Get Safe Online

Today marks the launch in the UK of the ‘Get Safe Online’ campaign. This campaign, a joint initiative between UK government, the National Hi-Tech Crime Unit and private companies from the world of technology, retail and finance, is designed to raise public awareness about online safety.

The centrepiece of the campaign is the new Get Safe Online web site, full of useful advice for consumers and small businesses on how to protect against Internet threats.

We at Kaspersky Lab heartily support this initiative, since user education is a key element in computer security. Here are some of our pointers for safe computing.

General advice:

• Install & update anti-virus software.
• Install a personal firewall, i.e. firewall software installed locally.
• Backup, backup, backup!
• Apply operating system & application patches.
• Use plain text e-mail instead of HTML.
• Strip executable attachments at the Internet gateway or, for home users, beware of anything attached to an e-mail.
• Use passwords … but not obvious ones.
• Don’t reply to spam e-mail … and don’t use ‘Unsubscribe’ links.

Advice for online transactions.

• Don’t divulge passwords, PINs, etc.
• Don’t fill out e-mail forms.
• Don’t click on e-mail links.
• Look for the padlock symbol in the browser status bar.
• Check bank accounts regularly and report anything suspicious.

Kaspersky researchers have discovered new Mirage Kitten attacks using previously undocumented malware families: NodeRabbit in Node.js and PollCat in JavaScript.

Our experts discovered a new CoolClient backdoor variant with a kernel-mode rootkit driver that hides malicious processes, files, and network connections from security tools and threat analysts.

Kaspersky experts break down a new Armored Likho campaign that poses as a fundraising efforts and delivers a new Still Toolkit aimed at stealing Telegram data and eavesdropping on victims.

Kaspersky researchers reveal previously undocumented malware attributed to Mirage Kitten (UNC1549, Smoke Sandstorm, Nimbus Manticore): NightLedger backdoor, ArcBridge, and BridgeHead tunneling tools.