boonbox

Web Threats Weekly

 Week of January 8, 2009

Web Threats Weekly helps organizations protect themselves and their customers from known online threats. If you have questions about how to protect your organization, please  contact Boonbox.


A New Year's Message and Invitation From PCIS 

We hope you are starting off the New Year with good cheer and renewed energy. Many organizations are now operating in a challenging environment. It is more important than ever to protect your business and your people from online threats that can hamper or even shut down your operations. 

We resolve to keep doing our best to keep you aware of the latest web threats so you can keep your operations and your customers safe and secure.

PCIS would also like to invite you to the upcoming Vancouver Board of Trade Managers’ Toolbox session, Online Protection: How to secure your business and build consumer trustIt's happening on January 20 at the Fairmont Hotel in downtown Vancouver. 

At this session, PCIS President Vaclav Vincalek will provide essential tips and practical steps you can take to protect your business and customers online. 

For more information or to register, visit the Vancouver Board of Trade website.

In this issue:

* A New Year's Message and Invitation from PCIS

* Hacker Bait 

* Mythbusters Tip #7

* Spam-Alot


Web Threats Weekly is distributed by:

* Pacific Coast Information Systems Ltd.

* Boonbox


* Boonbox IT security resources page


* Subscribe/Unsubscribe Instructions below

Hacker Bait

The latest Hacker Bait list contains technology, automotive and banking sites around the world that have been found to have vulnerabilities that hackers and cyber criminals could exploit. 

Keep in mind that this is not a complete list of all vulnerable sites on the Internet, but only represents websites where vulnerabilities were found within the past 90 days.

These are only the latest additions to an ever-growing club of sites found to be insecure according to various public sources and online tools used in the web security industry.

If you would like more information on our data and why these sites are listed here, please contact Boonbox

Hacker Bait Sites With Vulnerabilities Discovered in Past 90 Days

www.t-mobile.com

developers.facebook.com

digital-lifestyle.aol.com

support.citrix.com

www.adobe.com

www.cnet.com

www.facebook.com

store.apple.com

webdev.ilo.org

www.networkworldpartners.com

site.aol.com

cws.internet.com

www.toyota.com.ar

www.atv.com.tr

www.bmw.com.cn

www.honda.it

www.audi.com.cy

www.bank.gov.ua

www.centralbankmalta.org

econ.worldbank.org


Mythbusters Tip #7

“I can just get a quick scan and a security seal of approval for a few hundred bucks and my website visitors will be safe. It's not a big deal.”

If only this were true. There are plenty of vendors advertising that they can ensure your website is protected and can publicize the fact with an attractive button. But as with so many things, you get what you pay for. In this case, the nice button may not mean much in terms of security.

It's good to be leery of promotions that suggest you can have web security for far less than what it would normally cost IT consultants to do an initial web security assessment. Do your due dilligence and invest in a real solution, not something that may only give a false sense of security.


Spam-Alot

Spammers are linking to blogs, profiles and other pages on these trusted sites to give victims a false sense of security that the links can be followed safely. These sites may not have been hacked, but following the spam links to these sites and clicking on links shown there can result in harm to your computer.

If you would like more information on our data and why these sites are listed here, please contact Boonbox

Spam-Alot Websites Exploited Since Dec. 18, 2009

we-help-u.biz

thriftytours.com

singapore.net

msn.com

verizon.com

zipolite.com

Boonbox and Pacific Coast Information Systems Ltd.

Boonbox is a division of Pacific Coast Information Systems Ltd., specializing in products for web security, network security, password management and data backup.

PCIS is a Vancouver-based company which provides strategic consulting, application development, technology solutions and managed services to companies and government organizations throughout North America.

HOW TO SUBSCRIBE/UNSUBSCRIBE

SUBSCRIBE: To subscribe to Web Threats Weekly, send a blank email message with subject line "SUBSCRIBE" to informer@pcis.com

UNSUBSCRIBE: If you do not wish to receive future issues of Web Threats Weekly, send a blank email with subject line "UNSUBSCRIBE" to:informer@pcis.com and we will promptly remove you from our distribution list.

WE WANT YOUR FEEDBACK

Our purpose for providing this free service is to keep our clients and business contacts informed of technology developments. This information can help them resolve common problems and achieve their full potential by strengthening their business processes and infrastructure. Your input is important to us and we welcome your ideas for new features and how we can continue to improve our service to you. Send your comments and suggestions to informer@pcis.com or contact us directly at 604.844.7558

 

Copyright © 2009 Pacific Coast Information Systems