Non-OS-Dependant Malware
Linked by Thom Holwerda on Fri 15th Dec 2006 20:35 UTC, submitted by anonymous
Privacy, Security, Encryption "All too often people talk about the disadvantages of the Windows operating system: it has too many security flaws, it is not properly patched, it is not security oriented… Until the much talked about Vista system finally reaches our computers, there will still be plenty of time to protest. However, with the new malware dynamic, the idea that malware is restricted to specific operating systems is becoming anachronistic. It no longer matters whether the victim is a home-user or a company employee. It is now irrelevant whether the system administrator is just someone who lives round the corner or a highly qualified IT manager."
E-mail Print r 0   20 Comment(s) http://osne.ws/cwt
Thread beginning with comment 192838
To read all comments associated with this story, please click here.
Malware ?
by kejar31 on Fri 15th Dec 2006 21:46 UTC
kejar31
Member since:
2006-01-08

calling these techniques malware is a stretch. Most of can be handled by snail mail and would net even require a computer.

Reply Score: 2

RE: Malware ?
by Gone fishing on Sat 16th Dec 2006 06:45 in reply to "Malware ?"
Gone fishing Member since:
2006-02-22

I disagree

If you include in your definition of malware harmful digital information, the author has a point, the code he is talking about runs in software (maybe verysoftware) between the users ears. No you couldn’t do this using snail mail because the originator of the scam couldn’t replicate the information quickly enough or cheaply enough to reach sufficient punters – so this is a legitimate computer problem and so worthy of osnews.

I suggest that this problem will help to scupper Vista security.

Inbox - naked lady pics (or similar)
OS – The attachment could contain malicious code or viruses
User – click open
OS- Please add the administrative password if you wish to make these changes to your system
User – adds password
Vista security – poof gone

You think this scenario is unlikely?

Reply Parent Score: 2

RE[2]: Malware ?
by stestagg on Sat 16th Dec 2006 11:43 in reply to "RE: Malware ?"
stestagg Member since:
2006-06-03

No you couldn’t do this using snail mail because the originator of the scam couldn’t replicate the information quickly enough

You use the correct word here, scam. Scams existed before computers, they just didn't have such a large target base.

If you include in your definition of malware harmful digital information

The clue is in the -ware ending. Traditionally, the computer industry has had: software, freeware, shareware, adware and malware. All of these have one thing in common, they are computer programs.

this problem will help to scupper Vista security
(is not a Non-OS-Dependant Malware)

Of course, but then there is no solution to this problem. End users HAVE to be able to run code on their computer, otherwise the computer is just a piece of furniture.
Luckily, as the computer industry is maturing, user education is increasing. Most people nowadays are aware of the dangers of opening unexpected attachments, A/V scanners are a help, but they will never catch 100% of viruses.

This article, according to its own vernacular, is just a piece of nonware. I'm sure that everyone on this site is aware of 419ers and phishing attacks, why tell us about it again?

Reply Parent Score: 1

RE[2]: Malware ?
by StephenBeDoper on Sat 16th Dec 2006 18:33 in reply to "RE: Malware ?"
StephenBeDoper Member since:
2005-07-06

No you couldn’t do this using snail mail because the originator of the scam couldn’t replicate the information quickly enough or cheaply enough to reach sufficient punters

Really? I would beg to differ, having worked at a company where we regularly got faxed 419 scams and various MLM scams.

Reply Parent Score: 2

RE[2]: Malware ?
by Doc Pain on Sat 16th Dec 2006 20:43 in reply to "RE: Malware ?"
Doc Pain Member since:
2006-10-08

"Inbox - naked lady pics (or similar)
OS – The attachment could contain malicious code or viruses
User – click open
OS- Please add the administrative password if you wish to make these changes to your system
User – adds password
Vista security – poof gone

You think this scenario is unlikely?"

The situation you describe seems typical to me. In other posts, asking for transaction PINs and passwords was mentioned. In my optinion such manner is not to be talked about as "malware" as long it doesn't use software others than on the user's PC, for example, if an attachment is installed to replace a standard program by a faked one so that the user doesn't recognize it.

From the article: "The solution, as always, involves security suites that include all the features needed to protect users in a single application: from the classic antivirus to firewalls, or e-mail protection both for Windows and Linux. In this way we can keep users safe as well as their computers."

My dear Mister Fernando de la Cuadra, Panda Software... :-) The solution, as always, involves intelligence and the ability of educated judging that include all the features needed to protect users by adult-like thinking. In this way the users can keep theirselves safe as well as their computers. It's not that complicated, isn't it?

Reply Parent Score: 1