Researchers Show How New Viruses Evolve, and in Some Cases, Become Deadly

Researchers at Michigan State University (MSU) have demonstrated how a new virus evolves, shedding light on how easy it can be for diseases to gain dangerous mutations. The findings appear in the current issue of the journal Science.

The scientists showed for the first time how the virus called "Lambda" evolved to find a new way to attack host cells, an innovation that took four mutations to accomplish. This virus infects bacteria, in particular the common E. coli bacterium. Lambda isn't dangerous to humans, but this research demonstrated how viruses evolve complex and potentially deadly new traits, noted Justin Meyer, MSU graduate student, who co-authored the paper with Richard Lenski, MSU Hannah Distinguished Professor of Microbiology and Molecular Genetics.

"We were surprised at first to see Lambda evolve this new function, this ability to attack and enter the cell through a new receptor--and it happened so fast," Meyer said. "But when we re-ran the evolution experiment, we saw the same thing happen over and over."

This paper follows recent news that scientists in the United States and the Netherlands produced a deadly version of bird flu. Even though bird flu is a mere five mutations away from becoming transmissible between humans, it's highly unlikely the virus could naturally obtain all of the beneficial mutations at once. However, it might evolve sequentially, gaining benefits one-by-one, if conditions are favorable at each step, Meyer added.

Through research conducted at BEACON, MSU's National Science Foundation Center for the Study of Evolution in Action, Meyer and his colleagues' ability to duplicate the results implied that adaptation by natural selection, or survival of the fittest, had an important role in the virus' evolution.

Funding for the research was provided in part by NSF and MSU AgBioResearch.

-NSF-

'Scareware' Distributors Targeted

12 Nations Coordinate Anti-Cyber Crime Effort

One of the most widespread types of cyber scam being perpetrated against consumers these days involves “scareware”—those pop-up messages you see on your computer saying you’ve got a virus and all you have to do to get rid of it is buy the antivirus software being advertised.

And if you don’t buy it? The pop-ups continue unabated, and in some instances, the scareware renders all of the information on your computer inaccessible.

But today, the Department of Justice and the FBI announced “Operation Trident Tribunal,” a coordinated, international law enforcement action that disrupted the activities of two international cyber crime rings involved in the sale of scareware. The groups are believed responsible for victimizing more than one million computer users and causing more than $74 million in total losses.

What is Scareware?

Scareware is malicious software that poses as legitimate computer security software and claims to detect a variety of threats on the affected computer that do not actually exist. Users are then informed they must purchase the scareware in order to repair their computers and are barraged with aggressive and disruptive notifications until they supply their credit card number and pay up to $129 for the worthless scareware product.

Scam #1: The FBI’s Seattle office began looking into a scareware scam that ultimately claimed an estimated 960,000 victims who lost a total of $72 million. Investigators discovered a variety of ruses used to infect computers with scareware, including consumers being directed to webpages featuring fake computer scans. Once their computers were infected with the malicious software, victims began being notified by pop-ups that their machines had all sorts of viruses and they should buy the antivirus software being advertised—at a price of up to $129.

Scam #2: The FBI’s Minneapolis office initiated an investigation into an international criminal group using online advertising to spread its scareware product, a tactic known as “malvertising.” According to a federal indictment unsealed today, the two individuals charged created a phony advertising agency and claimed to represent a hotel chain that wanted to purchase online advertising space on a Minneapolis newspaper’s website. After the ad was verified by the paper and posted, the defendants changed the ad’s computer code so that visitors to the site became infected with a malicious software program that launched scareware on their computers. That scheme resulted in losses of about of about $2 million to its victims.

In a true reflection of the international nature of cyber crime, “Trident Tribunal” was the result of significant cooperation among 12 nations: Ukraine, Latvia, Germany, Netherlands, Cyprus, France, Lithuania, Romania, Canada, Sweden, the United Kingdom, and the U.S. So far, the case has resulted in two arrests abroad, along with the seizure of more than 40 computers, servers, and bank accounts. Because of the magnitude of the schemes, law enforcement agencies here and abroad are continuing their investigative efforts.

How to spot scareware on your own computer:

■Scareware pop-ups may look like actual warnings from your system, but upon closer inspection, some elements aren’t fully functional. For instance, to appear authentic, you may see a list of reputable icons—like software companies or security publications—but you can’t click through to go to those actual sites.

