or you already buy some thing and need to clear the delivery.

The e-mail will ask you to on a link in the e-mail, and you are taken to a site that looks exactly like that of your bank or payment system of that legitimate website. There, they will ask you to fill out again your Social Security or credit card numbers, and/or other confidential numbers which later will be used by the cyber criminals to access your accounts for their own financial gain and your financial as well as social lose.

Another method is, cyber criminal send an attachment with those email instead of links and whenever you use that attachment or download a file from given link, it will put a spyware on your system to spy on you and collect your activity details which later send to those criminals silently by installed tools. A good security effort only able to protect anyone from this. I already share some basic tips on computer security which may come handful here.

Advice:

1. Always do business on legitimate and well known online shop.

2. Always check email domain and check link twice before clicking.

3. Visit your site via bookmark or using your favorite search engine. Never visit it using untrusted source.

Use Wireless Security Camera In Place Of Wired

2010-02-26T09:15:00.000-08:00

Security camera is a known security device and usually seen on protected areas and shopping malls. Unfortunately, like those corporate place home users too feel a need of security camera these days to help keep them safe and secure.

There are basically two type of security model available on market - one is wired and another is wireless. Although Wired are cheaper than wireless, wireless security camera have some advantage over wired security camera.

Wireless takes less time to install.
Portable, so you can place it anywhere any time.
You can place it on those places where wired camera not able to go or need more wire, so, more investment from your part needed.

So, if you planning to buy a security camera then I advice you to buy a wireless one if you have good budget.

A complete basic security guide for home users (Tools & Tips)

2010-02-26T06:59:00.000-08:00

As my aim is to protect home users from possible internet threat, I want to share some basic security model every user should take about. Here, I'm going to share some tools which will help you to get protected from possible uncomfortable situation.

Internet is heaven for good and bad; we have to filter it. Manual filtering is not easy so we have to use some tools which help us here.

1. Genuine OS: Genuine OS is less vulnerable than pirated one. With genuine OS you can get updates and patch which fill security hole and protect you from malicious issues.

2. Antivirus: You probably already heard about this. It gives you realtime protection from virus, spyware, malware and other malicious tools. I recommend you to use Microsoft Security Essential or Avast Home Edition; both are free for home users. I never think, you need to pay for an antivirus. I'm using both this antivirus without any issue.

2. Antimalware or Antispyware: There are sometime comes when your antivirus unable to detect fake antivirus or malware and that's why you should always use a specialized program along with antivirus. Malwarebytes(free) protecting me over 3 years without any issue.

3. Firewall: Unless you are a savvy user, you don't need to use this tool. It alerts you when a program want to access internet or want to change any system file. Microsoft Windows already have a build-in Firewall, if you want to extend that power then Online Armor(Free) will be a good option.

4. Update Regularly: Remember this tool unable to protect you from latest threat unless you update it. So, make regular updating of security tool your daily habit.

Stay secured. :)

Welcome!

2010-02-26T05:07:00.000-08:00

Hi there,

This is my first article in my security blog. It's over the year I am using internet and always feel internet should be more secure for average internet users but there is lack of place where a internet surfer can get all those security tools and tips that they need to get much more protected online. Hope, I will able to make this a good place on all about security.

Regards

Arafat H. Piyada