Banks, social networks new target for computer viruses

Cyber criminals are increasingly focusing their attacks on the hundreds of millions of users of social networks and on loopholes in bank security systems, security software vendors said on Wednesday. At the same time, spam e-mail messages rose sharply in the third quarter, Symantec Corp said.

And as Facebook reached 300 million accounts in September, social networks and social media continued to attract criminals, smaller research firm F-Secure said in its quarterly virus report. "As Twitter has grown in popularity, it has been increasingly targeted by worms, spam and account hijacking," F-Secure said.

Cyber criminals choose targets that are widely used, allowing them to go after the largest number of potential victims. "Cyber criminals continue to follow the money," said Yuval Ben-Itzhak, technology chief at a small security software vendor Finjan, who on Wednesday revealed a new method criminals use to steal money from bank accounts and hide their tracks.

Finjan said it expects a growing trend of using new software that forges on-screen bank statements, concealing the true transaction amount to dupe account holders and their banks, and then sends the stolen money to money mules accounts.

"With the combination of using sophisticated Trojans for the theft and money mules to transfer stolen money to their accounts, they minimize their chances of being detected," Ben-Itzhak said.

The amount of spam in all e-mail traffic rose to 88.1 percent in the third quarter from 81 percent a year ago, said Symantec's MessageLabs in its quarterly report. MessageLabs said botnets are now responsible for sending 87.9 percent of all spam. Hackers take advantage of the PC vulnerability by booby- trapping websites with a malicious code that loads onto computers.

Infected PCs are commandeered into a botnet, a network of hijacked computers. They are used for identity theft, spamming and other cyber crimes. "Over the past year, we have seen a number of ISP's (Internet service providers) taken offline for hosting botnet activity resulting in a case of sink or swim and an ensuing shift in botnet power," MessageLabs analyst Paul Wood said in a statement.

"However, this won't always be the case as botnet technology has also evolved since the end of 2008 and the most recent ISP closures now have less of an impact on resulting activity as downtime now only lasts a few hours rather than weeks or months as before," Wood said.

Agencies

Forty glorious years of Internet history

Goofy videos weren’t on the minds of Len Kleinrock and his team at UCLA when they began tests 40 years ago on what would become the internet. Neither was social networking, for that matter, nor were most of the other easy-to-use applications that have drawn more than a billion people online.

Instead the researchers sought to create an open network for freely exchanging information, an openness that ultimately spurred the innovation that would later spawn the likes of YouTube, Facebook and the World Wide Web. There’s still plenty of room for innovation today, yet the openness fostering it may be eroding. While the internet is more widely available and faster than ever, artificial barriers threaten to constrict its growth.

Call it a mid-life crisis.
A variety of factors are to blame. Spam and hacking attacks force network operators to erect security firewalls. Authoritarian regimes block access to many sites and services within their borders. And commercial considerations spur policies that can thwart rivals, particularly on mobile devices like the iPhone.

“There is more freedom for the typical internet user to play, to communicate, to shop — more opportunities than ever before,” said Jonathan Zittrain, a law professor and co-founder of Harvard’s Berkman Center for Internet & Society. “On the worrisome side, there are some longerterm trends that are making it much more possible (for information) to be controlled.”

Few were paying attention on September 2, 1969, when 20 people gathered in Kleinrock’s lab at the University of California, Los Angeles, to watch as two computers passed meaningless test data through a 15-foot gray cable.

That was the beginning of the fledgling Arpanet network. The 1970s brought email and the TCP/IP communications protocols, which allowed multiple networks to connect — and formed the internet. The internet didn’t become a household word until the ’90s, though, after a British physicist, Tim Berners-Lee, invented the web, a subset of the internet that makes it easier to link resources across disparate locations. Meanwhile, service providers like America Online connected millions of people for the first time.

That early obscurity helped the Internet blossom, free from regulatory and commercial constraints that might discourage or even prohibit experimentation. The free flow of pornography led to innovations in Internet credit card payments, online video and other technologies used in the mainstream today.

Already, there is evidence of controls at workplaces and service providers slowing uptake of file-sharing and collaboration tools. If such barriers keep innovations from hands of consumers, we may never know what else we may be missing along the way.

