Home / Computer virus / Weekly Security Roundup #84: A Midsummer Hacker’s Dream

Weekly Security Roundup #84: A Midsummer Hacker’s Dream

Did you know that identity theft is the second most reported fraud in the US?

In 2015, the number of reports jumped by 47%!

In the U.S. alone, the average annual number of identity fraud victims is around 12 million, with a total financial loss of $26,350,000,000.

Our latest article covers every step that you can take in order to prevent becoming a victim of identity theft.

It’s the kind of threat where it’s better to invest in proactive security measures. Once the damage is done, it may take years to clear your name.

Find out how to prevent identity theft with 20 essential steps.

Now off to the cyber security news of this past week:


Security articles of the week


1. 4 stolen health databases are for sale on the dark web

A cyber attacker takes credit for theft of data on nearly 10 million individuals. They are currently for sale on the dark web, for prices ranging from $96,000 to $490,000 in Bitcoins for each database.


2. Pandora tells users to reset passwords

In the light of the data breaches, music streaming service Pandora advises some of its users to change their passwords.

Not all of them, just users that might have been compromised because of the recent mega-data breaches and reused their passwords on more websites.


3. Google CEO Sundar Pichai’s Quora account was hacked

Cyber attackers breached Google CEO Sundar Pichai’s Quora account and cross-posted to his Twitter profile.

Oculus CEO’s Twitter account also was hacked and the cyber attacker declared himself the new CEO.


4. DDoS attack powered by 25,000 CCTV cameras

Security researchers exposed a new DDoS attack. It was launched against a small business and powered entirely by compromised CCTV units.


5. Zero-Day warning for Microsoft Office 365

Zero-day warning of a ransomware that targets Microsoft Office 365 users.


6. Researcher spots ATM skimmer while on vacation

During his vacation in Vienna, cyber security expert Benjamin Tedesco spotted this ATM skimmer.


7. Live streaming services are the newest front in the war against piracy

“It’s never been easier for Pixar fans to find their favorite animated fish for free. “Finding Dory,” the sequel to 2003’s “Nemo” came out on June 17, and is already quite easy to find (illegally). Alongside the reliable online indexes for pirated videos, like the torrent mega library Pirate Bay and streaming site Solar, live-streaming newcomers like Facebook Live, Periscope, and Meerkat have become another front in the war against piracy.”


8. Stop sharing this Facebook hoax

In case you spotted this Privacy and Permission Notice shared by your Facebook friends, you should know it’s a hoax. Don’t share it and let others know.


9. The threatening evolution of Exploit Kits

A great analysis by the Infosec Institute on one of the most important issues in cyber security today: exploit kits.


10. Guccifer 2.0 FAQ

Hacker Guccifer 2.0 just published an FAQ.


Conclusion


Summer’s here, but that doesn’t mean that cyber criminals went on vacation.

And in this past week we had a little bit of everything: a few data breaches, some hacked accounts, zero-day vulnerabilities, piracy issues, hoaxes, plenty of ransomware attacks and many others cyber threats.

Stick to the basic security steps:

1. Good password habits. That means strong and unique ones. Use password managers and activate two-factor authentication wherever you have the option.

2. Keep your software up to date – from browsers to plug-ins and any kinds of apps. It will help you evade lots of automated cyber attacks this way.

3. Be paranoid. Investigate links before you click on them. Watch out where you share your credentials. Put tape on your laptop.

4. Install as many security layers as possible (here’s how).

5. In case everything else fails, make sure you have a back-up you can count on. Or even two backups.

Keep safe!

Check Also

Win32/Herz.B Trojan Removal Tips

Hi, there. My Norton detected Win32/Herz.B on my computer this morning. And I was told the virus was cleaned by Norton. However, few hours later, warning message and threats report about this virus came onto my screen again. It was so weird! Why did Norton tell me that no virus was on my computer before? And now it is there again! What should I do? How do I get rid of this virus from my computer? Please help!

More Information About Win32/Herz.B Virus

Win32/Herz.B is a new Trojan virus creating to hack Windows computer users. This virus is made by cyber criminals, who can hide in the background by remote and then take control of your computer by using the virus. It aims to infect Windows XP, Windows 10, Windows 8, Windows Vista, Windows 7 and Windows 8.1 and so on. Once your computer gets infected by this Trojan, it will take effect on your system immediately. Once installed, it may monitor your computer and then stop you from browsing the Internet normally. It may change your important system files such as DNS settings, browser settings, registry as well as other crucial program files. Thus, you may set into lots of computer trouble after the installation of this Trojan. You may be readdressed to visit some unknown and unfamiliar website automatically while you are browsing the Internet normally. Nothing is working normal on the infected computer once virus installed. So, you should remove this from your compromised computer once it is detected on your system.

