DEFINITION - A botnet (also known as a zombie army) is a number of Internet computers that, although their owners are unaware of it, have been set up to forward transmissions (including spam or viruses) to other computers on the Internet. Any such computer is referred to as a zombie - in effect, a computer "robot" or "bot" that serves the wishes of some master spam or virus originator. Most computers compromised in this way are home-based. According to a report from Russian-based Kaspersky Labs, botnets -- not spam, viruses, or worms -- currently pose the biggest threat to the Internet. A report from Symantec came to a similar conclusion.

Computers that are coopted to serve in a zombie army are often those whose owners fail to provide effective firewalls and other safeguards. An increasing number of home users have high speed connections for computers that may be inadequately protected. A zombie or bot is often created through an Internet port that has been left open and through which a small Trojan horse program can be left for future activation. At a certain time, the zombie army "controller" can unleash the effects of the army by sending a single command, possibly from an Internet Relay Channel (IRC) site.

The computers that form a botnet can be programmed to redirect transmissions to a specific computer, such as a Web site that can be closed down by having to handle too much traffic - a distributed denial-of-service (DDoS) attack - or, in the case of spam distribution, to many computers. The motivation for a zombie master who creates a DDoS attack may be to cripple a competitor. The motivation for a zombie master sending spam is in the money to be made. Both of them rely on unprotected computers that can be turned into zombies.

According to the Symantec Internet Security Threat Report, through the first six months of 2006, there were 4,696,903 active botnet computers.

· Malware, Worms, and Trojan Horses: These will continue to spread by email, instant messaging, malicious websites, and infected non-malicious websites. Some websites will automatically download the malware without the user's knowledge or intervention. This is known as a 'drive-by download.' Other methods will require the users to click on a link or button.

· Botnets and Zombies: These threats will continue to proliferate as the attack techniques evolve and become available to a broader audience, with less technical knowledge required to launch successful attacks.  Botnets designed to steal data are improving their encryption capabilities and thus becoming more difficult to detect.

· Scareware -- Fake/Rogue Security Software: There are millions of different versions of malware, with hundreds more being created and used every day. This type of scam can be particularly profitable for cyber criminals, as many users believe the pop-up warnings telling them their system is infected and are lured into downloading and paying for the special software to 'protect' their system.

· Attacks on Client-Side Software: Client-side software vulnerabilities are now an increasingly popular means of attacking systems. Client-side software includes things like Internet browsers, media players, PDF readers, etc. This software will continue to have vulnerabilities and subsequently be targeted by various malwares.

· Ransom Attacks: These occur when a user or company is hit by malware that encrypts their hard drives or they are hit with a Distributed Denial of Service Attack (DDOS) attack. The cyber criminals then notify the user or company that if they pay a small fee, the DDOS attack will stop or the hard drive will be unencrypted. This type of attack has existed for a number of years and is now gaining in popularity.

· Social Network Attacks: Social network attacks will be one of the major sources of attacks in 2011 because of the volume of users and the amount of personal information that is posted. Users' inherent trust in their online friends is what makes these networks a prime target. For example, users may be prompted to follow a link on someone's page, which could bring users to a malicious website.

· Cloud Computing: Cloud computing is a growing trend due to its considerable cost savings opportunities for organizations. Cloud computing refers to a type of computing that relies on sharing computing resources rather than maintaining and supporting local servers. The growing use of cloud computing will make it a prime target for attack.

· Web Applications: There continues to be a large number of websites and online applications developed with inadequate security controls. These security gaps can lead to the compromise of the site and potentially to the site's visitors.

· Budget Cuts: These will be a problem for security personnel and a boon to cyber criminals. With less money to update software, hire personnel, and implement security controls, enterprises will be trying to do more with less. By not having up-to-date software, appropriate security controls or enough personnel to secure and monitor the networks, organizations will be more vulnerable.

What Can I Do?

The following are helpful tips to assist in minimizing risk:

· Properly configure and patch operating systems, browsers, and other software programs.
·
Use and regularly update firewalls, anti-virus, and anti-spyware programs.
·
Be cautious about all communications; think before you click.
·
Use common sense when communicating with users you DO and DO NOT know.
·
Do not open email or related attachments from untrusted sources.