■Scareware pop-ups are hard to close, even after clicking on the “Close” or “X” button.

■Fake antivirus products are designed to appear legitimate, with names such as Virus Shield, Antivirus, or VirusRemover. 

And to avoid being victimized, make sure your computer is using legitimate, up-to-date antivirus software, which can help detect and remove fraudulent scareware products.

Highlights:

- More than 1 million victims incurred over $74 million in actual losses;

- Two subjects arrested;

- More than 40 computers, servers, and bank accounts seized;

- 12 countries participating, including United States, Ukraine, Latvia, Germany, Netherlands, Cyprus, France, Sweden, Lithuania, Romania, Canada, and the United Kingdom

Managed Internet Security Subscriptions: Wave of the Future? (Part 7 of 7)

Although the Internet basically provides a positive and productive experience, cyber-attacks against our personal privacy and security are reaching epidemic proportions. These attacks are occurring in our own homes and businesses. Our own computers are being used are being used as zombies to attack other people, businesses, and even our nation itself. As an average Internet user, you may not be aware of these threats nor have any idea about the dramatically increasing risks you face when connected to the Internet.

The business opportunities are enormous! Imagine this: As the number of home builders build and sell homes with personal computers as normal fixtures in the home increases, so, too, will the need for professionally managed Internet security services. Therefore, the trend for increased managed Internet security services will continue to point in this direction.

On a campaign for internet safety awareness and protection, my mission is to bring critical awareness to individuals, families, and small business owners, and to provide access to the necessary tools and ongoing expertise to secure your computer and help you stay protected.

I invite you to join the many thousands of others who have tested their computers, discovered these threats are real, and taken the necessary steps to protect their computers, their families, and their businesses.

Now that you have become aware of these issues, I encourage you to share this vital information with your families, friends and communities. Together, we can reach many millions of people and inform them about the threats to their privacy and security, and help them get the protection they desperately need.

Remember: When you say "No!" to hackers and spyware, everyone wins! When you don't, we all lose!

© MMIX, Etienne A. Gibbs, MSW, Internet Safety Advocate and Educator

About the Author:

Etienne A. Gibbs, Internet Security Advocate and Educator, consults with individuals, small business owners, and home-business entrepreneurs regarding online protection against spyware, viruses, hackers, and other pc-disabling cybercrimes. To obtain more information and receive a free evaluation, visit him at www.SayNotoHackersandSpyware.com.

Managed Internet Security Subscriptions: Wave of the Future? (Part 6 of 7)

Of all the Internet users who have anti-virus software on their computers, 85% of them had computers that were subsequently infected with a virus or worm! Have you ever had a virus you couldn't get rid of? Has your computer acted funny or has it slowed way down due to a massive spyware infestation? Then you see and know how dangerous and damaging these threats and risks are!

Unfortunately, for consumers seeking security and privacy protection with brand name solutions will find two extremes - complex systems they cannot afford or properly maintain, or consumer-grade technology that doesn't provide adequate protection. If they do find something that fits their budget, it will likely have only a part of what is needed to truly protect a computer, and it won't include free expert support and a security guarantee.

Caution: Don't be lulled into a false sense of security thinking that the anti-virus software that came with your computer is enough protection. Off the shelf anti-virus software does not always protect you from hackers, spyware, remote access tools, Trojan horses, password crackers, keystroke loggers, identity theft tools, Microsoft security holes, hybrid viruses, and much more. And most people let their anti-virus program expire thereby losing protection from everyday viruses and worms.

To be fully protected, you need:

• at least five layers of overlapping security technologies and services to create a virtual fortress for your PC. Most off-the-shelf and free software offer two, or three at the most, programs. But are they overlapping when they work and when they update?
  
  
• desktop firewall to lock out hackers and other unauthorized intrusions and shield your PC from unauthorized communication both to and from your PC, making your PC virtually invisible to hackers and other intruders randomly scanning the Internet for vulnerable PCs;
  
  
• world-class anti-virus protection, including 24/7 scanning and certification that your incoming and outgoing e-mails attachments are virus-free -- plus scanning of all removable media such as CDs, Zip disks, portable hard drives, and floppies;
  
  
• anti-spyware that continuously monitors, detects, and eliminates all forms of spyware, hacker tools, and malware from your PC including malicious spyware tools, adware, browser hijackers, search hijackers, keyloggers, ghost spammers, remote access tools (RATs), back doors, and many other illegal programs and applications that breach your privacy and security;
  
  
• patch management that will automatically find and fix security holes and other dangerous vulnerabilities in your computer's operating system and software programs that hackers use to break into your computer;
  
  
• security alerts that warns you of brand new viruses, worms, and other security threats as they emerge - including specific recommendations of what to watch out for and how to avoid getting attacked to keep your privacy secured and your PC safe; and to wrap it all together,
  
  
• premium technical support that offers free unlimited expert technical support for any security related problems or issues with options to include online access to Frequently Asked Questions (FAQs), User Guides, Email Support Hotline, and live, expert telephone support by highly trained technicians.

