Archive for June 30th, 2007

Our New Favorite Firewall

Posted in mini-reviews, Security Tools, Wired Network Security, Wireless Network Security on June 30th, 2007

We have been testing the Comodo Firewall, and we have found it to be a top quality product. We like the ergonomics and look and feel, the intelligent pop-ups, and the easily customizable options, the automatic setup and best of all, it’s reputation for toughness with the bad guys.

It is our new favorite firewall. We previously recommended the Zone Alarm free edition, but it has fallen further and further in the rankings as Check Point apparently seeks to drive customers to the more profitable products. Zone Alarm Pro still stands near the head of the line. But the free edition is near the bottom of the ratings.

Install the COMODO firewall, Scan for Known Applications and set the security level for Low and you will minimize the pop-ups and be well protected.

The e-Greeting Card Scams

Posted in Email Security, Exploits, Malware, Scams on June 30th, 2007

An new round of malicious e-greeting card spam is landing in in-boxes. It usually has the subject line “You’ve received a postcard from a family member!”

Whatever you do, do not open these spam emails, and do not click on the links.

If you do, you will be taken to a malicious web site that will attempt to install a variant of the Storm Trojan horse.

    “Today’s greeting-card gambit tries a trio of exploits, moving on to the second if the machine is not vulnerable to the first, then on to the third if necessary. The first is an exploit against a QuickTime vulnerability; the second is an attack on the popular WinZip compression utility; and the third, dubbed “the Hail Mary” by the ISC, is an exploit for the WebViewFolderIcon vulnerability in Windows that Microsoft Corp. patched last October.”

Source: ComputerWorld

This demonstrates the importance of updating all software to the latest versions. In this case, QuickTime WinZip and Windows are the targets. Users who have updated to the latest versions are protected.

And of course, it demonstrates the importance of being suspicious of all email that lands in your inbox.

_____________________________________________________________________________________________________________