[2386] in Security FYI
[IS&T Security-FYI] SFYI Newsletter, June 6, 2011
daemon@ATHENA.MIT.EDU (Monique Yeaton)
Mon Jun 6 15:15:39 2011
From: Monique Yeaton <myeaton@MIT.EDU>
To: "ist-security-fyi@mit.edu" <ist-security-fyi@MIT.EDU>
Date: Mon, 6 Jun 2011 15:14:41 -0400
Message-ID: <CA129F61.176BA%myeaton@exchange.mit.edu>
Content-Language: en-US
MIME-Version: 1.0
Cc: "itss@mit.edu" <itss@MIT.EDU>
Content-Type: multipart/mixed; boundary="===============1084033886=="
Errors-To: ist-security-fyi-bounces@MIT.EDU
--===============1084033886==
Content-Language: en-US
Content-Type: multipart/alternative;
boundary="_000_CA129F61176BAmyeatonexchangemitedu_"
--_000_CA129F61176BAmyeatonexchangemitedu_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
In this issue:
1. Scareware Defeats Apple Security Update
2. Microsoft Safety Scanner Provides On-Demand Virus Scan
3. Safe Computing While Away from MIT
---------------------------------------------------------
1. Scareware Defeats Apple Security Update
---------------------------------------------------------
Last week (May 31) Apple released a security update to rid Macs of the mena=
cing malware that has been around for nearly a month and is attempting to g=
et users to purchase a bogus anti-virus software known as MacDefender, MacP=
rotector or MacSecurity. But shortly after the update was released, cyber-c=
riminals released a new variant of the malware that can defeat the security=
efforts.
Apple's Security Update 2011-003, available for Mac OS X 10.6.7, includes a=
malware removal tool that searches for and destroys the known variants of =
the malware. It is not clear how Apple will keep ahead of the new variants,=
but the malware removal tool does allow for the updating of "definitions,"=
malware profiles that let the software identify viruses.
If you are running virus protection software on your Mac already, you are l=
ikely better protected. McAfee and other third-party anti-virus software ve=
ndors are usually very quick to update their definitions and catch newly re=
leased malware. You can download the Mac version of McAfee Security from MI=
T here:
<http://ist.mit.edu/services/software/macsecurity/1x>
How Security Update 2011-003 protects Macs from malware:
<http://support.apple.com/kb/HT4651>
How to avoid or remove the malware:
<http://support.apple.com/kb/HT4650>
---------------------------------------------------------------------------=
---
2. Microsoft Safety Scanner Provides On-Demand Virus Scan
---------------------------------------------------------------------------=
---
You can get a free PC safety scan by using the Microsoft Safety Scanner, a =
free downloadable security tool that provides on-demand scanning and helps =
remove viruses, spyware and other malicious software. It works with your ex=
isting anti-virus (AV) software.
Note: the Microsoft Safety Scanner expires 10 days after being downloaded. =
To rerun a scan with the latest anti-malware definitions, download and run =
the Microsoft Safety Scanner again. This tool is not a replacement for usin=
g an AV software that provides on-going protection.
So why would you use this scanner? It is good for those times when you thin=
k you might have a virus or you don't trust that your usual AV software is =
catching all the threats out there. This tool allows you to run a one-time,=
on-demand scan, and works as a good "backup" security tool for your PC.
Learn more and download:
<http://www.microsoft.com/security/scanner/en-us/default.aspx>
---------------------------------------------------
3. Safe Computing While Away from MIT
---------------------------------------------------
Keeping data secure, while using your home computer or while traveling with=
a laptop, is a challenge. While the summer time is a period when most of u=
s are relaxing, we can't afford to ease off on securing important data.
This article has several tips for both the telecommuter and the summer trav=
eler:
<http://ist.mit.edu/news/securedata_outofoffice>
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
Read all Security FYI Newsletter articles online at http://securityfyi.word=
press.com/.