Remember: When you say "No!" to hackers and spyware, everyone wins! When you don't, we all lose!

© MMIX, Etienne A. Gibbs, MSW, Internet Safety Advocate and Educator

About the Author:

Etienne A. Gibbs, Internet Security Advocate and Educator, consults with individuals, small business owners, and home-business entrepreneurs regarding online protection against spyware, viruses, hackers, and other pc-disabling cybercrimes. To obtain more information and receive a free evaluation, visit him atwww.SayNotoHackersandSpyware.com.

Managed Internet Security Subscriptions: Wave of the Future? (Part 5 of 7)

Why would you need a comprehensive security service package?

The Internet-based attacks on your personal privacy and security continue to worsen year after year. The future of Internet security is gloomy and it takes an extremely dedicated and savvy computer user to find the right mix of security programs and stay current with the newest threats. Internet security is not a one-time event. You cannot simply install security software on your PC and then forget about its safety and security, and ultimately, the safety and security of your family, home, and business. Internet safety and security require an ongoing, time-intensive process with a fairly high level of expertise and vigilance.

Why would you need a team of security experts on your side?

Would you want to be an Internet security expert? If you are like most people, you neither want to nor have the time. You don't want to worry about staying current with the latest technologies. You can't possibly keep up with the all the new threats coming at you almost daily because you have better things to do with your time. Instead, most people end up relying on the opinions and recommendations of more knowledgeable friends and family members for their security needs and hope nothing bad happens. But is that the best and safest strategy?

To get maximum protection for your PC, you need an Internet security expert on your side. Better yet, you need a team of experts making sure that you, your family, and your business are always safe and secure. You need to find your own personal team of experts to rely on. If you ever have a security problem, you want a trusted expert you can call for professional answers and solutions without any hassles and extra costs! As time goes on, it will become even more critical than it is today.

The best protection you can have in today's rapidly changing world of cyber-attacks is to have expert support for all your Internet security needs. Hackers will likely always be one step ahead of law enforcement and the security industry itself. Software-based protection alone, as you can see, is not enough anymore.

Remember: When you say "No!" to hackers and spyware, everyone wins! When you don't, we all lose!

© MMIX, Etienne A. Gibbs, MSW, Internet Safety Advocate and Educator

About the Author:

Etienne A. Gibbs, Internet Security Advocate and Educator, consults with individuals, small business owners, and home-business entrepreneurs regarding online protection against spyware, viruses, hackers, and other pc-disabling cybercrimes. To obtain more information and receive a free evaluation, visit him at www.SayNotoHackersandSpyware.com.

Managed Internet Security Subscriptions: Wave of the Future? (Part 4 of 7)

Think about this: You had problems with your computer in the past. Now you want to insure that those little annoying nuisance, pests, threats, and risks from hackers and spyware don't hide in your computer any more. So, you load up your computer with all the free and off-the-shelf security software you can find. Now, as your confidence rises, you think that your computer is as impenetrable as the gold at Fort Knox.

Wrong!!!! You have been fooled into thinking that your computer is fully protected.

Now think about this: With all the options available to you, how do you know which one offers the best protection for you, your family, or your business? Here are some questions you need to consider:

• Are you a trained computer and Internet security expert?
  
  
• Do you know exactly which security software is compatible with your system?
  
  
• Do you have the time to continually research all the latest security technologies?
  
  
• Do you know exactly which software you should install and which ones should not?
  
  
• Once installed, how do you keep the different software programs updated? In fact, how often are they updated: daily? weekly? biweekly? monthly? Are the updates free. And if so, for how long?
  
  
• If you encountered a problem that your installed security software could not fix, or you simply had a question, would you have access to free, live technical support?
  
  
• If not, what would it cost you? Would it be a one-time fee? Would it come with a warranty period? And what would it cost you when the warranty expires?

