Saturday, April 8, 2006

The Security Illusion vs Cross-Platform Malware

Yesterday, Viruslist.com reported the existence of a new cross-platform PoC virus. It is a very simple bug and at this point it seems to be a very low risk, but it does show that research in area of cross-platform bugs is alive and well. This isn't the first cross-platform malware and it won't be the last.

We live in a world were no computer or OS is safe. Botnets have been found that only contained Linux and OS X bots. If you think your OS is protecting you from the evil of the virtual world...you are dead wrong.

This is the security illusion - I sometimes call it "security complacency".

Any system is open to attack. Bad guys want your computer to be a node on their botnet....it doesn't matter if you are running Windows 98, Windows 95 or OS X. I saw a Windows 98 yesterday with a bot on it. It was scanning for a load of vulnerable PHP applications, most likely an attempt to spread.

Moral of the Story - Don't have a big head. Every computer user needs to be smart and take steps to protect their data, money and their existence.

No comments:

Post a Comment