Hackers leverage Obama win for massive malware campaign

Also inside: Once thought safe, WPA Wi-Fi encryption is cracked___________________________________________________________ Computerworld Virus & Vulnerability Roundup November 06, 2008___________________________________________________________***************SPONSOR**************************************Exclusive eBook: Six Project Metrics Every CIO Should Know for Application Delivery SuccessWhile most IT organizations spend their time measuring whether projects are on time or on budget, you can learn how to go well beyond that to get a truer picture of project success. Read this IT executive guide to learn what key data tells you the degree of quality, client satisfaction and how well requirements were met. Include these metrics as part of your overall application delivery management process--and your software projects can’t fail.http://cwflyris.computerworld.com/t/3843858/132809439/149547/0/************************************************************In this issue:* Hackers leverage Obama win for massive malware campaign* Once thought safe, WPA Wi-Fi encryption is cracked* Adobe patches 8 bugs in popular PDF apps* ActiveX bugs pose threat to Vista, Microsoft reports* Three ways Internet crime has changed* Spam surges as Google's CAPTCHA falters* New worm exploits critical Windows bug* Small attack triggered Microsoft's emergency patch, says researcher* IT worker let spammers into ex-employer's servers* A smaller Window for Internet attacksComputerworld Blogs:* Security preparedness will continue under new Administration* No ID required: Inviting voter fraud* Microsoft SIR informs but offends* Find online info on where to voteOTHER RESOURCES_______________Whitepaper: Learn about a real risk to your businesshttp://cwflyris.computerworld.com/t/3843858/132809439/135847/0/White Paper: How to Offer the Strongest SSL Encryption.http://cwflyris.computerworld.com/t/3843858/132809439/142444/0/White Paper: Quick Sizing Guide for SAS Grid Running on HP BladeSystems and EVA Storagehttp://cwflyris.computerworld.com/t/3843858/132809439/143940/0/_________________________________________________________TODAY'S TOP STORIESHackers leverage Obama win for massive malware campaignHackers are using the results of the U.S. presidential election to launch a major malware campaign that aims to trick users into installing a Flash update that actually plants a Trojan horse on unprotected PCs.http://cwflyris.computerworld.com/t/3843858/132809439/149548/2/Once thought safe, WPA Wi-Fi encryption is crackedSecurity researchers say they've developed a way to partially crack the Wi-Fi Protected Access encryption standard used to protect data on many wireless networks.http://cwflyris.computerworld.com/t/3843858/132809439/149549/2/Adobe patches 8 bugs in popular PDF appsAdobe Systems patched its Reader application for the fifth time this year, plugging eight security holes, including one reported to the company more than five months ago.http://cwflyris.computerworld.com/t/3843858/132809439/149550/2/ActiveX bugs pose threat to Vista, Microsoft reportsComputers running Windows Vista are significantly less likely to be infected with attack code than those running Windows XP. But Vista continues to be threatened by Microsoft's own ActiveX browser plug-in technology, according to a report by the company.http://cwflyris.computerworld.com/t/3843858/132809439/149551/2/Three ways Internet crime has changedRather than taking down high-profile networks, today's cybercriminals are quietly taking over vulnerable Web sites as part of an elaborate process in the underground economy.http://cwflyris.computerworld.com/t/3843858/132809439/149552/2/***************SPONSOR**************************************Security and Trust: The Backbone of Doing Business over the InternetEarning the trust of online customers is vital for the success of any company that requires sensitive data to be transferred over the internet. With VeriSign you can put technology in place to help your online business protect customer data and build consumer trust. Learn how with this white paper.http://cwflyris.computerworld.com/t/3843858/132809439/149553/0/************************************************************MORE TOP STORIESSpam surges as Google's CAPTCHA faltersThe spread of CAPTCHA-cracking tools has resulted in a surge of blogging sites such as Google's Blogspot being used to host spam adverts, security vendor MessageLabs reports.http://cwflyris.computerworld.com/t/3843858/132809439/149554/2/New worm exploits critical Windows bugA worm that exploits a bug Microsoft patched in an emergency update 11 days ago is now attacking systems, several security companies and researchers said today.http://cwflyris.computerworld.com/t/3843858/132809439/149555/2/Small