Keylogger virus

[MarkB_MI]

More than once I've posted that you shouldn't assume your computer is virus-free just because you don't notice anything out of the ordinary. I've also said the biggest threat is probably from keystroke loggers, which sit in the background and sniff out your passwords and other account details as you type.

For those who doubted this advice, see the CNN article below. Researchers discovered two million stolen passwords on one server. It's reasonable to expect there are a lot more nobody knows about.

More details are at <a href="http://blog.spiderlabs.com/2013/12/look-what-i-found-moar-pony.html">http://blog.spiderlabs.com/2013/12/look-what-i-found-moar-pony.html</a>
2 million stolen passwords

 

[Ultradog MN]

CNN is not a reliable source for news.

 

[MarkB_MI]

CNN's reliability or lack of same is not particularly relevant here. What is relevant is whether or not you choose to believe Trustwave, the IT security firm that reported the stolen passwords and linked them to the Pony keylogger virus.

If you have a report from your chosen propaganda outlet that says keystroke loggers aren't a serious threat to PC users, feel free to share it. Or you can continue to keep your head in the sand. After all, if you can't see a computer virus, it can't hurt you, right?

 

[Cas]

Interesting. How can one protect themselves from this virus?

 

[da.bees]

Rather than critique the source,why not discuss how surfers pick up viruses in the first place?
In order to aquire the virus,must you click a link or attachment within the email or can simply opening an email import a virus?
If my computer has a virus,can yours get it by simple recieving routine data?
And very important,how can the virus get passed your anti-v program.
And a hundred other issues I'm certain others have questions about.

 

[Dieselrider]

Stop using such a vulnerable to attack operating system and you wouldn't have the problems with viruses. Linux rules!

 

[MarkB_MI]

It is quite difficult to completely protect against malware such as this keystroke logger because there are so many potential attack vectors, particularly in Windows. For example, the CIA and Mossad successfully infected Iranian centrifuges with the Stuxnet virus via infected USB drives. This got them onto Windows PCs which weren't connected to the internet. Those PCs infected others through various vulnerabilities and eventually the target (non-Windows) centrifuge controllers.

The simplest solution is to dump Windows. Neither Linux or OSX are immune to infection, but they are several orders of magnitude better than any version of Windows. It's true that the majority of viruses target Windows, both because of the number of targets but also because it's far easier to attack a Windows machine than one running Linux or OSX.

If you don't want to switch, there is another solution: Boot your PC from a Linux "Live" CD or DVD prior to performing any financial transaction or other sensitive business. Knoppix was the first live CD distribution, now all the major Linux distributions such as Ubuntu and Fedora are available as live CDs. As long as the CD image came from a trusted source, you can be reasonably certain it is clean. Malware residing on your PC can't infect a read-only operating system image. Using a live CD is a good idea even for regular Linux users who are particularly paranoid about security.

 

[Dave Sherburne NY]

I just finished reading about this from Kim Komando, computer GURU, She says the same thing and provides this advice/
Kim Komando

 

[dr sportster]

Heard that on the news before work early today. I laughed it off saying to my wife oH no now someone can steal my passwords for my pinstriping site or facebook [which I don't have] . So now that I was a clown not taking this seriously . How bad can this be? I'm not getting the harm it can do .

 

[Duner Wi]

Mark,
A question please, say I boot from a live CD such as Puppy Linux would that be safe from Keyloggers?
I don't know what browser I would use but if available ,use private browsing feature and then do my business on sites with pass words . Does that make any sense or am I just an idiot?
I have multiple computers with XP Pro and I need some sort of a plan come April 8,2014. Thankyou.

 

[Duner Wi]

Mark,
Saw your original message this morning but not time to write . Now I see you answered most/all of what I asked,Sorry.

 

[MarkB_MI]

Well, Doc, if you don't bank online or do anything else where you need to keep a secret password, then I don't suppose you need to worry. Frankly though, I don't know anybody who doesn't have at least one password they really need to keep secret.