Office of Domestic Security

Florida Department of Law Enforcement
STATEWIDE ALERT

CYBER ALERT


INFO-ALERT: DHS themed domains for ZeuS seeding

The groups behind the ZeuS trojan appear to be getting ready to use DHS themed domains for ZeuS seeding. The following domains were recently created and will probably be used for this next Phishing campaign:

DHSinfo[dot]info, which was created on 09-Mar-2010
DHSorg[dot]org, which was created on 11-Mar-2010
GreyLogic[dot]org, which was created on 11-Mar-2010
GreyLogic[dot]info, which was created on 09-Mar-2010
IntelFusion[dot]org, which was created on 12-Mar-2010
IntelFusion[dot]info, which was created on 08-Mar-2010

It is recommended that those domains be put in your spam filter block lists.

Also, in the coming days be on the look out for emails originating from these domains. Do not click on any links that originate or appear to originate from those domains.

The following best practices are recommended:

(1) Do NOT trust unsolicited email.
(2) Do NOT click links and attachments in unsolicited email messages.
(3) Review antivirus software specific removal guidelines for the malware.
(4) Keep systems up-to-date with the latest patches and antivirus signatures.
(5) Implement URL filtering.
(6) Employ the use of a spam filter.
(7) To educate users about social engineering and phishing attacks, review US-CERT Cyber Security Tip ST04-014, "Avoiding Social Engineering and Phishing Attacks."
(8) Users should refrain from or be administratively prohibited from browsing the Internet using Windows accounts with Administrator level privileges.


For more information:
http://www.us-cert.gov/cas/tips/ST04-014.html <http://www.us-cert.gov/cas/tips/ST04-014.html>


Devin R. King
Office of Information Technology
225.925.6437 || 225.219.7546
This e-mail address is being protected from spambots. You need JavaScript enabled to view it

NOTE:  This alert is intended for government entities in an effort to identify system-related announcements (system exploits, vulnerabilities, virus attacks, etc.).  The information is obtained from several sources including the DHS/US-CERT, SANS and the vendor community.  Office of Information Technology (OIT) security personnel do not validate the information.  In each instance we will attempt to provide a specific address relative to the problem and the corresponding patch or fix.  It is the responsibility of each government entity to determine if these patches or fixes would be applicable to their respective environments.

The CIO's Perspective on Unified Communications

By Gaurav Patil and Hyoun Park
TechNewsWorld
06/26/10 5:00 AM PT

The decentralization and extended nature of business has pushed the need for improved and converged communications. Employees increasingly struggle to collaborate with remote colleagues, and even if these workers have a phone number or email address, these communications technologies are not sufficient to provide a meeting environment that is comparable to face-to-face meetings.

The top pressures and strategic actions identified by Aberdeen's study of Best-in-Class companies indicate that unified communications (UC) must support both internal and external business pressures. Although companies have traditionally used a bifurcated approach of externally-facing contact center and internal-facing telecom deployment for employees or business-driven features versus user-driven features, this approach is increasingly irrelevant as similar communications approaches become relevant both for internal and external users.

In the September 2009 Aberdeen benchmark report, "Delivering Customer Service Via the Contact Center and the Web," the top pressure for improving customer service was identified as the customer demand for faster service issue resolution. To meet this demand, the top strategy implemented by leading achievers is to integrate service data into enterprise applications to increase organization-wide access to customer information. This need to integrate communications and real-time inputs with enterprise applications provides an external justification to improve communications.

However, this same strategy also provides employees with internal communications processes to aid product innovation, marketing, and supply-chain departments. As companies seek to improve ideation, create a targeted messaging focus, or optimize order-to-cash capabilities, this messaging integration allows companies to bring real-time input associated with revenue-producing customers to the rest of the organization.

Business Context for Unified Communications

The UC market has often confused increased functionality with business alignment and productivity. To avoid this confusion, Aberdeen analyzed 299 organizations and identified the top 20 percent of companies that had improved customer satisfaction and workforce efficiency metrics due to communications deployments as "Best-in-Class." These companies were used to benchmark UC implementations that improve productivity and customer satisfaction from those that simply represent technology bloat and employee confusion.

To better understand key strategic concerns, Aberdeen's UC community was asked for the key pressures that drove the need to improve communications.

Increase Responsiveness to Customer Needs

Contact center technologies gained ascendancy as a strategic and revenue-generating component of enterprise communications. As the enterprise saw value in the application integration, multi-channel communications, and enhanced visibility that led to improved customer service and sales, the business case was made to bring these technologies to all employees.

In today's enterprise, employees from many different departments are responsible for helping customers, and every employee represents the branding and strategic message of an organization. Twenty-eight percent of respondents identified customer service as a key task that they performed through unified communications, even though only 3 percent self-identified their business role as customer service. To make sure that every employee is able to deliver on those promises, they must have appropriate communicative and collaborative abilities, many of which have originated in the contact center.

To corroborate the top strategic pressure found in this unified communications research, the March 2010 benchmark report, "Providing a 360-Degree View of the Customer," studied companies with optimal customer service practices. It identified companies that were able to increase customer retention, reduce time to search for customer data, and increase net client value on a year-over-year basis. Companies succeeding in all of these tasks identified the need to create new means of communication with the customer as their top strategic action. Through customer preferences, these top customer service organizations were able to improve key performance metrics that affected top-line growth.

The Need to Manage Decentralized Workforces

The decentralization and extended nature of business has also pushed the need for improved and converged communications. Employees increasingly struggle to collaborate with remote colleagues tasked to support departmental needs or provide key project deliverables. Even if these workers have a phone number or email address, these communications technologies are not sufficient to provide a meeting environment that is comparable to face-to-face meetings.

To truly connect employees and improve workforce productivity, the following technologies were identified by the Best-in-Class as the most important to integrate into a communications environment to gain most value: unified voicemail and email inboxes, simultaneous mobile/desktop ring, a unified number for mobile phone and deskphone, presence, PC-based video conferencing, content sharing, shared content creation, and employee profiles with expertise descriptions.

Note the use of both mobility and integrated desktop technologies in providing additional communications value. Enterprise communications has progressed far beyond the deskphone or cellphone as a stand-alone technology.

As these technologies are delivered to the enterprise, they must be easy-to-use, available on-demand, and integrated with appropriate content management solutions and enterprise applications to provide benefits comparable to physical meetings.

Real-Time Decision Making as a Competitive Advantage

Although many companies focus on the cost of telecom and collaboration, the top companies that improve workforce collaboration and customer service understand that today's business environment never sleeps and always requires real-time analysis and response. Accordingly, these companies have aligned their communications deployments and strategies to accelerate time-to-information, time-to-decision, and time-to-action processes. Best-in-Class organizations design their communications deployments based on processes that affect revenue sources, public branding, and service delivery.

UC solutions are also about simplifying the ease-of-use for employees. By providing employees with the communications tools that they prefer both to get in touch with other people and to receive information, companies can improve internal collaboration, rather than simply installing and federating technologies as a proof of concept. Aberdeen's research found that 40 percent of all respondents indicated that the need for internal collaboration was a key strategy for unified communications.

However, the Best-in-Class respondents differentiated themselves through execution. By targeting appropriate contacts to reduce human latency, better aligning communications channels to the needs of employees, and integrating unified communications with other applications, Best-in-Class companies were able improve customer service by 53 percent, increase workforce productivity by 49 percent, and access desired resources in less than one-sixth the time that Laggards could find expert resources.

As the world shrinks and companies expand their geographical footprint, employees must be empowered to act from any corporate location or any place where business is needed. Integrating enterprise applications into a unified communications deployment may be seen as a tactical behavior, but the ramifications of integrated and unified communications can provide organizations with the tools to help customers, manage the extended enterprise, and make real-time decisions.

Click here to read full article.

Let's Deep-Six Facebook and Do Open Source Social Networking Instead - Con: Steven Bristol

By Richard Adhikari
LinuxInsider
Part of the ECT News Network
06/23/10 7:00 AM PT

"The reason Facebook's having problems with privacy have nothing to do with whether it's centralized or decentralized; it's because Facebook has to make money. Facebook realized that even though it has a large mass of users, if it starts charging people for the service, subscribers will drop off. Facebook has to get money from advertisers or investors."

 

Steven Bristol is a partner and "chief nerd" at Less Everything, a company that focuses on building easy-to-use Ruby on Rail Web apps. The company created LovdbyLess, a free open source social network platform, after getting requests from customers. Users download a copy and are responsible for installing and maintaining the software and their own database of members.

Bristol will offer his own arguments in this LinuxInsider debate series exploring the potential of open source to answer the privacy questions surrounding major social networks.

LinuxInsider: Facebook has been battling users, prominent people in the high-tech field and privacy advocates over the question of privacy for years now, and the problem appears to have intensified. Some people contend Facebook's approach to social networking is part of the problem. Could Facebook's approach be one of the causes of its problems over privacy?

Steven Bristol: The reason Facebook's having problems with privacy have nothing to do with whether it's centralized or decentralized; it's because Facebook has to make money. Facebook realized that even though it has a large mass of users, if it starts charging people for the service, subscribers will drop off.

Facebook has to get money from advertisers or investors; investors will at some point want to get their money back, so Facebook's only real options are advertising or asking for charity.

Facebook got into trouble because it leveraged its subscriber base. But I don't think it could ask for permission to do so, because if you ask people whether they want to see an ad in return for their service, most people would say no.

I think Facebook got into trouble beause it's the first company to be large enough to make money selling user information. But the currency on the Internet is information; this is the future, and I don't see another option.

LIN: Would taking an open distributed approach to social network help Facebook resolve the privacy problems it's having?

Bristol: I don't think the open model actually exists. If you want to connect with those social networks in a distributed model, which doesn't exist today, they have to take a copy of your data in order to work. For example, Google (Nasdaq: GOOG) Social connects you to various social networks, and each of those takes a copy of your data.

Think about open source software. They talk about the software being free, but they mean free as in free liberty and not free as in beer; it's free in that someone's able to take it and do what they want with it, but anyone who runs a company has employees to pay.

The money has to come from somewhere, so the only two real models for business that have emerged anywhere in the world are the ad-supported model and the self-funded model.

LIN: Would the distributed, federated approach be better than the walled garden approach?

Bristol: I think it's the thought that once you're in Facebook or MySpace, going to another social network means starting over again, and in that sense, they're walled gardens. In the real world, what else would it be?

It's not like we have some sort of benevolent dictatorship that has created the best social network for all of its subjects and we're all members of that social network and it's very open; a network where, if someone else decides to make something new and different, all they have to do is click some button and they'd be transported into this magic realm.

Look, Linus Torvalds, who wrote Linux and is still its main developer, works for a foundation. His salary, which is substantial, as I understand it, comes from the support of all kinds of companies donating to the foundation. So the guy who created and wrote the biggest open source software in the history of man gets paid to do it. If you cut off the foundation, he's going to have to go to Apple (Nasdaq: AAPL) or some other company and work on Linux in the evenings.

The bottom line is, everyone has to make income, and you can't get away from that in this world.

LIN: What about something like Diaspora, where users each have a personal Web server that sits on their computers and stores all their information and shares it with friends?

Bristol: It doesn't work at all because the main data is on your computer. Say you and I are friends, we both sign up and friend each other, and when you go offline, I can't send you a message or interact with you online, if it's true that the data only resides on your system.

Even if they do find a way to make it work, there will be lots of data duplication going on because the data will reside on everyone's machine. Also, ultimately, someone has to pay for the electricity for the servers. Who's going to do that -- investors, subscribers or advertisers?

Click here to read the full article

 

JamKo Voice

JamKo Phone Service

The Next Level in Communications

VoIP Poll

Do You Know What VoIP is?

(32 votes)

9.4%   (3)
90.6%   (29)
Loading...

Simple

We Speak To You in English, Not Geek! -TM

Just The Facts - Clear and Simplified