McAfee

Mozilla blocks ScriptScan Add On

by certifiedbug on October 5, 2011

in Browser

McAfee ScriptScan has been blocked for your protection.

Why was it blocked?
This add-on causes a high volume of crashes.
Who is affected?
Users of McAfee ScriptScan versions 14.4.0 and below for all versions of Firefox and SeaMonkey.
What does this mean?

Users are strongly encouraged to disable the problematic add-on or plugin, but may choose to continue using it if they accept the risks described.

https://addons.mozilla.org/en-US/firefox/blocked/i42

Surfing to the “Add-ons Blocklist” page one is greeted with,

This article is no longer maintained, so its content might be out of date.

Just saying… ;-)

{ 0 comments }

Operation Shady RAT

by certifiedbug on August 3, 2011

in Internet Security

McAfee Labs
Dmitri Alperovitch
Vice President, Threat Research

Download the PDF version of Operation Shady RAT report

Having investigated intrusions such as Operation Aurora and Night Dragon (systemic long-term compromise of Western oil and gas industry), as well as numerous others that have not been disclosed publicly, I am convinced that every company in every conceivable industry with significant size and valuable intellectual property and trade secrets has been compromised (or will be shortly), with the great majority of the victims rarely discovering the intrusion or its impact. In fact, I divide the entire set of Fortune Global 2000 firms into two categories: those that know they’ve been compromised and those that don’t yet know.

Yet, the public (and often the industry) understanding of this significant national security threat is largely minimal due to the very limited number of voluntary disclosures by victims of intrusion activity compared to the actual number of compromises that take place. With the goal of raising the level of public awareness today we are publishing the most comprehensive analysis ever revealed of victim profiles from a five year targeted operation by one specific actor?—?Operation Shady RAT, as I have named it at McAfee (RAT is a common acronym in the industry which stands for Remote Access Tool).

http://blogs.mcafee.com/mcafee-labs/revealed-operation-shady-rat

http://nakedsecurity.sophos.com/2011/08/03/shady-rat-biggest-cyber-attack/?

Update

Sunbelt Blog
Alex Eckelberry
Thursday, August 04, 2011

Here’s another thing that’s scary about Shady RAT

A lot of chatter and breathless reporting about Shady RAT. All the makings of an epically awesome story — the US is being taken down by Chinese interlopers to the nastiest degree, installing keyloggers and other badness on US government computers.

Whatever. Who the heck knows how bad this thing really is (and I am not the only skeptic).

But here’s what’s of concern to a lot of security researchers I deal with: It was known by McAfee (and certainly others) but no one apparently ever did anything to take the C&C down, even after knowing about it for months.

http://sunbeltblog.blogspot.com/2011/08/here-another-thing-that-scary-about.html

{ 0 comments }

McAfee-How I became a Zombie

by certifiedbug on June 23, 2011

in Internet Security

Botnets Demystified and Simplified

Let’s face it: Most people–even folks in the security industry–have a hard time explaining botnets (robot networks of infected computers) in a way that your Uncle Joe or Aunt Betty can understand. Is it really a big deal? Yes, it is. With the rapid growth in malware and bot infections we’re seeing, it’s important for everyone to get up to speed on this threat vector. So we got colorful and created an “infographic” that, we hope, nails the botnet lifecycle and economics just right–not too technical, not too simple. If you like it, please feel free to repost. It’s issued under a Creative Commons License. You can download the JPG here.

http://blogs.mcafee.com/mcafee-labs/botnets-demystified-and-simplified

{ 0 comments }

Press release
Brussels, 26 January 2011
Mergers: Commission clears Intel’s proposed acquisition of McAfee subject to conditions

The European Commission has approved under the EU Merger Regulation the proposed acquisition of McAfee, a vendor of information technology security, by Intel, both of the US. The approval is conditional upon a set of commitments ensuring fair competition between the parties and their competitors in the field of computer security, a growing concern due to the exponential rise in the number of malware such as viruses. The Commission was concerned that rival IT security products could be excluded from the marketplace given Intel’s strong presence in the world markets for computer chips and chipsets. In particular, the Commission worried about the high likelihood that the merged entity would embed its own security solutions into its chips and chipsets. To alleviate those concerns, Intel committed to ensuring the interoperability of the merged entity’s products with those of competitors.

The US Federal Trade Commission (FTC) approved the acquisition in December.
http://www.h-online.com/security/news/item/FTC-gives-its-blessing-to-Intel-s-acquisition-of-McAfee-1158590.html

{ 0 comments }

McAfee upgrade causing blue screen

September 7, 2010

As reported by members in the McAfee Community Forums, an update produces crashes and blue screens on Windows 7 64 bit systems. https://community.mcafee.com/message/148309#148309 https://community.mcafee.com/message/148342#148342 A user posted that s/he was told it was a known problem but a fix could take three weeks. Apparently this is not a new issue as in May 2010 a [...]

Read the full article →

Intel to Acquire McAfee for approximately $7.68 billion

August 19, 2010

Intel Press Release Intel Corporation has entered into a definitive agreement to acquire McAfee, Inc., through the purchase of all of the company’s common stock at $48 per share in cash, for approximately $7.68 billion. Both boards of directors have unanimously approved the deal, which is expected to close after McAfee shareholder approval, regulatory clearances [...]

Read the full article →

McAfee botched antivirus update shuts down corporate customers

April 21, 2010

SANS Internet Storm Center. Published: 2010-04-21 McAfee’s “DAT” file version 5958 is causing widespread problems with Windows XP SP3. The affected systems will enter a reboot loop and loose all network access. We have individual reports of other versions of Windows being affected as well. However, only particular configurations of these versions appear affected. The [...]

Read the full article →

McAfee’s website vulnerability

May 6, 2009

Dan Goodwin reports, McAfee website visited by plague of security locusts. Eradication proves difficult. McAfee’s website has been has been hit by at least three nasty bugs that left its customers susceptible to phishing and other types of scams. At least one remained unfixed at time of writing, more than 24 hours after it was [...]

Read the full article →

Competitors try to force removal of independent security program

April 7, 2009

Beta News, Security. “It’s hard enough to make a name for yourself as an independent anti-malware company, without competitors demanding your software be uninstalled.” For years, Spybot Search & Destroy has been one of Fileforum’s single most installed pieces of software, with nearly 67 million downloads since 2000 on our sister site alone. It’s one [...]

Read the full article →