Latest News

8th December 2015

Data Dissonance: Tunecore Breached

If you make music and distribute it via Tunecore, you may well have received a newsletter over the last few days warning of a security breach. Here’s the newsletter email in question: Salient information below, with certain passages bolded by yours truly: We recently discovered suspicious activity on TuneCore’s servers in November, and that on November 17th an individual illegally collected information from our servers. We are actively working with law enforcement to investigate this unlawful act, and we have retained a leading cybersecurity firm to help prevent this from happening again. It’s possible that the attacker may have had access to some of our customer data. The data on the compromised servers that we stored from customers like you included customers’ names, addresses, email addresses, TuneCore account numbers, and protected TuneCore passwords. Although TuneCore passwords were stored in a protected form, it is possible for a determined hacker with sufficient time, using a..

27th November 2015

Steam’s “Exploration Sale” Gamifies Security Settings

I’m always interested in seeing how companies deploy the gamification of security because it’s an easy way to get more people interested in locking things down, and with the launch of Steam’s latest sale they appear to be bringing back an old favourite: rewards for keeping your account secure. As we’ve mentioned in the past, Steam Guard is an additional level of security for your account which means if someone swipes your Steam login, they’d still need to be able to gain access from a trusted device of yours which is probably unlikely to happen, unless they have physical access (in which case you may have bigger problems to worry about). There have been one or two sneaky attempts to get around it in the past, but by and large with Steam Guard enabled you’re pretty much locked down solid. Back in 2012, Steam had their annual Christmas holidays sale and offered daily in-game challenges, alongside some tasks which weren’t game-centric. One of these was the below: I like that one of Ste..

28th July 2015

Malwarebytes Anti-Malware Now Supports Windows 10

It’s that time again, a new operating system emerges from the Microsoft incubator! While many of you might not get to experience Windows 10 just yet or even in the foreseeable future, we want you to know that when you decide to use it, Malwarebytes has got your back. The latest versions of our Malwarebytes products supports Windows 10! And that includes: Malwarebytes Anti-Malware Free Malwarebytes Anti-Malware Premium Malwarebytes Anti-Exploit Free Malwarebytes Anti-Exploit Premium Malwarebytes Anti-Malware for Business Malwarebytes Anti-Exploit for Business Malwarebytes Anti-Malware Remediation Tool Malwarebytes Endpoint Security So one of the first things you should do after setting up your new operating system is to download Malwarebytes Anti-Malware. Trust me, the cyber criminals won’t wait until everyone is comfortable with Windows 10 to start targeting folks using it. To see our CEO Marcin Kleczynski’s forum announcement about this news click here. To download the latest Malw..

20th July 2015

Ashley Madison Compromised, 37 Million Users Left Panicking

In an age where everyone wants to keep their private information…well…private, it seems strange that so many would place very personal details on websites which resemble gigantic emergency flares painting 50 foot “All your dox be here” messages in the sky. Sure enough, something like 34 million people may be waking up today to news of so-called “online cheating site” Ashley Madison being compromised, shortly before jumping on the next plane to [insert tropical paradise here]. The hackers, called The Impact Team, claim their issues with the website are based around charges to delete data. Asking users to pay for data deletion has been around for a while, in various forms – from revenge porn sites to pages which upload criminal “Mugshots” then ask you to pay to remove (often, you’ll find the mugshot simply pops up on a related site asking for more money). Whether there’s more to it than this, it’s too early to say but the hackers demand the site stays offline or customer data is going t..

1st July 2015

New Malwarebytes Anti-Exploit Version Is Out!

We have just released Malwarebytes Anti-Exploit 1.07. This latest version brings in some new features, improvements and bug fixes. Malwarebytes Anti-Exploit uses a combination of one enforcement layer and three protection layers to block attacks. In this version, we have added new mitigation techniques to stop threats earlier during the exploitation phase. Last month, we documented how the top exploit kit (Angler EK) had given up on attempting to exploit users running our software. However, we are not resting on our laurels and still test the exploit kit regardless. In the example below, we are blocking Angler’s Internet Explorer exploit by stopping a malicious VBScript: As more and more Office documents are using Macros to deliver malware – in particular the Dridex banking Trojan – we have also hardened our layer 3 protection which focuses on malicious behaviors (i.e. Microsoft Word wants to run an executable): (Please note that only Malwarebytes Anti-Exploit Premium shields Off..