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
Monique Yeaton
IT Security Communications Consultant
MIT Information Services & Technology (IS&T)
(617) 253-2715
http://ist.mit.edu/security
--_000_CA129F61176BAmyeatonexchangemitedu_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<html><head></head><body style=3D"word-wrap: break-word; -webkit-nbsp-mode:=
space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-si=
ze: 14px; font-family: Calibri, sans-serif; "><div><div><div><p style=3D"ma=
rgin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica; min-height: 17.0px">=
<br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica">In thi=
s issue:</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica; min-he=
ight: 17.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica">1. Sca=
reware Defeats Apple Security Update</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica">2. Mic=
rosoft Safety Scanner Provides On-Demand Virus Scan</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica">3. Saf=
e Computing While Away from MIT</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica; min-he=
ight: 17.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica">------=
---------------------------------------------------</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica">1. Sca=
reware Defeats Apple Security Update</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica">------=
---------------------------------------------------</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica; min-he=
ight: 17.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica">Last w=
eek (May 31) Apple released a security update to rid Macs of the menacing m=
alware that has been around for nearly a month and is attempting to get use=
rs to purchase a bogus anti-virus software known as MacDefender, MacProtect=
or or MacSecurity. But shortly after the update was released, cyber-crimina=
ls released a new variant of the malware that can defeat the security effor=
ts.</p><p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica;=
min-height: 17.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica">Apple'=
s Security Update 2011-003, available for Mac OS X 10.6.7, includes a malwa=
re removal tool that searches for and destroys the known variants of the ma=
lware. It is not clear how Apple will keep ahead of the new variants, but t=
he malware removal tool does allow for the updating of "definitions," malwa=
re profiles that let the software identify viruses.</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica; min-he=
ight: 17.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica">If you=
are running virus protection software on your Mac already, you are likely =
better protected. McAfee and other third-party anti-virus software vendors =
are usually very quick to update their definitions and catch newly released=
malware. You can download the Mac version of McAfee Security from MIT here=
: </p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica"><ht=
tp://ist.mit.edu/services/software/macsecurity/1x></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica; min-he=
ight: 17.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica">How Se=
curity Update 2011-003 protects Macs from malware: </p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica"><ht=
tp://support.apple.com/kb/HT4651></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica; min-he=
ight: 17.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica">How to=
avoid or remove the malware:</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica"><ht=
tp://support.apple.com/kb/HT4650></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica; min-he=
ight: 17.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica; min-he=
ight: 17.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica">------=
------------------------------------------------------------------------</p=
>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica">2. Mic=
rosoft Safety Scanner Provides On-Demand Virus Scan</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica">------=
------------------------------------------------------------------------</p=
>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica; min-he=
ight: 17.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica">You ca=
n get a free PC safety scan by using the Microsoft Safety Scanner, a free d=
ownloadable security tool that provides on-demand scanning and helps remove=
viruses, spyware and other malicious software. It works with your existing=
