DP's Security Bits

Security experts have detected a new crimeware creation system that sells made-to-measure trojans to hackers for $990.

The code, dubbed Trj/Briz.A by PandaLabs, stands out because its author customizes the code for hackers. The malware specializes in stealing bank details and data from web forms.

According to PandaLabs, this trojan is "the most complex example of the business network based on malware."

Apart from the code, cyber-crooks that buy this crimeware also get a complex system for controlling the infection caused by the custom-built trojan. This allows the client to get a list containing a large quantity of data about the infected computers: IP addresses, passwords and even the physical location of the computers.

SC News

Most people who use e-mail now know enough to be on guard against "phishing" messages that pretend to be from a legitimate business but are actually attempts to steal passwords and other personal data.

But there is evidence that among global cybercriminals, phishing may already be passe.

In some countries, like Brazil, it has been eclipsed by an even more virulent form of electronic con--the use of keylogging programs that silently copy the keystrokes of computer users and send that information to the crooks. These programs are often hidden inside other software and then infect the machine, putting them in the category of malicious programs known as Trojan horses, or just Trojans.

CNet

The number of phishing Web sites grew by about 65 percent in December, which security experts say is due to the increasing use of easy-to-use "phishing kits."

The Anti-Phishing Working Group's report for December revealed that although the number of phishing e-mails fell between November and December last year, the number of fraudulent Web sites increased from 4,630 to 7,197, which is a new record.

CNet

Apple Computer fans have long loved to point out the safety of using Mac OS X, which has mostly been left alone by hackers. But the recent arrival of three threats has some asking: Is the software's charmed security life over?

In the past two weeks, a pair of worms that target Mac OS X have been discovered, along with an easily exploitable, severe security flaw. The vulnerability exposes Mac users to risks that are more familiar to Windows owners: the installation of malicious code through a bad Web site or e-mail.

Government officials say they are currently seeing about one widespread IRS-themed e-mail scam a week, but Internet security experts expect them to escalate as the April 15 tax deadline nears.

http://www.msnbc.msn.com/id/11552490/

Microsoft plans to disclose the lineup for Vista Monday, after it inadvertently posted information about its packaging plans for the software on its Web site last week. Microsoft's new PC operating system will arrive in two editions for business customers, three editions for home users, and a special low-priced "starter" edition for sale in India, Russia, Mexico, and other developing countries.

InformationWeek

The Motion Picture Association of America has found a new target in its war against piracy: search engines providing links to copyrighted material. Although they distribute no files themselves, such sites are a critical piece of the infrastructure that enables movie piracy, the MPAA says.

Lawsuits were filed Thursday against: BinNews.com, Torrentspy.com, IsoHunt, BTHub.com, TorrentBox.com, NiteShadow.com, Ed2k-It.com, NZB-Zone.com, and DVDRs.net. The suits mark the first time the MPAA has gone after Usenet related services, which have largely been spared in the crackdown on illicit file sharing.

BetaNews

Microsoft has spent billions of dollars in recent years to secure its software. Now it's payback time.

Until recently, security was just something that the software company got hammered on--a perennial headache, with no upside. But now, four years after Chairman Bill Gates launched his Trustworthy Computing push, Microsoft is starting to see security as a potential selling point.

Last month, Windows chief Jim Allchin pointed to enhanced security as the top reason customers should move to Vista, the update to the operating system due this year. The software maker estimates that a third of its engineering time for the new Windows was spent on protective measures.

CNet

Well, it finally happened.

After years of "Unix is sick," "Unix is dying" and "Unix is dead" headlines, Windows, according to IDC, has finally overtaken Unix as the No. 1 pre-installed server operating system.

This may come as a surprise to some people, who've assumed that Windows has been No. 1 for quite some time. Nope. Windows has been No. 2 on servers for ages.

http://www.eweek.com/article2/0,1895,1930216,00.asp