Win32/Herz.B can get into your computer by kinds of ways, such as spam email attachments, junk email, freeware downloads etc. You may get this virus by visiting or clicking on a link or ads on Facebook which is shared by your friends. That’s why we say peer-to-peer file sharing can also be a mean of virus’s distribution. Cyber criminals used to spread this virus through the widely used Internet. Most of you may get this Trojan into your computer at the time while you are watching porn videos or porn content information online, while you are downloading free applications (such as music, videos, PDF files etc.) from unauthorized websites. Once installed, it not only can take the whole control of your computer, but also may perform malicious activities on your computer. If you don’t remove it from your computer in time, you can’t imagine the damage extend virus will do on your computer! Once it installed, it has the ability to disable your antivirus programs and ruin your security system to make your computer lack of protection. So, worm, adware, spyware, related Trojans, and malware may get the chance to get into your computer without barriers. Your computer performance will be decreased by a large extend. You can’t do anything well on the infected computer any more. In one word, once Win32/Herz.B is reported on your computer, it is greatly suggested to get rid of it as soon as possible.

Processing manual removal should have a certain level of computer literacy. If you are not sure how to start or afraid of making any critical damage on the computer system, please open a live chat with YooCare Expert now!

What Will This Trojan Actually Do on Your Computer?

1. Desktop background image and Browser homepage settings are changed. Google, Yahoo Searches are redirected.
2. It may slow down your computer considerably and you will feel like your computer is stuck. This includes opening programs, shutting down your computer, and slow Internet.
3. It is capable to corrupt your windows registry and uses it to deploy annoying pop up ads out of nowhere. You will get many unwanted pop-ups on your computer.

Note: No matter how the virus accesses your PC, users should know that there are no tools can remove this pesky Trojan automatically at this moment, it is suggested users not spend much time in downloading or paying any security software which claims can delete this stubborn virus. It is totally useless. To completely get rid of Win32/Herz.B virus, professional manual guide is needed.

About Trojan Virus Removal:

Currently many computer users had the same experience that this virus couldn’t be removed by any anti-virus applications. So the manual approach is always required to combat this virus. And here is the step-by-step removal guide for all computer users.

1. End the malicious process from Task Manager.
Win32/Herz.B virus is installed,computer user may notice that CPU usage randomly jumps to 100 percent. At any time Windows always has many running processes. A process is an individual task that the computer runs. In general, the more processes, the more work the computer has to do and the slower it will run. If your system’s CPU spike is constant and remain at a constant 90-95%, users should check from Task Manager and see if there is a suspicious process occupying system resources and then end it immediately.

(The name of the virus process can be random.)

Press Ctrl+Shift+Esc to quickly bring up Task Manager Window:

task manager
2. Show hidden files and folders.

Open Folder Options by clicking the Start button, clicking Control Panel, clicking Appearance and Personalization, and then clicking Folder Options.

Click the View tab.

Under Advanced settings, click Show hidden files and folders, uncheck Hide protected operating system files (Recommended) and then click OK.

Folder Options

3. Open Registry entries. Find out the malicious files and entries and then delete all.

Attention: Always be sure to back up your PC before making any changes.

a. Press Windows key + R to open Run box. In the “Open” field, type “regedit” and click the “OK” button.

Run

Then a Registry Editor window will pop up as the following picture shows:

registry editor

b. Search malicious files and registry entries and then remove all of them:

%AllUsersProfile%[random]
%AppData%RoamingMicrosoftWindowsTemplates[random]
%AllUsersProfile%Application Data.exe

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogon[random]
HKEY_LOCAL_MACHINESoftwareMicrosoftWindows NTCurrentVersionTemp

Video Shows You How to Safely Modify Windows Registry Editor:

Conclusion

Win32/Herz.B is a malicious and stubborn Trojan horse virus which is made by cyber criminals aiming to damage the target computer’s system. Once this virus gets into your computer, it will be a great potential threat to your computer security and your personal data. Once installed, it has the ability to monitor your all activities on the infected computer and then collect all the sensitive data (such as credit card information, bank account data etc.) on your computer. As soon as it gets the data, it will transfer it to the remote hackers who may use your data to do illegal activities or steal your money by using special tools they have. How a malicious Trojan virus it is! To protect your computer and avoid financial loss, you must remove Win32/Herz.B virus from your infected computer as early as you can. You should know that no antivirus program can remove this virus completely, but manual removal. If you don’t know how to start first, please don’t hesitate to contact YooCare Expert for further assistance!

Note: Still have trouble in removing this virus? If you don’t want to mess up your whole PC, Please contact YooCare Experts for instant help now.

The post Win32/Herz.B Trojan Removal Tips appeared first on YooCare How-to Guides - YooCare Blog.

Leave a Reply

Your email address will not be published. Required fields are marked *