attack triggered Microsoft's emergency patch, says researcherThe Trojan horse that prompted Microsoft to issue an emergency patch last month for Windows had infected only 200 or so computers prior to the fix's Oct. 23 release, a security researcher said today.http://cwflyris.computerworld.com/t/3843858/132809439/149556/2/IT worker let spammers into ex-employer's serversAn IT manager who logged onto to his former employer's computer network and opened the e-mail server up to spammers five months after being fired has been sentenced to one year in prison.http://cwflyris.computerworld.com/t/3843858/132809439/149557/2/A smaller Window for Internet attacksWhile Windows has become much more resistant to malware, Microsoft apps have now become the focus of attacks, says research firm Ovum.http://cwflyris.computerworld.com/t/3843858/132809439/149558/2/***************SPONSOR**************************************Storage virtualization has been around for several decades. While technologies have advanced and capabilities have become more sophisticated over time, the motivations for virtualizing resources and the anticipated benefits have remained relatively stable. This paper describes the business motivations for storage virtualization and the benefits it can deliver.http://cwflyris.computerworld.com/t/3843858/132809439/149559/0/************************************************************COMPUTERWORLD BLOGS___________________Security preparedness will continue under new AdministrationAs far as federal departments go, the Department of Homeland Security is so new that it will experience its first presidential transition when the administration takes office.http://cwflyris.computerworld.com/t/3843858/132809439/149560/2/No ID required: Inviting voter fraudThe story on our site titled Election Day: What could possibly go wrong? is all about the technology glitches that could occur today when you go out to vote, and it's part of our extensive coverage of the problems surrounding e-voting. But at least here in Massachusetts, there's a much more fundamental problem with the voting process.http://cwflyris.computerworld.com/t/3843858/132809439/149561/2/Microsoft SIR informs but offendsIn Tuesday's IT Blogwatch, Richi Jennings watches bloggers watch Microsoft's latest Security Intelligence Report. Not to mention the hilarious consequences arising from a misused Out-of-Office auto-reply...http://cwflyris.computerworld.com/t/3843858/132809439/149562/2/Find online info on where to voteThe New York Times has created a helpful online guide to find your polling place and much more.http://cwflyris.computerworld.com/t/3843858/132809439/149563/2/RATE US AT REDDIT_________Join CW at reddit to weigh in on the day's IT news, including top security headlines, with your comments and votes.http://itnews.reddit.comSHARK BAIT OF THE DAY_________Fools go where angels fear to treadAt my work, they decided to open a new division to work with insurance companies. Currently we work with mortgage companies. I was not included in any of the meetings and had no idea any of this was going on. Evidently they setup a sales floor, got phones, made new invoices and started selling this product. But wait -- they have no software or databases to process any of these orders http://cwflyris.computerworld.com/t/3843858/132809439/149543/2/Post your tech tales at http://sharkbait.computerworld.comCOMPUTERWORLD ON TWITTER____________________Are you a Twit? So are we! Follow the Computerworld editors at Twitter to hear what's coming, what's breaking, what's hot, what's not.http://twitter.com/computerworldBEST PLACES TO WORK IN IT 2009__________________________Is your IT department a great place to work? Our 16th annual "Best Places to Work in IT" special report and listing will honor 100 organizations that offer great benefits, salaries and opportunities for training and advancement, as well as interesting projects and a flexible and diverse work environment.Nominate a company today: https://www.computerworld.com/BPnom09N===============================================================RESOURCE CENTERSecuring the Converged Enterprise ILearn how balancing the benefits of convergence against its associated security risks can be tricky.http://newsletter.industrybrains.com/c?2f4;1;7efe2;21d09;57d;2ecf;13bDownload your Free Enterprise IP Telephony eBook!Get your free 96 Page IP Telephony eBook! 11 Chapters on deployment, cost savings, security & more.http://newsletter.industrybrains.com/c?2f4;2;77d9a;20a9a;57d;2ecf;13bEXPERT CNSSI / ICD 503 C&A Training (CONUS OR OCONUS)EXPERT IC CNSS C&A Training (1 day Overview, 3 Day CNSS in-depth, 5 day (SCA Training)). Free quoteshttp://newsletter.industrybrains.com/c?2f4;3;7ea11;21ca5;57d;2ecf;13b