anti-virus (AV) software.</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica; min-he=
ight: 17.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica">Note: =
the Microsoft Safety Scanner expires 10 days after being downloaded. To rer=
un a scan with the latest anti-malware definitions, download and run the Mi=
crosoft Safety Scanner again. This tool is not a replacement for using an A=
V software that provides on-going protection.</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica; min-he=
ight: 17.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica">So why=
would you use this scanner? It is good for those times when you think you =
might have a virus or you don't trust that your usual AV software is catchi=
ng all the threats out there. This tool allows you to run a one-time, on-de=
mand scan, and works as a good "backup" security tool for your PC.</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica; min-he=
ight: 17.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica">Learn =
more and download: </p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica"><ht=
tp://www.microsoft.com/security/scanner/en-us/default.aspx></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica; min-he=
ight: 17.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica; min-he=
ight: 17.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica">------=
---------------------------------------------</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica">3. Saf=
e Computing While Away from MIT</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica">------=
---------------------------------------------</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica; min-he=
ight: 17.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica">Keepin=
g data secure, while using your home computer or while traveling with a lap=
top, is a challenge. While the summer time is a period when most of us are =
relaxing, we can't afford to ease off on securing important data. </p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica; min-he=
ight: 17.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica">This a=
rticle has several tips for both the telecommuter and the summer traveler:<=
/p><p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica"><=
;http://ist.mit.edu/news/securedata_outofoffice></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica; min-he=
ight: 17.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Helvetica; min-he=
ight: 17.0px"><br></p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">Read all S=
ecurity FYI Newsletter articles online at http://securityfyi.wordpress.com/=
.</p>
<p style=3D"margin: 0.0px 0.0px 0.0px 0.0px; font: 14.0px Arial">=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D</p><p style=3D"margin: 0.0px =
0.0px 0.0px 0.0px; font: 14.0px Arial"><br></p><p style=3D"margin: 0.0px 0.=
0px 0.0px 0.0px; font: 14.0px Arial"><br></p></div><div><div style=3D"word-=
wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white=
-space; font-family: Helvetica; "><span class=3D"Apple-style-span" style=3D=
"border-collapse: separate; -webkit-border-horizontal-spacing: 0px; -webkit=
-border-vertical-spacing: 0px; color: rgb(0, 0, 0); font-family: Helvetica;=
font-size: 14px; font-style: normal; font-variant: normal; font-weight: no=
rmal; letter-spacing: normal; line-height: normal; -webkit-text-decorations=
-in-effect: none; text-indent: 0px; -webkit-text-size-adjust: auto; text-tr=
ansform: none; orphans: 2; white-space: normal; widows: 2; word-spacing: 0p=
x; "><span class=3D"Apple-style-span" style=3D"border-collapse: separate; -=
webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px=
; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style:=
normal; font-variant: normal; font-weight: normal; letter-spacing: normal;=
line-height: normal; -webkit-text-decorations-in-effect: none; text-indent=
: 0px; -webkit-text-size-adjust: auto; text-transform: none; orphans: 2; wh=
ite-space: normal; widows: 2; word-spacing: 0px; "><span class=3D"Apple-sty=
le-span" style=3D"border-collapse: separate; -webkit-border-horizontal-spac=
ing: 0px; -webkit-border-vertical-spacing: 0px; color: rgb(0, 0, 0); font-f=
amily: Helvetica; font-size: 14px; font-style: normal; font-variant: normal=
; font-weight: normal; letter-spacing: normal; line-height: normal; -webkit=
-text-decorations-in-effect: none; text-indent: 0px; -webkit-text-size-adju=
st: auto; text-transform: none; orphans: 2; white-space: normal; widows: 2;=
