Comments for Welcome to the eScan Blog

Comment on ATM Scams by atm

atm — Fri, 17 May 2013 11:25:55 +0000

Senior citizens are predisposed to this type of crime as they are not always fully aware of the digital or cyber risks they take when using an ATM machine. Very insightful article, thanks.

Like or Dislike: 0 0

Comment on The Professional Web by R Sachin

R Sachin — Wed, 15 May 2013 06:39:09 +0000

The list of rogue registrars is endless, however, there are some registrars who are actively into providing their services for Malwares, you may say its their field of specialization.

Like or Dislike: 1 0

Comment on The Professional Web by Myrtle U. Gallegos

Myrtle U. Gallegos — Tue, 14 May 2013 22:15:26 +0000

There are about 450 accredited domain name registrars worldwide, but at least one-third of all active rogue pharmacy sites are registered at Internet.bs, a relatively small registrar that purports to operate out of the Bahamas and aggressively markets itself as an “offshore” registrar. That’s according to LegitScript, a verification and monitoring service for online pharmacies.

Like or Dislike: 2 0

Comment on RU a nightmare ? by DMV Computer Repair, Maryland Computer Support

DMV Computer Repair, Maryland Computer Support — Tue, 07 May 2013 07:27:24 +0000

My brother recommended I might like this blog. He used to be totally right. This post truly made my day. You can not believe just how much time I had spent for this information! Thank you!

Like or Dislike: 0 0

Comment on The Professional Web by dvb t

dvb t — Mon, 06 May 2013 23:29:50 +0000

Nice read, I just passed this onto a friend who was doing a little research on that. And he just bought me lunch because I found it for him smile So let me rephrase that: Thanks for lunch!

Like or Dislike: 0 0

Comment on RU a nightmare ? by The Professional Web | Welcome to the eScan Blog

The Professional Web | Welcome to the eScan Blog — Sat, 04 May 2013 13:22:16 +0000

[...] I had mentioned about .ru ccTLD and its association with the numerous malicious domains . The difficulties which are being faced by this registry are [...]

Like or Dislike: 0 0

Comment on RU a nightmare ? by R Sachin

R Sachin — Tue, 23 Apr 2013 10:29:19 +0000

These are the flaws in a business process and takes a herculean effort to change them.
Rgds
R Sachin

Like or Dislike: 0 0

Comment on RU a nightmare ? by MalwareMustDie

MalwareMustDie — Tue, 23 Apr 2013 10:07:19 +0000

A very well written explanation why we must deal with .RU malware distrbuted domains. For Russia to fix their system properly before releasing .RU domains into beloved internet.

Sadly, not even one single Russian I know would notice & try to fix this legendary procedural corrupted scheme, for the anti malware researchers to pay with sweat and tears.

Good essay, dont let the echo stops!

You know who we are,

#MalwareMustDie

Like or Dislike: 0 0

Comment on Hotmail – 0Day Vulnerability by 250000 Twitter Accounts compromised | Welcome to the eScan Blog

250000 Twitter Accounts compromised | Welcome to the eScan Blog — Sat, 02 Feb 2013 09:10:26 +0000

[...] as a security measure, and as also advised by Twitter alongwith our advisories on how to manage your passwords and irrespective of being a recipient of twitter’s precautionary email – Change your [...]

Like or Dislike: 0 0

Comment on CAPTCHA – A conundrum by Unhealthy Doubt

Unhealthy Doubt — Tue, 15 Jan 2013 18:36:40 +0000

According to “FTC Staff Report. Monitoring Software on Your PC: Spyware, Adware, and Other Software”, “adware aptly illustrates the challenges associated with developing a workable deﬁnition of spyware. Adware is often bundled with other software programs, which are frequently provided to consumers for free. Some types of adware monitor computer use (including websites visited), analyze that information to determine ads in which the users might be interested, and then display targeted ads to users based on this analysis”

Again, according to Federal trade Commission,:”‘Spyware’ is mostly classified into four types: system monitors, trojans, adware, and tracking cookies ”

To note that webscraping, datamining and selling personal data is more profitable than just advertising.

And, then, people wonder how spammers get their Emails, names and other data….

Like or Dislike: 0 0

Comment on CAPTCHA – A conundrum by R Sachin

R Sachin — Thu, 10 Jan 2013 13:18:14 +0000

Hello,

Take a look at this CAPTCHA Service:
https://www.keycaptcha.com/

Regards
R Sachin

Like or Dislike: 2 1

Comment on CAPTCHA – A conundrum by Alicia

Alicia — Thu, 10 Jan 2013 12:13:47 +0000

I am mainly posting to have a look at the CAPTCHA that you have implemented! Its so hard to find something that blocks the bots and is user friendly.

