Beware of Seedabutor

http://www.microsoft.com/security/portal/threat/encyclopedia/entry.aspx?name=Trojan%3aJS%2fSeedabutor.B&threatid=2147678632

One of the reasons my database is deteriorating is that I’m at the point of being scared to test stations. I may ultimately have to stop or seriously limit the streaming links as they become a danger to people using the site. Sandboxing a browser is about the only way to protect yourself (search on SandBoxie for one option)

A portion of the reason is that radio stations don’t understand the problem (or care) that when they drop an existing domain name, they shouldn’t just let the domain go, or at least not until a decent amount of time has passed. People who trust your web site will have it bookmarked, and come back later – only to find that your web site was picked up by some hackers in Eastern Europe or Asia and now your listeners are being infected with trojans and virus programs.

my most primitive (and old) tools are not based on Internet Explorer and don’t plugins, java, Flash or any of the other common ways that trojans get onto your system – but Microsoft Security Essentials still spots them trying to get onto the computer and pops up alerts.

I picked up 16 instances of the trojan mentioned above – you’ll notice this thing is only a week old, and the description is keeping all of the known details secret, which probably means no reliable patch exists.

This is the thing that Homeland Security has warned everyone to disable and / or remove Java from your computers.

They’re not kidding.

http://news.cnet.com/8301-1009_3-57563951-83/homeland-security-still-advises-disabling-java-even-after-update/

They’re not “crying wolf”

(Feel free though to ask if this may be payback for the Stuxnet attack on Iran.