By now, I'm hoping that you're beginning to see why it is not enough any longer to install off-the-shelf security software. There is a better option! You need a revolutionary full security service package that gives you peace of mind because its software programs work together, its technical support is always live and free, and its comprehensive personal identity theft insurance comes with a recovery service at no additional cost.

Remember: When you say "No!" to hackers and spyware, everyone wins! When you don't, we all lose!

© MMIX, Etienne A. Gibbs, MSW, Internet Safety Advocate and Educator

About the Author:

Etienne A. Gibbs, Internet Security Advocate and Educator, consults with individuals, small business owners, and home-business entrepreneurs regarding online protection against spyware, viruses, hackers, and other pc-disabling cybercrimes. To obtain more information and receive a free evaluation, visit him at www.SayNotoHackersandSpyware.com.

Finally--Twitter blocks malware!

Remember when Forrest Gump said, "Life is like a box of choc'o'lates. You never know what you're gonna' ge'ut"? Well, same goes for the ever-popular Twitter. At least, when it comes to shortened links.

URL-shortening is popular with Twitter users because--well--it's hard enough to make your point in 140 characters, or less. Let alone, add in some outrageously long URL. But, up until now, when you clicked on one of those shortened links, you never knew what you were going to get. What you might have gotten was a browser-full of malware (malicious-software)--that icky code that takes over your computer and makes it do things you didn't want it to do.

So, if you love to click on all those up-to-the-minute Twitter links, today is a good day! Because Twitter is FINALLY scanning for malicious links.

Hallelujah! It's about time! Your turn Facebook.

Via Techie Buzz (http://hazdat.com/289)

---

Jeff Michael Fischbach is a Forensic Technologist specializing in digitally-recorded electronic evidence, electronic tracking and discovery. He has advised law enforcement, foreign government representatives, judges, lawyers and the press. You can read more from Fischbach at HazDat <http://hazdat.com>.

Managed Internet Security Subscriptions: Wave of the Future? (Part 3 of 7)

Someday, just as one buys a subscription to an Internet service provider, a DSL service, and/or telephone service, everyone will purchase a subscription to managed security services to protect themselves from Internet threats.

The social implication seems to indicate that the average person has to:

1. be educated about the attacks, dangers, risks, and threats of the cybercriminals;
2. become familiar with the type of protection services they will have to implement according to their needs; and
3. supervise and train their families about safe surfing, safe sites, and safe software.

On the part of government, the social implications seem to indicate that continued education, legislation, prosecution, are warranted. While for business, it appears that more comprehensive managed Internet security services are what would be required. More of these services need to be made available on a subscription basis.

Soon, the demand for Internet security products and services will reach a frantic pace, and Internet security will become a fundamental part of using a computer. In the future, security-in-a-box will go away, and Internet security services will become a giant industry, much like phone, cable, power, and other utilities. Everyone will have their own personal Internet security service subscription.

Remember: When you say "No!" to hackers and spyware, everyone wins! When you don't, we all lose!

© MMIX, Etienne A. Gibbs, MSW, Internet Safety Advocate and Educator

About the Author:

Etienne A. Gibbs, Internet Security Advocate and Educator, consults with individuals, small business owners, and home-business entrepreneurs regarding online protection against spyware, viruses, hackers, and other pc-disabling cybercrimes. To obtain more information and receive a free evaluation, visit him at www.SayNotoHackersandSpyware.com.

Managed Internet Security Subscriptions: Wave of the Future? (Part 2 of 7)

According to the CERT® Program, part of the Software Engineering Institute (SEI), a federally funded research and development center (FFRDC) sponsored by the U.S. Department of Defense and operated by Carnegie Mellon University, “Organizations must practice strong computer security. CERT is also continuously researching various aspects of computer security that can benefit organizations.”

The primary goals of the CERT program are to ensure that appropriate technology and systems management practices are used to resist attacks on networked systems and to limit damage and ensure continuity of critical services in spite of attacks, accidents, or failures.

The SEI advances software engineering and related disciplines to ensure the development and operation of systems with predictable and improved cost, schedule, and quality. CERT, the home of the well-known CERT Coordination Center, studies security vulnerabilities, research long-term changes in networked systems, and develop information and training to help their clients improve security.

