Introduction
Major events, happenings and in general all kind of things that create much notice, also leave in their wake a stream of malicious software. The malware writers and phishers are imaginative in their use of natural disasters, rock stars' various activities and sport stars's variouis activities, as stepping-stones for propagation of their programs.
The clever reader has long time ago figured out where this leads...
Christmas holiday is a recurring event with some characteristics
Christmas indeed arrives each year. So does a flow of malicious software, which uses the Christmas holiday as a trigger to trick people into opening program files and clicking on links. Thus the themes are often Christmas related. The malware author's the intent is usually to get your money into her possession.
The days around Christmas and the New Year are also a time when more vulnerable computers than usual are available on the Internet. One very popular Christmas gift is a new computer, and the eager recipient of course wants to connect his new computer to the Internet and start surfing/gaming/etc as soon as possible. However, that may not be the wisest thing to do without precautions.
Holiday recommendations
Before you connect your computer to the Internet you should check that it is set up with a firewall and protection against malicious software (antivirus/antispyware protection). If this type of software is not installed, the first action after connecting to the Internet should be to acquire and install such programs.
When a PC is sold to an end user, it is most likely not updated with the latest available security patches to operating systems and applications. E.g. Microsoft will release its monthly security patches for vulnerabilities in operating systems an applications 8th December. Other program vendors' updates may be published even closer to Christmas.
Immediately after connecting to the Internet (you are a multitasking person and can do this at the same time as you are getting the security software), it is therefore imperative to arrange for your computer to download the latest security updates that are available to your installed software.
Information about vulnerabilities that have no patches may also be published. Exploit code that utilizes these vulnerabilities will often be publicly available on the Internet, and malicious programs based on this may be developed. New malware often emerges before patches are available. It is therefore important that you keep your security software - antivirus, antispyware etc. - updated through the holiday. Neither criminals nor security companies stop their activity during the holiday.
A newer browser
Browsers are among the most popular applications that exist. They are therefore also the target for criminals that want to exploit vulnerabilities in applications, as shown in our security article earlier this autumn: Software most susceptible to successful attacks.
Newer versions of the browsers aim to increase functionality and speed, and increasingly also security. It is therefore scary to check the browser statistics, for example from NetApplication's web site or from W3Counter. These statistics show that obsolete browsers like Internet Explorer version 6 and to some extent Firefox version 3.0 are still used by a vast number of Internet users.
Microsoft has even created a video, available from YouTube, which focuses on the fact that Internet Explorer version 8 is safer to use for online shopping.
You are therefore well off if you check if you are running the latest browser version, and if you are not, get the new version. The latest versions of some popular browsers are as of this writing available from the following links:
- Mozilla Firefox (version 3.5)
- Microsoft Internet Explorer (version 8)
- Google Chrome (version 3)
- Opera (version 10)
- Apple Safari (version 4)
Social networks
2009 has been a year when social networking has emerged as a main target focused upon by malicious software and persons. Norman has written several security articles with topics related to social networking. Some of these articles are available from the links below. Regardless of whether you are a new participant in social networking or an experienced user, you may well use some leisure time during the days off to read these articles.
- Social networks - a criminal's best friend or her enemy?
- HELLO! My house is ready for burglars
- Do birds speak the truth?
- Malicious identity production
Best wishes
Norman hopes that our customers, partners, and the Internet community in general, do not suffer from malware incidents in the weeks to come, and wishes you all A Merry Christmas and all the best for A Prosperous Year in 2010.
