Named & shamed!

StopBadware.org, launched in January by Harvard University’s Berkman Centre and the Oxford Internet Institute, is designed to put pressure on purveyors of ‘badware’ programs by ‘naming and shaming’ them. ‘Badware’, according to the organization’s site, is ‘malicious software that tracks your moves online and feeds that information back to shady marketing groups so that they can ambush you with targeted ads’. The project is supported by Google, Sun and Lenovo.

StopBadware.org positions itself as ‘a “Neighbourhood Watch” campaign aimed at fighting badware.’ The project will ‘seek to provide reliable, objective information about downloadable applications in order to help consumers make better choices about what they download onto their computers.’ It also ‘aim[s] to become a central clearinghouse for research on badware and…[those] who spread it, and become a focal point for developing collaborative, community-minded approaches to stopping badware.’

Yesterday StopBadware.org issued its first reports, naming and shaming Kazaa, MediaPipe, SpyAxe and Screensaver.com as applications that ‘contain annoying or objectionable behaviors’.

Kaspersky researchers have discovered new Mirage Kitten attacks using previously undocumented malware families: NodeRabbit in Node.js and PollCat in JavaScript.

Our experts discovered a new CoolClient backdoor variant with a kernel-mode rootkit driver that hides malicious processes, files, and network connections from security tools and threat analysts.

Kaspersky experts break down a new Armored Likho campaign that poses as a fundraising efforts and delivers a new Still Toolkit aimed at stealing Telegram data and eavesdropping on victims.

Kaspersky researchers reveal previously undocumented malware attributed to Mirage Kitten (UNC1549, Smoke Sandstorm, Nimbus Manticore): NightLedger backdoor, ArcBridge, and BridgeHead tunneling tools.