When designing malicious code, attackers often take advantage of vulnerabilities in software. In 2006 alone, the CERT Coordination Center received more than 8,000 reports of vulnerabilities. But many of these vulnerabilities are a result of software defects that could easily have been avoided. Through secure coding initiative, CERT is identifying common programming errors and developing secure coding standards to reduce the number of vulnerabilities introduced into software.

The field of survivable systems engineering explores the current state of systems to identify problems and propose engineering solutions. The work described below focuses on the development lifecycles for both new development and COTS-based systems. It includes analysis of how susceptible these systems are to sophisticated attacks and suggestions for improving the design of systems based on this analysis.

Note: Be certain to download a copy of their pdf-format, 68-page CERT Research 2005 Annual Report. Their URL can be found at the end of this article.

(The Annual Report describes current CERT Research projects in terms of problems addressed, research approaches, expected benefits, accomplishments, and plans. Each project is also summarized and links within project summaries lead to longer project descriptions.)

The current trend seems to indicate that people will continue to seek and purchase concomitant managed security services because they are the best forms of protection available. This level of professional grade technology coupled with a team of security experts available to help with any security problem will continue to grow as protection-sensitive consumer order these services for home and small business computers managed security services are the future of Internet security.

Click here to download the CERT Research 2005 Annual Report as a PDF file.

© MMIX, Etienne A. Gibbs, MSW, Internet Safety Advocate and Educator

About the Author:

Etienne A. Gibbs, Internet Security Advocate and Educator, consults with individuals, small business owners, and home-business entrepreneurs regarding online protection against spyware, viruses, hackers, and other pc-disabling cybercrimes. To obtain more information and receive a free evaluation, visit him at www.SayNotoHackersandSpyware.com.

Managed Internet Security Subscriptions: The Wave of the Future?

It used to be that, if you wanted to surf the Internet, you simply turned on your computer and logged-on to your browser. It was a safe and richly rewarded experience for communicating, educational, entertaining, researching, and shopping purposes. With companies like Yahoo.com and Hotmail.com/MSN.com offering free email accounts, soon everyone under the sun had at least one account. Some have been known to have four or five accounts. Some even had as many as ten different accounts.

As consumer use expanded online, it wasn’t long before the criminal elements found a easy way to make a quick buck with little or no risk of getting caught. Thus, a whole new industry was born. Hackers, the ones looking for a fast and easy buck and the ones looking to make a name for themselves by shutting down computers at major businesses or organizations, thereby creating havoc among all concerned, came into existence. Through their hacking, spamming, phishing, pharming, and keylogging activities, they stole identities, personal and financial information, and simply created an overwhelming annoyance.

The hackers via their devious conduct spawn a new industry: the anti-virus software industry. Thus was born a wealth of major and minor players selling off-the-shelf software to combat the virus attacks, software to combat the spyware, combined software to combat both, and more. Internet service providers soon jumped on the bandwagon and offered their version or a partnered version of the anti- software. In the meanwhile, the hackers always seemed to be two steps ahead – ahead of the industry and ahead of the law enforcement authorities.

Enter a new concept: It is no longer sufficient protection for the consumer, business, or agency to purchase off-the-shelf software packages. Although they are excellent products at what they do, there still remains a void where the hackers are prevailing.

If I may use a fishing analogy: It is no longer safe or productive to go after them with one, two, or more fishing lines that are baited to catch the target or targets they are created to catch. What is needed is more productive approach, a multi-purpose fishing net approach in order to:

• catch the dangers,
  
  
• prevent future attacks,
  
  
• alert when new threats are in existence,
  
  
• be mended and updated daily,
  
  
• become invisible to the preying eyes of the barracudas, and
  
  
• have a team of extremely well trained and proficient net menders.

This fishing net approach is just coming to light for the past 2-3 years. Known as a comprehensive, or managed security services, it is presented to the consumer as a subscription service, similar to subscriptions he would purchase for his Internet access, his telephone, his cable TV, or his daily or weekly newspaper.

(to be continued . . . )

Remember: When you say "No!" to hackers and spyware, everyone wins! When you don't, we all lose!

© MMIX, Etienne A. Gibbs, MSW, Internet Safety Advocate and Educator

About the Author:

Etienne A. Gibbs, an Internet Security Advocate and Educator, consults with individuals, small business owners, and home-business entrepreneurs regarding online protection against spyware, viruses, hackers, and other pc-disabling cybercrimes. To obtain more information and receive a free evaluation, visit him at www.SayNotoHackersandSpyware.com.