Archive for September 1st, 2009
What initiated this post?
I just had a hack into my own website last week (my situation was more clearly an attack because of the controversial material) posted here (an inconvenience but no major problem). And that of a client that had her business website hacked into on Aug 27th at 7:13pm. Her whole internet business operation is now shut down for repairs. (We can not afford her customers getting infected by malicious scripts of thievery
from an innocent visit just looking for product.
The worst part of it is Google placed an unsafe warning for the world to see when the google bots crawled her site. They reported it as the last 90 days (probably a form response at the sign of trouble) even though it was but 3 days. This kind of problem is a problem no matter what.
Since I am more computer savvy than the average person of course I wondered “HOW THE HELL DID THIS HAPPEN !“.
The phishers and kiddie hackers are ALWAYS busy at work trying to steal something. The most important thing they can steal is your identity.
Their job today is fairly easy because we have become seekers of many kinds of internet entertainment. Games, Social Networks like (Facebook, Twitter and many more). Blogs like this one abound EVERYWHERE. We create a user name and password which opens you up to all kinds of ugly little goodies placed on your computer behind your back.
How does this happen?
The average public is naive.
“Oh its not going to happen to me.”
How do we succumb to these little nasties ?
There is a sucker born every minute we are told … probably true.
So what did I find in my search for the truth?
1. My site immediately sent red flags to the server and the server immediately shut it down … I got a call from the techs who let ME ALONE in to figure out the problem. It was not a WordPress breach it was another test forum software. The solution was simple … dump the test forum … dump the 16 breaches that tried to install but failed into wordpress.
WordPress is a fairly sturdy safe blog (the best I have found so far) … it has a good security to keep unwanted intruders OUT.
My client was NOT SO LUCKY
Whoever attacked her site was not the sharpest tack in the box because instead of simply running a script that inserted their script into her website which was suppose to hide their agenda … it disabled her site completely by destroying what the customer sees.
Not only did it do that it left logs of all they were trying to steal and where it was stored and by whom.
Here are my favorites (all computers I own or build for others run this group at least)
1. Zone Alarm (FREE) firewall only
All you really need here is the basic FREE download
Provides basic two-way firewall protection
Blocks inbound and outbound traffic threats
Makes you invisible to hackers
3. Avira Security Suite and email protector.
Take a look at the video below and see how easily/quickly this occurs to you the consumer right in front of your eyes.
To watch in full screen mode (recommended) click the little 4 corner square in front of the Vimeo word in the lower right corner of the video frame.
How Koobface Propagates | Webroot Threat Blog from Webroot Threat Research on Vimeo.
After testing this may be my newest addition since it is rated #2 to find and destroy malware on your personal PC. I will keep you posted.
In a blog, CBSNews’ Declan McCullagh reports that “Section 431 (a) of the bill says that the IRS must divulge taxpayer identity information, including the filing status, the modified adjusted grow income, the number of dependents, and ‘other information as is prescribed by’ regulation” to the “new Health Choices Commissioner and state health programs.”
And, McCullagh also reports that, under Section 1801(a) “the Social Security Administration can obtain tax return data on anyone who may be eligible for a ‘low-income prescription drug subsidy’ but has not applied for it.”
So the Health Choices Commissioner and anyone in his office, the fifty state health programs and their staffs, and the vast Social Security Administration will all now have access to your personal tax information.
It might as well be published in the newspapers.
Whole story …