I find most of the regular CAPTCHA so hard to read that the bots must be more clever than me! I even started using CAPTCHA bypass software called RUMOLA to fill them in for me to save the brain strain (I fill in A LOT of CAPTCHAs everyday blogging!)

Like or Dislike: 0 0

Comment on Twitter – reset password by Twitter – Resetar Senha | Blog do eScan Brasil

Twitter – Resetar Senha | Blog do eScan Brasil — Wed, 14 Nov 2012 16:39:11 +0000

[...] http://blog.escanav.com/2012/11/12/twitter-reset-password/ [...]

Like or Dislike: 0 0

Comment on Fraudulent Digital Certificates – A different Perspective by SURL Analyzer – Acreditar ou não | Blog do eScan Brasil

SURL Analyzer – Acreditar ou não | Blog do eScan Brasil — Fri, 19 Oct 2012 21:53:22 +0000

[...] Antes de chegar em uma conclusão, lembre-se de ler o meu post sobre Certificados SSL fraudulentos (está em inglês). [...]

Like or Dislike: 0 0

Comment on Statistical URL Analyzer – Spot the Fake by SURL Analyzer – Acreditar ou não | Blog do eScan Brasil

SURL Analyzer – Acreditar ou não | Blog do eScan Brasil — Fri, 19 Oct 2012 21:50:35 +0000

[...] Em um post no blog inglês da eScan, eu falei sobre uma tentativa de phishing em um site de banco do Brasil. Os dois sites eram indênticos, exceto o “e” errado no site phishing. [...]

Like or Dislike: 0 0

Comment on Managed Services – When relations go wrong by Managed IT Services

Managed IT Services — Wed, 17 Oct 2012 14:34:05 +0000

This post is insightful. I have had nothing but positive experiences in dealing with my managed IT services, but I think it is important to be made aware of potential risks and to know the options in case an issue does occur. It is definitely important to make sure both parties have covered their bases with legal contracts. I think that prevents a lot of issues. Thank you for the post.

Like or Dislike: 0 0

Comment on Managed Services – When relations go wrong by It helpdesk

It helpdesk — Wed, 17 Oct 2012 10:52:39 +0000

When IT systems is done by the IT Partner, this is a classic conundrum for the third Party Data Center – who should be provided access is one question, which cannot be answered and over here comes the legal aspect – a Court order.

Like or Dislike: 0 0

Comment on Fraudulent Digital Certificates – A different Perspective by SURL Analyzer – to Believe or not | Welcome to the eScan Blog

SURL Analyzer – to Believe or not | Welcome to the eScan Blog — Tue, 16 Oct 2012 12:32:50 +0000

[...] Before, arriving at any conclusion, remember to read my blog post about fraudulent SSL Certificates. [...]

Like or Dislike: 0 0

Comment on Statistical URL Analyzer – Spot the Fake by To believe or not to believe | Welcome to the eScan Blog

To believe or not to believe | Welcome to the eScan Blog — Tue, 16 Oct 2012 12:31:50 +0000

[...] A few blogs ago, I had spoken about the a phishing attempt on a Brazilian banking website. The two web-sites were identical twins except for the erring ‘e’ in the phishing website. [...]

Like or Dislike: 0 0

Comment on Security Advisory: For Yahoo Mail Users by R Sachin

R Sachin — Tue, 02 Oct 2012 07:19:08 +0000

Hello Deon,

You are right, most of my posts are very brief.. Next time will take this into consideration.

Regards
R Sachin

Like or Dislike: 0 0

Comment on Security Advisory: For Yahoo Mail Users by Deon Matas

Deon Matas — Sat, 29 Sep 2012 20:36:01 +0000

I do accept as true with all the ideas you’ve offered for your post. They are very convincing and can definitely work. Still, the posts are very brief for beginners. May you please lengthen them a little from next time? Thank you for the post.

Like or Dislike: 0 0

Comment on Statistical URL Analyzer by MalwareMustDie – BH EK version 2 | Welcome to the eScan Blog

MalwareMustDie – BH EK version 2 | Welcome to the eScan Blog — Mon, 17 Sep 2012 07:04:52 +0000

[...] know more about SURL Analyzer visit here. Bookmark on Delicious Digg this post Recommend on Facebook Share on Orkut share via Reddit Share [...]

