Windows Remote Desktop Worm "Morto" Spreading
We don't see that many Internet worms these days. It's mostly just bots and trojans. But we just found a new Internet worm, and it's spreading in the wild. The worm is called Morto and it infects Windows workstations and servers. It uses a new spreading vector that we haven't seen before: RDP.
RDP stands for Remote Desktop Protocol. Windows has built-in support for this protocol via Windows Remote Desktop Connection. Once you enable a computer for remote use, you can use any other computer to access it.
Windows XP
Let's compare the major computer operating systems at the moment. We have Windows XP, Windows Vista and Windows 7. We have various Linux distributions. And we have Mac OS X.
Of these, obviously Windows XP has the weakest security, by far.
And Windows XP has the biggest market share, too. Globally close to half of all computers still run XP.
And today, Windows XP is ten years old.
I Can Has Update Rollup 1 for Windows XP SP3?
Hello Microsoft,
A partner of ours is feeling some pain. He's located in Central Europe and some of his customers have limited hardware budgets, and so… he ends up doing a lot of Windows XP SP3 installations. (Yes, we know, Windows 7 is cool, but the customer is always right, and you have to give them what they want.)
And here's where the pain comes in — Windows/Microsoft Updates.
There's a ton of post-SP3 updates and it takes a great deal of time to install them. It cuts into his productivity, i.e., his profit.
Introducing Norton Internet Security 5 and Norton AntiVirus 12 for Mac Public Beta!
Hi!
I'm Mike Romo and I am the product manager for Norton AntiVirus 12 for Mac and Norton Internet Security 5 for Mac. I am really excited to get this opportunity to welcome you to our beta program and want to be the first to thank you for your interest in our latest products.
Norton Management
One of the great new features we’re adding to the Norton 2012 product line is the ability to manage your installed Norton products from one central website. Have you ever received a call from your remote family member that their Norton product is out of date or their Norton subscription needs a renewal? Before the management feature, you’d have to physically be present to address these issues. Now, once you have installed Norton Management on a device, you can handle these things (and more) from the Management website!
Man-In-The-Browser 101 or “it works as designed” (Win & Apple Mac)

Everybody is talking about Man-In-The-Browser (MITB), so I thought we’d do a little 101 session on how these Man-In-The-Browser Trojans work. As there is way too much focus on the big guns such as Zeus/SpyEye out there, I thought we’d use one of the less known Trojans as an example and even discuss the implications on Mac OS X as well.
MacDefender - or how to Apples Malware protection is tested in real-world

Another day, another security update… or is it? Apple has just released another security update for 10.6.7, Security Update 2011-003. What’s interesting about this update, is that it addresses one of the issues we raised in our earlier labs report.
"F-Secure HTK4S" is Fake
We've seen this one before, but there's been a new run today.
Some clown is trying to pose as us. If you see an e-mail like the one below, please ignore it:
From: securitysupport@hotxf.com
Reply-To: securitysupport@hotxf.com
Subject: Security Maintenance.F-Secure HTK4S
To: undisclosed-recipients:;
Dear Email Subscriber,
Your e-mail account needs to be improved with our new
Mac OS X Malware is Here For Real
In 1990s, we used to have a Mac product. It eventually got discontinued due to lack of threats.
Then, in October 2007, we saw something unusual: a DNS Changer Trojan for OS X.
We estimated the risk level of new Mac malware and as a result, we started developing F-Secure Anti-Virus for Mac.
While we have seen new Mac malware every now and then, many experts have been downplaying the malware risk on Mac OS X systems. But the fact is that we are seeing more and more activity.
Facebook Video Spam Revamped
Last week there was an outbreak on Facebook of video spam related to Osama bin Laden's death. The previous spam was basically variations of this:

If a curious user clicked on the link in the spam, it would eventually bring them to a page which basically makes the user manually send out spam to his own Facebook contacts, under the guise of a "security check" to view the video: