#malware detected

[michealscorneroftheinternet]

[...MALWARE DETECTED...]

[...INSTALLING TEMPORARY ANTIVIRUS...]

[..REBOOTING...]

[faggotyuri]

hello tumblr user faggotyuri. square up im waiting for you in a parking lot somewhere

wait i cant fight cant we just kiss instead

[thangonmyputer]

You guys think Kinito has an intense fear of fire?

[tropicalcontinental]

What if he was human chat (he is human)

[tiredsurvivoronmain]

Guys my tumblr is being weird, I recently did a system restore on my PC and I noticed the Home and Customize icons in the top right are gone...and when I go to someone's blog the like, reblog and follow icons that are usually seen in the top right aren't showing, how do I get them back? ;; Can't even edit a post through my blog (in this format) either...

It's not just for this blog but for all my blogs there's no icons in the top right

Please tell me someone here can help

[digitalmistica]

⚠️ 💻 Upon logging into the TikTok Seller US website, 11 unauthorized files were automatically downloaded to my computer, with Kaspersky identifying two of them as Trojans (file 7 and file 8) Despite notifying TikTok of this issue, they have not taken action. It has been over 3 months since I first reported it, and the problem remains unresolved.

[snickerdoodlesart]

CR and CD's relationship and lore in a nutshell

feel free to ask any questions about these silly guys, or any other ocs for that matter. If there becomes enough of them I'll make their own ask blog.

[stabbingandorbeingstabbed]

if you ever get an email like that again, don’t click on any links in the email! instead, change your email password first, then go to the website the email claims to be from by typing in the address and say you forgot your password. if there’s actually an account under your email address, you’ll get a password recovery email, otherwise you know for sure it’s a phishing attempt. this also makes it so you can access and then close the account yourself if there really is one.

see i know all this and if i had been thinking clearly i would have just deleted it bc it was like. very obviously a spam email i was just very tired and it worked on me bc i panicked :-( and now i haven't been able to sleep even though i'm pretty sure the problem is solved for now but Not 100% sure so i keep sleeping for an hour and waking up to make sure no more emails were sent from my account without my permission and it's freaking me out so bad i feel physically sick

[unichrome]

Google how do I avoid to sound like a conspiracy nutjob when talking about malware to people who aren't involved with malware

[faggotyuri]

DO YOU HAVE ANY THOUGHTS ON LAIN OR ALICE OR THE WIRED I WANT TO HEAR THEM IF YOU DO I REALLY LOVE SEL

HIHIHIHIHI!!!

sorry i just now saw this!!!! i love SEL so much but unfortunately i still need to finish it! but i love it!!! its so cool and describes Me in such a way i cant explain. i first heard of the wired and went OH BOY! and the music is so. oughffhfhhhfh

lain is one of my favorite characters of all time unironically. i love SEL i need to finish it so bad

[agileseen24]

How to check if your computer is being monitored

In today's digital age, the issue of privacy and security is more pressing than ever. Whether you’re a casual user or a professional, understanding if your computer is being monitored is crucial. This guide will delve into the signs of monitoring, tools to detect it, and steps to safeguard your privacy.

Understanding Computer Monitoring

Before diving into the signs and detection methods, it’s essential to understand what computer monitoring entails. Monitoring can involve tracking your online activity, keystrokes, file access, and even webcam usage. This can be done by malicious software (malware), spyware, or legitimate monitoring software used by employers or parents.

Types of Monitoring

Malware and Spyware: These are malicious programs that can be installed without your knowledge. They can track your activities and send data back to an attacker.

Keyloggers: This type of software records keystrokes, capturing sensitive information like passwords and personal messages.

Remote Access Tools (RATs): These tools allow someone to control your computer remotely, monitoring your screen, accessing files, and even using your webcam.

Legitimate Monitoring Software: Often used in corporate environments, this software tracks employee activity for productivity or compliance reasons. While legal, it can still infringe on personal privacy.

Signs That Your Computer May Be Monitored

Recognizing the signs that your computer might be monitored is the first step in protecting yourself.

1. Unusual System Behavior

Slow Performance: If your computer suddenly becomes sluggish, it might be due to monitoring software consuming resources.

Frequent Crashes or Freezes: Unexpected system crashes can indicate underlying issues, including malware.

2. Suspicious Programs

Unknown Applications: Check your installed programs for any unfamiliar applications. Many monitoring tools disguise themselves as legitimate software.

High Resource Usage: Use the Task Manager (Windows) or Activity Monitor (Mac) to look for processes consuming excessive CPU or memory.

3. Network Activity

Unexplained Network Traffic: Use network monitoring tools to check for unusual data being sent or received. High outbound traffic could indicate that data is being transmitted without your consent.

Blocked Ports: Monitoring software often uses specific ports to communicate. If you notice blocked ports that you didn’t configure, it could be a red flag.

4. Webcam and Microphone Behavior

Indicator Light Activation: If your webcam or microphone is being accessed without your knowledge, the indicator light may be on even when you're not using it.

Unexpected Recordings: Check for unusual files that could be recordings made by your microphone or webcam.

5. Browser Behavior

Unusual Browser Extensions: Check for extensions you didn’t install. Some can track your browsing activity.

Unexpected Redirects: Frequent redirects to strange sites or altered search results can indicate tracking.

6. Security Alerts

Antivirus Notifications: If your antivirus software frequently alerts you about threats, it may indicate that monitoring software is present.

Firewall Alerts: Unusual outgoing connection attempts can suggest that an unauthorized program is trying to access the internet.

Tools to Detect Monitoring Software

If you suspect that your computer is being monitored, several tools can help you investigate further.

1. Antivirus and Anti-Malware Software

Using a reliable antivirus or anti-malware program can help detect and remove malicious software. Some popular options include:

Malwarebytes: Excellent for detecting and removing malware and spyware.

Norton: Offers comprehensive protection against various types of threats.

2. Network Monitoring Tools

Tools like Wireshark can help analyze network traffic and identify suspicious activity. You can monitor data packets to see if there are any unexpected connections.

3. Task Manager / Activity Monitor

Regularly check the Task Manager (Windows) or Activity Monitor (Mac) for processes that look unfamiliar or suspicious. Research any questionable applications before taking action.

4. System Scans

Use built-in tools to perform system scans:

Windows Defender: Run a full scan for malware and spyware.

Mac’s Built-in Security Features: Use the Malware Removal Tool for additional scanning.

5. Firewall Monitoring

Make sure your firewall is active and monitor logs for any unusual activity. A firewall can block unauthorized access attempts and alert you to potential threats.

Steps to Protect Your Privacy

If you determine that your computer is being monitored or you want to prevent it from happening, follow these steps to enhance your security.

1. Update Your Software Regularly

Keeping your operating system and all software up-to-date ensures that you have the latest security patches. This reduces vulnerabilities that can be exploited by monitoring tools.

2. Use Strong Passwords

Implement strong, unique passwords for all your accounts and devices. Consider using a password manager to generate and store complex passwords securely.

3. Enable Two-Factor Authentication

Two-factor authentication (2FA) adds an extra layer of security by requiring a second form of verification, making unauthorized access much more difficult.

4. Install a Firewall

Ensure you have a firewall activated, whether it’s built-in (like Windows Firewall) or third-party. This helps control incoming and outgoing network traffic.

5. Be Cautious with Downloads

Avoid downloading software from untrusted sources, as this can introduce malware to your system. Always verify the legitimacy of software before installing it.

6. Regularly Review Permissions

Check application permissions on your device regularly. Revoke access for any apps that do not need to access your camera, microphone, or location.

7. Use a VPN

A Virtual Private Network (VPN) encrypts your internet connection, making it difficult for anyone to monitor your online activities.

8. Educate Yourself

Stay informed about the latest cybersecurity threats and best practices. Knowledge is your best defense against monitoring.

When to Seek Professional Help

If you suspect your computer is being monitored and cannot identify or remove the software yourself, consider seeking professional help. Cybersecurity experts can perform a thorough analysis of your system and provide tailored solutions.

Conclusion

Understanding if your computer is being monitored is vital for protecting your privacy. By recognizing the signs, utilizing detection tools, and implementing security measures, you can safeguard your personal information. Remember, vigilance is key in the ever-evolving landscape of digital security. Stay informed, proactive, and secure in your online presence.

[filehulk]

SpyHunter

SpyHunter is a powerful tool for detecting and removing the latest spyware, trojans, rootkits, ransomware, keyloggers, and other malicious software on Windows PCs. Designed for everyday users, SpyHunter provides an effective solution for identifying and eliminating harmful threats. Developed by Enigma Software, SpyHunter specializes in detecting and removing various forms of malware, such as…

[internett1line]

Enhancing SASE with Network Sandboxing: A Modern Cybersecurity Approach

In the rapidly evolving world of cybersecurity, businesses must adopt robust strategies to defend against increasingly sophisticated threats. One of the most comprehensive and modern approaches is Secure Access Service Edge (SASE), which combines wide area networking (WAN) with cloud-delivered security services. To further strengthen this architecture, integrating network sandboxing can provide…

[jcmarchi]

Here's Why You Should Always Log Out of WordPress

New Post has been published on https://thedigitalinsider.com/heres-why-you-should-always-log-out-of-wordpress/

Here's Why You Should Always Log Out of WordPress

We may think we know WordPress security. But we can’t underestimate the task at hand. It seems that surprises lurk around every corner.

Consider a recent report from the security firm We Watch Your Website, for example. The report claims that 60% of hacked WordPress sites stem from stolen session cookies. I sure didn’t see that one coming.

We know about using strong passwords and setting file permissions. We understand the importance of updating our WordPress installs. We may even use a security plugin or two.

However, even the most security-conscious among us can miss things. That one oversight can lead to a hacked website. And that’s despite taking a bevy of security measures.

Stolen session cookies weren’t on the radar. So, what can we do to prevent this from happening? The author of this report has some advice.

How to Prevent Stolen Session Cookies

Thomas J. Raef is the author of “The Real Attack Vector Responsible for 60% of Hacked WordPress Sites in 2023.” His report demonstrates the threat of stolen session cookies in great detail. And a recent appearance on the WP Tavern Jukebox podcast shed more light on the subject.

But what about remedies? How do we stop these attacks from impacting our websites? I asked Raef for some preventative tips. The answer is as simple as logging out.

Our interview was lightly edited for clarity and brevity.

How do session cookies get stolen?

Thomas J. Raef: If it’s not WordPress, they’re frequently stolen via cross-site scripting. However, WordPress uses the HttpOnly option in the headers. So, that prevents cookie theft in WordPress via XSS.

The main way is by info stealers. If you Google the term, you’ll see it’s almost as popular as ransomware. Some ransomware hackers are starting to use info stealers more for their infections. Info stealers are designed to evade detection from most anti-malware programs. Some are dedicated to evading detection on Windows, others on Macs.

They typically steal everything possible in about 10 seconds. Some ask, why would they bother stealing WordPress session cookies if they’re also stealing bank logins, etc. But look at the cybercriminal industry. What do they need for the majority of their attacks? Oh, a legitimate website to infect unsuspecting visitors.

They steal the session cookies because it totally bypasses 2FA (Two-Factor Authentication), MFA, etc. because the user is still authenticated. As long as the cookie hasn’t expired.

Raef’s report shows that nearly 60% of hacked WordPress websites were the result of stolen session cookies. Image credit: We Watch Your Website

How can we secure our devices against this type of threat?

TJR: The easiest way is to remember to log out. That’s it! When you log out you expire the cookie. If you just close your browser window, it leaves the cookie active. So, if it’s stolen, it can be used by anyone.

One simple prevention is using SolidWP (Solid Security). Their Trusted Devices feature uses the IP address to generate the session cookie. If it’s stolen, it can’t be used anywhere other than where it was originally created. Those two things are the best way to prevent session cookies from being used against your sites.

Are there any changes the WordPress project could take to increase the security of session cookies?

TJR: Possibly. If there was a procedure that checked for inactivity after 30 minutes, and then automatically logged out the user, that might help. But I believe that would involve JavaScript and that’s getting too complicated. They already include the HttpOnly option, so they’re doing a lot to prevent this from being even bigger.

Do you have any other advice for web designers managing WordPress sites?

TJR: Make sure that everyone with admin access to your site is also focused on sanitary procedures for all local devices. We’re seeing more and more sites being infected due to malware on the local device of an admin. It can steal usernames, passwords, and session cookies.

2FA can stop the usage of username and password, but not session cookies. Tell all devs to log out! It’s quite simple and 100% effective.

One thing we’re starting to see more of is hackers attacking from the local device. Not stealing session cookies or anything else, just piggybacking on a legitimate admin session.

We see the legit IP address of an admin, and they’re doing their work and then suddenly from the same IP address at the same time, the legit admin is working – BAM! – a bogus plugin is installed from the same IP address!

The hackers have control over the local device and they’re attacking from that device. This supports the fact that you MUST be concerned about the health and well-being of your local devices.

Your Device Is Also a Factor in Website Security

A compromised computer or mobile device can impact your website’s security. On the surface, this theory makes sense. However, we typically don’t hear much about it.

Website security usually means a focus on the site itself. We attempt to filter out malicious traffic. And we employ various methods to prevent direct attacks.

It’s past time to look at our devices as well. You know, the systems we use to log into our websites. Good security should start there.

An info stealer can do untold damage in mere seconds. We won’t know the consequences until it’s too late. Let’s do something about it.

Follow best practices to secure your device – and encourage your clients and colleagues to do the same. A few simple steps could prevent a catastrophe.

And to follow Raef’s advice: Be sure to log out of your website! An expired session cookie is useless. Thus, it can’t do any harm.

Many thanks to Thomas J. Raef for chatting with us! Check out more of his security advice at We Watch Your Website.

Related Topics

Top

[the-name-is-loser]

Why is my laptop so hot when I have it on its head to air out properly and with fans on max