Like or Dislike: 0 0

Comment on Statistical URL Analyzer by Malaya Swinehart

Malaya Swinehart — Sat, 08 Sep 2012 20:26:12 +0000

Great blog post.Much thanks again. Will read on…

Like or Dislike: 1 0

Comment on Is there a worm in my Apple? by Khalil Atherton

Khalil Atherton — Thu, 06 Sep 2012 22:41:49 +0000

Very good blog article.Really thank you! Cool.

Like or Dislike: 0 0

Comment on Hotmail, Yahoo and AOL – 0Day vulnerabilities by nice post

nice post — Thu, 30 Aug 2012 06:40:27 +0000

Fantastic website. Plenty of useful info here. I’m sending it to some pals ans additionally sharing in delicious. And obviously, thanks for your sweat!

Like or Dislike: 0 0

Comment on DOOMSDAY – July 9 2012 by deepak sharma

deepak sharma — Tue, 21 Aug 2012 17:51:57 +0000

when we install e scan i feel much better than other

Like or Dislike: 0 0

Comment on Disclosure : Router based DNS MITM Attack by internetworksolutions.net@cisco bootcamp

internetworksolutions.net@cisco bootcamp — Wed, 08 Aug 2012 12:54:45 +0000

I was also facing the same issue and your post is very useful. I do not understand much of technical jargon but after discussing with MTNL triband support, I have specifed dns server and ip addresses instead of using the “automatic” setting. After doing this the problem seems to be resolved.ccnp bootcamp

Like or Dislike: 0 0

Comment on Hotmail, Yahoo and AOL – 0Day vulnerabilities by good jog

good jog — Thu, 02 Aug 2012 15:44:57 +0000

I’ll immediately take hold of your rss feed as I can’t to find your email subscription link or e-newsletter service. Do you’ve any? Kindly allow me recognize in order that I may subscribe. Thanks.

Like or Dislike: 1 0

Comment on Security Advisory: For Yahoo Mail Users by Your Questions About Web Traffic Statistics | Cash Cow Blog

Your Questions About Web Traffic Statistics | Cash Cow Blog — Fri, 27 Jul 2012 04:49:05 +0000

[...] not the Home > Yahoo! Products > Yahoo! Answers category. Good luck!Powered by Yahoo! AnswersDonald asks…Are there any websites where I can view the details traffic statistics of other websit…ere I can view the details traffic statistics of other websites, Beside Alexa.com?the reason im [...]

Like or Dislike: 0 0

Comment on Security Advisory: For Yahoo Mail Users by parc centros condo

parc centros condo — Tue, 24 Jul 2012 20:33:51 +0000

Awesome issues here. I am very glad to see your post. Thanks a lot and I’m having a look forward to contact you. Will you please drop me a mail?

Like or Dislike: 0 0

Comment on DNSChange Botnet by DOOMSDAY – July 9 2012 | Welcome to the eScan Blog

DOOMSDAY – July 9 2012 | Welcome to the eScan Blog — Fri, 06 Jul 2012 07:31:32 +0000

[...] First Blog (Feb/24/2012): http://blog.escanav.com/2012/02/24/dnschange-botnet/ [...]

Like or Dislike: 0 0

Comment on DNS-Changer Bot – Part Deux by DOOMSDAY – July 9 2012 | Welcome to the eScan Blog

DOOMSDAY – July 9 2012 | Welcome to the eScan Blog — Fri, 06 Jul 2012 07:29:50 +0000

[...] Second Blog (April/21/2012): http://blog.escanav.com/2012/04/21/dns-changer/ [...]

Like or Dislike: 0 0

Comment on Flame – Cyberwar Framework by Flame – Cyberwar Framework | Welcome to the eScan Blog | cloudguys.net

Flame – Cyberwar Framework | Welcome to the eScan Blog | cloudguys.net — Sat, 02 Jun 2012 00:42:38 +0000

[...] and Cyber-warfare. Stuxnet provided us with a sneak preview of what a cyber weapon really is …blog.escanav.com/2012/05/31/flame/For more on this story click (author unknown) … Related [...]

Like or Dislike: 0 0

Comment on HBGaryFederal – Password MD5 hash Crack by PS3 Other OS feature removed. Linux on the PS3 no more. | Securitron GNU/Linux Blog.

Mon, 28 May 2012 07:56:10 +0000

[...] as having simple passwords that were too easy to crack. Here is a good article about this topic: http://blog.escanav.com/2011/02/24/hbgary-password-md5-hash-crack/, it goes into detail about how passwords are stored in a MySQL database and the necessity of having [...]

