Latest news
Gamers are known for their impatience when it comes to trying out updates and new packs for popular games, and cyber crooks are always ready to take advantage of that.Warcraft and Diablo players are the latest to be targeted, says Microsoft, as its researchers have discovered malware masquerading as cracks (diablo3-crack.exe) and keys for beta versions (dota 2 Betakeys.txt.exe) of the games being pushed via various torrent/file sharing websites.
The fake Diablo III crack file hides a piece of malware dubbed Pontoeb which harvests information from the compromised system and sends it to the malware authors.
"The information is gathered through a WMI query that retrieves data such as SerialNumber, SystemDrive, Operating system and processor architecture," explain the researchers. "But its ultimate goal is to morph the infected system into a zombie. It installs a backdoor where an attacker connects to in order to control the infected system and execute certain commands (for example, download a file, update itself, visit a website, and perform HTTP, SYN, and UDP flooding)."
The bogus text file supposedly containing the keys for the beta version of the Defense of the Ancients 2 is actually an executable - a remote access tool/backdoor Trojan - dubbed Fynloski - that is also capable of logging keystrokes, stealing passwords from known applications, disable security settings, download and run additional malicious files, and more.
Both Pontoeb and Fynloski were first detected last year - the former less than a month ago - but popular antimalware solutions have signatures in place to detect them. Still, users are advised to relieve their curiosity and impatience by downloading beta versions of games directly from official sites.

Spotlight

17% of the world's PCs are unprotected
Posted on 30 May 2012. | In a study that analyzed data from voluntary scans from an average of 27-28 million computers per month, McAfee researchers found 17% of the world is browsing the internet completely unprotected.

What's new in ISO 22301
Posted on 29 May 2012. | Currently there are many business continuity frameworks and standards around the world, but none of them have really taken the dominant position.

Trojan spyware promoted as Steam keygen
Posted on 29 May 2012. | To users looking for keygens for their Steam games, read on: we found something that will make you think twice and probably leave you steering clear of key generators forever.

New cyber weapon targets systems in the Middle East
Posted on 28 May 2012. | A new sophisticated piece of malware dubbed "Flame" has been discovered in systems belonging to users in many Middle Eastern countries and is though to have been developed by a nation state.

RuFraud scammers caught and fined
Posted on 28 May 2012. | PhonepayPlus managed to cut off a malware attack that took the form of premium SMS fraudulent apps masquerading as popular apps offered on Google Play and other online stores.
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.







