|
|
|
|
|
As Response To Aggressive Instant Messaging Worm, ESET Advises Seven Security Tips
Published Nov 28, 2010
|
Few days ago, an unnamed computer worm forced Microsoft to temporarily suspend active links in its Live Messenger 2009 to prevent the aggressive worm spreading. Instant messaging is a very effective way for malware to stay active and thrive. And as time progresses, cybercriminals are refining their techniques to lure potential victims to visit malicious hyperlinks.
“This is quite a surprising measure, because worms spreading through Instant Messaging (IM) such as Skype, Yahoo! Messenger and Microsoft Live Messenger are not new at all. For example, the AimVen worm was discovered in 2003 and was targeting the America Online Instant Messenger platform,” comments ESET’s Senior Researcher Pierre-Marc Bureau, who was just named "Best Newcomer in the Antivirus industry" at the Virus Bulletin Conference 2010 in Vancouver, Canada.
“The modus operandi for this type of attack is simple,” explains Bureau. “First the victim receives a message that contains a hyperlink from one of their contacts, clicks on it and gets infected.” The worm can also use geo-localization in order to use the victim's language and even relate to news or events trending in the victim's country. These advanced techniques may trick even the most cautious users.
ESET has compiled seven golden security rules while instant messaging:
1. Opening pictures, downloading files or clicking links should be avoided at all cost in case it comes from someone you do not know. Do not open suspicious files or links even if they come for someone you know; try to confirm with the person on the origin of the attachment.
2. Do not reply to messages from people you don’t know if you were not expecting them. If someone you do not recognize sends you a request to add him/her to your contacts, decline the request if not sure about the indetity of the contact.
3. Unwanted messages ought to be blocked - blocking spam or messages from strangers might be easier than you think – most IM software allows you to create your own contact list.
4. Do not post sensitive information and private data in instant messages, especially refrain from sharing credit card numbers, banking details, paswords or important personal identification data like phone number or addresses. You should also avoid sharing information about your IM name or e-mail contact over the Intertnet.
5. Your Instant Messaging should also have a strong password as any other account. Always use different passwords for different accounts and other online services (such as online banking, e-mail). Do not recycle your password. If you log in on public or shared computer, make sure to uncheck the automatic login feature.
6. Avoid meeting strangers that you have met online while instant messaging. If you decide to meet someone in real person anyway, take safety precautions – bring someone along with you.
7. Turn off your Web camera if you are not using it, as some malware allows criminals and strangers to spy on you through your own webcam. If you have an integrated camera, always check the control light that it is off when you are not using it.
About ADAOX and ESET
ADAOX Middle East is the Regional Business Development and Support Center for ESET NOD32 Security Solutions in the Middle East.
ESET, founded in 1992, is a global vendor of security software for corporate customers and households. ESET develops software solutions that deliver instant, comprehensive protection against evolving computer security threats. We pioneered and continue to lead the industry in proactive threat detection.
ESET NOD32 Antivirus holds the world record for the number of Virus Bulletin "VB100 Awards," never to have missed a single “In-the-Wild” worm or virus since the inception of testing in 1998.
The company has global headquarters and research center in Bratislava, Slovakia with an extensive partner network in 180 countries. In 2008, ESET has opened a new research center in Krakow, Poland. ESET is one of the fastest-growing technology companies in the region of Europe, Middle East and Africa according to Deloitte Technology Fast 500 EMEA ranking.
Flagship products are ESET NOD32 Antivirus and ESET Smart Security. Built on the award-winning ThreatSense® engine are highly integrated security solutions trusted by more than 100 milion of users to protect their computers against a host of Internet-borne malware , such as viruses, trojans, worms, adware, spyware, phishing, rootkits and other Internet threats.
ThreatSense.Net® is ESET’s in-the-cloud malware collection system utilizing data from users of ESET solutions worldwide. This continual streaming of information provides ESET Virus Lab specialists with a real-time accurate snapshot of the nature and scope of global infiltrations. Careful analysis of the threats, attack vectors and patterns serves ESET to fine-tune all heuristic and signature updates to protect its users against tomorrow’s threats.
For further information please visit: http://www.adaox.com or contact:
Aji Joseph
ADAOX Middle East
ESET NOD32 Business Development & Support
Tel: +971 4 3754052
Email: aji@adaox.com
Posted by
VMD - [Virtual Marketing Department]
|
|
|