Like or Dislike: 0 0

Comment on Hotmail – 0Day Vulnerability by Hotmail, Yahoo and AOL – 0Day vulnerabilities | Welcome to the eScan Blog

Hotmail, Yahoo and AOL – 0Day vulnerabilities | Welcome to the eScan Blog — Wed, 16 May 2012 09:07:55 +0000

[...] eScan Web Site eScan Wiki eScan Forum eScan Feeds Welcome to the eScan Blog Secure – Scalable – Reliable Skip to content HomeSubscribe to Posts ← Hotmail – 0Day Vulnerability [...]

Like or Dislike: 0 0

Comment on Security Advisory: For Yahoo Mail Users by Hotmail, Yahoo and AOL – 0Day vulnerabilities | Welcome to the eScan Blog

Mon, 30 Apr 2012 06:32:41 +0000

[...] few weeks back we had issued an advisory for Yahoo Users which can be found here. We urge all yahoo users to follow the steps and secure themselves , but [...]

Like or Dislike: 0 0

Comment on Hotmail – 0Day Vulnerability by Un grave fallo de seguridad en Hotmail permitía el robo de cuentas en este servicio « Seguridad PCs

Sat, 28 Apr 2012 14:36:09 +0000

[...] http://blog.escanav.com/2012/04/27/hotmail-0day-vulnerability/ Share this:TwitterImprimirCorreo electrónicoFacebookLinkedInMe gusta:Me gustaSé el primero en decir que te gusta esta post. [...]

Like or Dislike: 0 0

Comment on Security Advisory: For Yahoo Mail Users by Hotmail – 0Day Vulnerability | Welcome to the eScan Blog

Hotmail – 0Day Vulnerability | Welcome to the eScan Blog — Fri, 27 Apr 2012 11:19:31 +0000

[...] This reminds me of the Yahoo mail accounts being hacked, though nothing has yet been disclosed about Yahoo’s 0 Day, but I am sure it exists. We have also issued an advisory for Yahoo Users and how to mitigate these attacks. [...]

Like or Dislike: 0 0

Comment on Census Data 2011 by R Sachin

R Sachin — Fri, 27 Apr 2012 06:46:55 +0000

Hi,

Do let me know your queries, about this article.

Regards

Like or Dislike: 0 0

Comment on Census Data 2011 by global address listing

global address listing — Sun, 22 Apr 2012 01:15:53 +0000

I do believe all of the ideas you have offered on your post. They’re really convincing and can certainly work. Nonetheless, the posts are very brief for newbies. May you please lengthen them a little from next time? Thanks for the post.

Like or Dislike: 0 0

Comment on DNSChange Botnet by tarek

tarek — Fri, 20 Apr 2012 11:09:04 +0000

شكر

Translation: Thanks.

Like or Dislike: 0 0

Comment on How secure are you from phishing attacks? by How secure are you from phishing attacks ? | owndailyarticles.org

How secure are you from phishing attacks ? | owndailyarticles.org — Tue, 28 Feb 2012 16:32:07 +0000

[...] To know more, visit - http://blog.escanav.com/2011/11/09/how-secure-are-you-from-phishing-attacks/ [...]

Like or Dislike: 0 0

Comment on Disclosure : Router based DNS MITM Attack by Bryan

Bryan — Tue, 28 Feb 2012 09:28:49 +0000

Today is Monday and my uervse was set up this past Friday, I would not call myself a satisfied customer . Of course the technician that AT&T sent to do the install, knows how to hook up the wires and perform some very basic tests (he knew what ipconfig did but did not know how to use the switch /all)), he informed me that he had no training on the modem when I asked about port forwarding (I suspect he probably didn’t know what port forwarding was). The Motorola router is a big disappointment, I have been putzing around with it all weekend trying to get the port forwarding to work, it does not. I was going to try using my netgear dsl modem/router but suspected it would not work with the uervse, so I like the idea of setting up in passthrough mode tonight. The interface has been stripped down to the point to where it’s a one size fits all vanilla setup. They have restricted the functionality to where if you want to veer from their vanilla, you’re better off buying your own $30 router which has myriad more options, like Wireless Distribution System (WDS). I have had trouble with AT&T DNS in the past and had already been using static DNS entries. The majority of the time I could tracert faster to Google’s San Francisco routers faster than to AT&T in Atlanta, 150 miles away. I will try the passthrough tonight and we’ll see how it goes. One other issue I had with the modem that I haven’t seen mentioned here is the .ha redirect. During the setup phase, the first time you use your browser, it (the motorola router) redirects your home page (in my case google) to AT&T registration page. After the registration is successful, it does not go away and keeps taking you back to it. I could not go to google .com, annoying to say the least. I spent almost 2 hours fixing this in both Chrome and IE 9. My mother, who was playing angry birds on her iPhone at the time, had the redirect come up where the ads usually do inside angry birds. The AT&T tech support in Mombai have never heard of this redirect issue. Ya, right. Thanks for posting this site, good advice, cheers from the South. Rick