 

[MarkB_MI]

Ms. Komando is, in my opinion, a Windows bigot and a bit of a hack. She seems unwilling to lay blame where it rightfully belongs: Microsoft. Nope, it's the fault of the users, who have systems with missing patches and don't have the latest and greatest antivirus software.

 

[MarkB_MI]

You don't actually need to use the private browsing feature of the browser if you're running a live CD. Once you turn off your computer, your history, cookies and anything else in memory is erased.

 

[Duner Wi]

Thank you.!

 

[don t. - 9n180179]

Hi Mark.

Just curious why you think it's a Microsoft problem. Im a mainframe guy, know enough about PC's to me cause problems at times. Im unable to visualize why it's an OS issue vs. virus/spyware issue.

And for the record....I am one who does nothing but forum surf on the net. I know there are people much smarter than me, with nothing better to do than muck with other people for an easy buck.

Thanks...don t. ....

 

[Bret4207]

(quoted from post at 18:46:13 12/05/13) Ms. Komando is, in my opinion, a Windows bigot and a bit of a hack. She seems unwilling to lay blame where it rightfully belongs: Microsoft. Nope, it's the fault of the users, who have systems with missing patches and don't have the latest and greatest antivirus software.

Well, for average people who simply make use of a PC and aren't into the nuts and bolts, or rather who just want the stupid thing to work-PERIOD!- she's a great help, or rather her website is. I would no more know how to install a different OS than I would know how to do brain surgery, and I have no real interest in learning. It baffles me that there are all these hackers out there with nothing better to do than work to destroy what people have.

I understand the easiest way or most common way to get most of these viruses and such is through porn sites. Makes sense to me. Scum hangs with scum.

 

[MarkB_MI]

Don, why do you think spyware isn't an issue on your mainframe? Could it be that it's very difficult to crack the layers of physical and software security that surround a typical mainframe?

Malware exists because it can exist and because it can be very lucrative for those who develop and use it. The only way to make it go away is to make it so difficult to crack into a Windows PC that writing malware becomes unprofitable. We know it's possible to develop an operating system with reasonable security: Linux, BSD and OS/X have all proven that point. Why is Windows so insecure? Because for Microsoft, ease of use trumps security. And until enough of Microsoft's customers leave that it affects the MS bottom line, Microsoft will not change.

Let me suggest an analogy: Suppose you purchase an expensive safe and store your valuables in it. Someone breaks into your house and takes those valuables. You later discover that the burglar was able to open your safe with a bent paper clip. Don't you think you'd be at least a little bit angry at the guy who sold you a defective safe?

 

[don t. - 9n180179]

One reason mainframe is so secure, most people think it"s related to an abacus. How many people know how to play w/an abacus(big grin).

Physical security aside, from a mainframe point of view, the security package is an add on, not part of the OS. Actually, to define userid"s to get access is also an add on, but I digress.

Here"s the rub...if MS made the OS more robust, it would have to be totally automated, allowing updates as they arise. Otherwise, the masses would be like deer in headlights. What"s MS"s ROI for the software update. Without a doubt, it could be done, but I would expect a big price increase which the masses would probably reject.

Thanks.....don t. ....

 

[dr sportster]

It blows being computer ignorant .Next time Im getting a Mac and apparently not Windows. I have to learn more about this. Last unit died from what I was told was a virus. I have a Paypal account for eBay also.

 

[MarkB_MI]

Don, it's been awhile (about 35 years) since I ran a Fortran program on a mainframe, so I'm not very familiar with that world. But I do know that user programs run in a very restricted environment. It would not be possible, for example, for an end user to run a program that intercepts messages from another user's terminal. And the installation of system-level software that would have promiscuous access to terminals is a tightly controlled process.

In the Windows world, however, end users typically can and do install programs that have system level access. Often without even knowing they're doing so! As you suggest, Microsoft has made the calculation that they'll make more money if they stick with their Swiss cheese approach to security than if they lock things down similar to UNIX/Linux/BSD. But just because this is good for Microsoft's bottom line doesn't mean we customers have to go along with it.