Limbo 2 Trojan "guaranteed" to evade security software. It's a phisher's wet dream

fishing_rod.jpg

Watch out! There’s a new Trojan in town, guaranteed by its developers to constantly evade the top ten security software products.

The developers of “Limbo 2” customise each version and then sell it online for up to $1,300 a pop. Each version is unique, so it’s very difficult for anti-virus software to get a grip on it.

Once it’s out there, Limbo 2 does what any self-respecting bit of phishing software does — it steals bank details. Trouble is, this one sits on a PC and records a user logging in to a banking web site, and adds spoofed information boxes which asks users to enter more information than usual. Data is then fed back to whoever bought the software…

PayPal advises Safari users to ditch their browser

paypal.png

Ever popular eBay has sent a warning to anyone using the Safari browser to access its PayPal service.

Apparently, because Safari currently lacks any form of “anti-phishing” and Extended Validation measures, it makes it a terrible security threat. Extended Validation is a system which turns the browser’s address bar green if the user is visiting a safe site.

Michael Barrett, PayPal’s chief information security officer, said that, “Apple, unfortunately, is lagging behind what they need to do, to protect their customers. Our recommendation at this point, to our customers, is use Internet Explorer 7 or 8 when it comes out, or Firefox 2 or Firefox 3, or indeed Opera.”