Like or Dislike: 0 0

Comment on Disclosure : Router based DNS MITM Attack by Mani

Mani — Tue, 28 Feb 2012 03:26:59 +0000

Well Rick,As long as it works, I don’t care who my peroidvr is. I moved to AT T since Comcast here kept raising their prices (they have an effective monopoly in San Francisco with speeds above 15Mbps).I guess in a year, I’ll move back.Good luck with the move. Ron

Like or Dislike: 0 0

Comment on DNSChange Botnet by Disclosure : Router based DNS MITM Attack | Welcome to the eScan Blog

Disclosure : Router based DNS MITM Attack | Welcome to the eScan Blog — Fri, 24 Feb 2012 10:07:49 +0000

[...] is the final post on DNS MITM topic. http://blog.escanav.com/?p=946 Bookmark on Delicious Digg this post Recommend on Facebook Share on Orkut share via Reddit Share [...]

Like or Dislike: 0 0

Comment on Disclosure : Router based DNS MITM Attack by DNSChange Botnet | Welcome to the eScan Blog

DNSChange Botnet | Welcome to the eScan Blog — Fri, 24 Feb 2012 10:05:33 +0000

[...] was a huge uproar about DNS Change Botnet, which functioned in the same manner as explained in my previous blog-post about DNS-MITM attack, but instead of targeting only the CPE, it targeted the DNS entries within the infected PC too. The [...]

Like or Dislike: 0 0

Comment on Disclosure : Router based DNS MITM Attack by Exceptional – Botnets and Exploit Kits | Welcome to the eScan Blog

Exceptional – Botnets and Exploit Kits | Welcome to the eScan Blog — Tue, 14 Feb 2012 07:14:39 +0000

[...] eScan Web Site eScan Wiki eScan Forum eScan Feeds Welcome to the eScan Blog Secure – Scalable – Reliable Skip to content HomeSubscribe to Posts ← Disclosure : Router based DNS MITM Attack [...]

Like or Dislike: 0 0

Comment on 2012 Spoilers by Exceptional Botnets and Exploit Kits | Welcome to the eScan Blog

Exceptional Botnets and Exploit Kits | Welcome to the eScan Blog — Tue, 14 Feb 2012 07:13:37 +0000

[...] For the year 2012, we had said that India would be the largest hub of botnets and with Win32.XPAJ, this will soon become a reality as most of the infected computers are based in India. My previous blog on DNS MITM is a bleak reminder. [...]

Like or Dislike: 0 0

Comment on Disclosure : Router based DNS MITM Attack by R Sachin

R Sachin — Wed, 01 Feb 2012 09:55:37 +0000

@JPS : Thanks for mentioning OpenDNS – that is one great service. But Never use OpenDNS option provided within the modem. use it within your Operating system.
@nikhil : Thanks.
@Rahul:
re: DeSOPA – https://addons.mozilla.org/en-US/firefox/addon/desopa/

Every modem provides you with the feature to restrict access to its configuration i.e. Do you want to allow access to router’s config from Internet ? recommended answer = NO . so the only way is to provide access to the router’s config from a specific IP address on LAN .

Ask your system engineer he will guide you through this -/ ie. which option is where etc etc.

Will this problem re-occur ? cant say much on this.

Regards
Sachin

Like or Dislike: 1 0

Comment on Disclosure : Router based DNS MITM Attack by Rahul

Rahul — Sat, 28 Jan 2012 17:53:41 +0000

Hi Sachin,
I was also facing the same issue and your post is very useful. I do not understand much of technical jargon but after discussing with MTNL triband support, I have specifed dns server and ip addresses instead of using the “automatic” setting. After doing this the problem seems to be resolved. Also I have changed my router password. I did not understand the point about “telnet” and “DeSOPA the firefox extension”. Basically I need to know if my connection is secure enough to start using credit cards online and if not, what else should I do? Also will this problem reoccur? It would be great if you reply with some simple instructions for a lay person like myself. Also kudos to you for raising this issue !!

Like or Dislike: 0 0