word-spacing: 0px; "><span class=3D"Apple-style-span" style=3D"border-coll=
apse: separate; -webkit-border-horizontal-spacing: 0px; -webkit-border-vert=
ical-spacing: 0px; color: rgb(0, 0, 0); font-family: Helvetica; font-size: =
14px; font-style: normal; font-variant: normal; font-weight: normal; letter=
-spacing: normal; line-height: normal; -webkit-text-decorations-in-effect: =
none; text-indent: 0px; -webkit-text-size-adjust: auto; text-transform: non=
e; orphans: 2; white-space: normal; widows: 2; word-spacing: 0px; "><span c=
lass=3D"Apple-style-span" style=3D"border-collapse: separate; -webkit-borde=
r-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; color: rgb=
(0, 0, 0); font-family: Helvetica; font-size: 14px; font-style: normal; fon=
t-variant: normal; font-weight: normal; letter-spacing: normal; line-height=
: normal; -webkit-text-decorations-in-effect: none; text-indent: 0px; -webk=
it-text-size-adjust: auto; text-transform: none; orphans: 2; white-space: n=
ormal; widows: 2; word-spacing: 0px; "><span class=3D"Apple-style-span" sty=
le=3D"border-collapse: separate; -webkit-border-horizontal-spacing: 0px; -w=
ebkit-border-vertical-spacing: 0px; color: rgb(0, 0, 0); font-family: Helve=
tica; font-size: 12px; font-style: normal; font-variant: normal; font-weigh=
t: normal; letter-spacing: normal; line-height: normal; -webkit-text-decora=
tions-in-effect: none; text-indent: 0px; -webkit-text-size-adjust: auto; te=
xt-transform: none; orphans: 2; white-space: normal; widows: 2; word-spacin=
g: 0px; "><span class=3D"Apple-style-span" style=3D"border-collapse: separa=
te; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing=
: 0px; color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-s=
tyle: normal; font-variant: normal; font-weight: normal; letter-spacing: no=
rmal; line-height: normal; -webkit-text-decorations-in-effect: none; text-i=
ndent: 0px; -webkit-text-size-adjust: auto; text-transform: none; orphans: =
2; white-space: normal; widows: 2; word-spacing: 0px; "><div style=3D"font-=
size: 12px; ">Monique Yeaton</div><div style=3D"font-size: 12px; "><span cl=
ass=3D"Apple-style-span" style=3D"font-size: 12px; "><span class=3D"Apple-s=
tyle-span" style=3D"font-size: 12px; "><span class=3D"Apple-style-span" sty=
le=3D"font-size: 12px; "><span class=3D"Apple-style-span" style=3D"font-siz=
e: 12px; "><span class=3D"Apple-style-span" style=3D"font-size: 12px; "><sp=
an class=3D"Apple-style-span" style=3D"font-size: 12px; ">IT Security Commu=
nications Consultant</span></span></span></span></span></span></div><div st=
yle=3D"font-size: 12px; "><span class=3D"Apple-style-span" style=3D"font-si=
ze: 12px; "><span class=3D"Apple-style-span" style=3D"font-size: 12px; "><s=
pan class=3D"Apple-style-span" style=3D"font-size: 12px; "><span class=3D"A=
pple-style-span" style=3D"font-size: 12px; "><span class=3D"Apple-style-spa=
n" style=3D"font-size: 12px; "><span class=3D"Apple-style-span" style=3D"fo=
nt-size: 12px; ">MIT Information Services & Technology (IS&T)</span=
></span></span></span></span></span></div><div style=3D"font-size: 12px; ">=
<span class=3D"Apple-style-span" style=3D"font-size: 12px; "><span class=3D=
"Apple-style-span" style=3D"font-size: 12px; "><span class=3D"Apple-style-s=
pan" style=3D"font-size: 12px; "><span class=3D"Apple-style-span" style=3D"=
font-size: 12px; "><span class=3D"Apple-style-span" style=3D"font-size: 12p=
x; "><span class=3D"Apple-style-span" style=3D"font-size: 12px; ">(617) 253=
-2715</span></span></span></span></span></span></div><div style=3D"font-siz=
e: 12px; "><span class=3D"Apple-style-span" style=3D"font-size: 12px; "><sp=
an class=3D"Apple-style-span" style=3D"font-size: 12px; "><span class=3D"Ap=
ple-style-span" style=3D"font-size: 12px; "><span class=3D"Apple-style-span=
" style=3D"font-size: 12px; "><span class=3D"Apple-style-span" style=3D"fon=
t-size: 12px; "><span class=3D"Apple-style-span" style=3D"font-size: 12px; =
">http://ist.mit.edu/security</span></span></span></span></span></span></di=
v><div style=3D"font-size: 12px; "><br class=3D"khtml-block-placeholder"></=
div><br class=3D"Apple-interchange-newline"></span></span></span></span></s=
pan></span></span></div></div></div></div></body></html>
--_000_CA129F61176BAmyeatonexchangemitedu_--
--===============1084033886==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
ist-security-fyi mailing list
ist-security-fyi@mit.edu
To Unsubscribe http://mailman.mit.edu/mailman/listinfo/ist-security-fyi
--===============1084033886==--