The journey of the Internet

1969 | On September 2, two computers at University of California, Los Angeles, exchange meaningless data in first test of Arpanet, an experimental military network 1972 | Ray Tomlinson brings email to the network, choosing @ as a way to specify email addresses belonging to other systems 1973 | Arpanet gets first international nodes, in England and Norway 1974 | Vint Cerf and Bob Kahn develop communications technique called TCP, allowing multiple networks to understand one another, creating a true internet 1983 | Domain name system is proposed. Creation of suffixes such as ‘.com’, ‘.gov’ and ‘.edu’ comes a year later
1988 | One of the first internet worms, Morris, cripples thousands of computers
1990 | Tim Berners- Lee creates the World Wide Web while developing ways to control computers remotely
1993 | Marc Andreessen and colleagues at University of Illinois create Mosaic, the first web browser to combine graphics and text on a single page
1994 | Andreessen and others on the Mosaic team form a company to develop the first commercial web browser, Netscape. Two immigration lawyers introduce the world to spam, advertising their green card lottery services
1998 | Google forms out of a project that began in Stanford dorm rooms. US government delegates oversight of domain name policies to Internet Corporation for Assigned Names and Numbers, or ICANN
1999 | Napster popularizes music file-sharing and spawns successors that have permanently changed the recording industry
2000 | The dot-com boom of the 1990s becomes a bust as technology companies slide
2004 | Mark Zuckerberg starts Facebook at Harvard University
2005 | Launch of YouTube video-sharing site 2007 | Apple releases iPhone, introducing millions more to wireless internet access

World internet population surpasses
250 million in 1999
500 million in 2002
1 billion in 2006
1.5 billion in 2008

Agencies

Internet Users Warned of Serious Computer Security Hole

Microsoft Corp. has taken the rare step of warning about a serious computer security vulnerability it hasn't fixed yet.

The vulnerability disclosed Monday affects Internet Explorer users whose computers run the Windows XP or Windows Server 2003 operating software.

It can allow hackers to remotely take control of victims' machines. The victims don't need to do anything to get infected except visit a Web site that's been hacked.

Security experts say criminals have been attacking the vulnerability for nearly a week. Thousands of sites have been hacked to serve up malicious software that exploits the vulnerability. People are drawn to these sites by clicking a link in spam e-mail.

The so-called ``zero day'' vulnerability disclosed by Microsoft affects a part of its software used to play video. The problem arises from the way the software interacts with Internet Explorer, which opens a hole for hackers to tunnel into.

Microsoft urged vulnerable users to disable the problematic part of its software, which can be done from Microsoft's Web site, while the company works on a ``patch'' _ or software fix _ for the problem.

Microsoft rarely departs from its practice of issuing security updates the second Tuesday of each month. When the Redmond, Washington-based company does issue security reminders at other times, it's because the vulnerabilities are very serious.

A recent example was the emergency patch Microsoft issued in October for a vulnerability that criminals exploited to infect millions of PCs with the Conficker worm. While initially feared as an all-powerful doomsday device, that network of infected machines was eventually used for mundane moneymaking schemes like sending spam and pushing fake antivirus software.

Agencies

Will Google, Yahoo and Microsoft collaborate to clean up web?

In a rare instance of collaboration among otherwise fierce rivals, Google, Yahoo and Microsoft said they would support a new web standard that will allow millions of publishers to remove duplicate pages from their websites. As a result, search engines would be able to make their search results more comprehensive.

"There is a lot of clutter on the web and with this, publishers will be able to clean up a lot of junk," said Matt Cutts, an engineer who heads Google's spam fighting efforts, the New York Times reported.

"I think it is going to gain traction pretty quickly," said Cutts.

The problem is the following: Many web publishers, especially those that have voluminous sites, like e-commerce companies, have multiple URLs that all point to the same page. This confuses search engines, sometimes causing them to index the same page multiple times. As much as 20 percent of URLs on the web may be duplicates, according to some estimates.

Engineers at Google came up with a simple way for web publishers to indicate when a URL is a duplicate, and if so, which is the principal, or "canonical," URL that search engines should be indexing. Yahoo and Microsoft, the no. 2 and no. 3 search engines, have agreed to support the same standard.

"We are happy that everyone is going to support the same implementation," said Nathan Buggia, a lead programme manager at Microsoft. "This is a clear benefit for publishers as it gives them an opportunity to get more exposure through search engines."

All search engines have developed technologies to detect duplicates that are more or less effective. The so-called Canonical Link Tag, as the standard is known, should make it easier for both publishers and search engines to address the problem, NYT reported Thursday.

"It is an important step because all the search engines are coming out with it," said Priyank Garg, director of product management for web search at Yahoo.

Agencies