[LINK] The security equiv of "The Nips are getting Bigger "

[Stephen Jenkin]

---------- Forwarded message ----------
Date: Tue, 26 Sep 2006 17:03:55 +0000
From: The SANS Institute <NewsBites at sans.org>
Subject: SANS NewsBites Vol. 8 Num. 76

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

*************************************************************************
SANS NewsBites             Sept. 26, 2006                 Vol. 8, Num. 76
*************************************************************************

TOP OF THE NEWS
  Massive Growth In Organized Crime Targeting Home PC Users
THE REST OF THE WEEK'S NEWS
  SPYWARE, SPAM & PHISHING
    Phishers Turn to eCards

*********************** Sponsored By Symark Software ********************

How do you guard against sabotage, theft or unauthorized access of data?
Sudo doesn't provide the accountability for "privileged" accounts
required by COBIT 4.0/ISO17799. Learn how PowerBroker, the most widely
used solution for controlling Unix/Linux superuser privileges, helps you
meet data privacy and compliance requirements.
ALERT: Download the FREE White Paper "PowerBroker vs. sudo."
http://www.sans.org/info.php?id=1366
*************************************************************************

TOP OF THE NEWS


 --Massive Growth In Organized Crime Targeting Home PC Users
(25 September 2006)
According to Symantec's semi-annual Internet Threat Report, home
computer users are becoming the preferred target of cyber criminals.
The report noted an 81 percent jump in the number of phishing emails in
the first half of 2006 over the previous six months.  Among home users
surveyed, just 46.3 percent say their anti-virus software is up-to-date.
Among other findings in the report: browser flaws are on the rise and
the US is the largest source of Internet attacks due to the large number
of compromised computers with broadband connections.
http://news.bbc.co.uk/2/hi/technology/5377334.stm
http://news.com.com/2102-7349_3-6118920.html?tag=st.util.print
http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9003578&intsrc=news_ts_head
http://ca.news.yahoo.com/s/25092006/2/ztechnology-highlights-symantec-s-10th-internet-security-threat-report.html


***************************  Sponsored Links:  **************************

1) Using Real-Time Log Analysis to Defend Against Network Attacks and
Insider Abuse - Live Webinar
http://www.sans.org/info.php?id=1367

2) The SANS Secure Storage & Encryption Summit, December 6-7, provides
you with concrete, actionable information you can deploy as soon as you
return to work.
http://www.sans.org/info.php?id=1368

3) Take Advantage of Special Web Filtering Offers from iPrism. Get a
Quick Quote Now!
http://www.sans.org/info.php?id=1369

*************************************************************************

THE REST OF THE WEEK'S NEWS

SPYWARE, SPAM & PHISHING
 --Phishers Turn to eCards
(22 September 2006)
Thousands of people have reportedly fallen prey to a phishing attack
that uses ecards as bait.  The cards appear to come from a secret
admirer.  When the recipient clicks on the provided link, the computer
is directed to a malicious site that attempts to download a keystroke
logger; the card is then displayed.  The attack exploits a flaw in
Microsoft Windows that was patched in May (MS06-014).
http://www.zdnetasia.com/news/security/printfriendly.htm?AT=61954472-39000005c

*************************************************************************

Please feel free to share this with interested parties via email, but
no posting is allowed on web sites. For a free subscription, (and for
free posters) or to update a current subscription, visit
http://portal.sans.org/


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)

iD8DBQFFGVXy+LUG5KFpTkYRAl7/AKCimtxomsJIfttUafoyiJYvJ7P/agCfZEq5
BMGJHX98lrjcYI3H9tbfgr0=
=P3Xc
-----END PGP SIGNATURE-----


Steve Jenkin, Info Tech, Systems and Design Specialist.
0412 786 915 (+61 412 786 915)
PO Box 48, Kippax ACT 2615, AUSTRALIA

sjenkin at canb.auug.org.au http://www.canb.auug.org.au/~sjenkin