Showing posts with label attacks. Show all posts
Showing posts with label attacks. Show all posts

Friday, October 4, 2013

McAfee Mobile Security

McAfee's newest mobile security application, McAfee Mobile Security, protects your Android smartphone or tablet from the latest malware threats. Recent Android attacks have affected many Android users. With McAfee Mobile Security, you can protect yourself from attacks that include:

Hidden Device Admin

Android Master Key Exploit

Jay-Z's Magna Carta Holy Grail Fake App

McAfee Mobile Security provides the following features for Android users:

Locate and track device -- If you misplace your device, you can locate it on a map and send a text to prompt its return.

Device alarm/scream

Remote lock and wipe -- If you're device is lost or stolen, you can protect your privacy by remotely deleting your data on your device and SD card.

Backup and restore -- You can backup your data on demand or set your backup process on a specific schedule. Use your backup to restore your data on a new device.

Manage your security in the cloud -- You can manage your mobile security through a web portal or by SMS text using any smartphone or tablet.

Click here to learn more about McAfee Mobile Security, including a review, full list of features, and premium and basic packages.

Tuesday, September 17, 2013

4 Secrets Wireless Hackers Don't Want You to Know

You're using a wireless access point that has encryption so you're safe, right? Wrong! Hackers want you to believe that you are protected so you will remain vulnerable to their attacks. Here are 4 things that wireless hackers hope you won't find out, otherwise they might not be able to break into your network and/or computer:

1. WEP encryption is useless for protecting your wireless network. WEP is easily cracked within minutes and only provides users with a false sense of security.

Even a mediocre hacker can defeat Wired Equivalent Privacy (WEP)-based security in a matter of minutes, making it essentially useless as a protection mechanism. Many people set their wireless routers up years ago and have never bothered to change their wireless encryption from WEP to the newer and stronger WPA2 security. Updating your router to WPA2 is a fairly simple process. Visit your wireless router manufacturer's website for instructions.

2. Using your wireless router's MAC filter to prevent unauthorized devices from joining your network is ineffective and easily defeated.

Every piece of IP-based hardware, whether it's a computer, game system, printer, etc, has a unique hard-coded MAC address in its network interface. Many routers will allow you to permit or deny network access based on a device's MAC address. The wireless router inspects the MAC address of the network device requesting access and compares it your list of permitted or denied MACs. This sounds like a great security mechanism but the problem is that hackers can "spoof" or forge a fake MAC address that matches an approved one. All they need to do is use a wireless packet capture program to sniff (eavesdrop) on the wireless traffic and see which MAC addresses are traversing the network. They can then set their MAC address to match one of that is allowed and join the network.

3. Disabling your wireless router's remote administration feature can be a very effective measure to prevent a hacker from taking over your wireless network.

Many wireless routers have a setting that allows you to administer the router via a wireless connection. This means that you can access all of the routers security settings and other features without having to be on a computer that is plugged into the router using an Ethernet cable. While this is convenient for being able to administer the router remotely, it also provides another point of entry for the hacker to get to your security settings and change them to something a little more hacker friendly. Many people never change the factory default admin passwords to their wireless router which makes things even easier for the hacker. I recommend turning the "allow admin via wireless" feature off so only someone with a physical connection to the network can attempt to administer the wireless router settings.

4. If you use public hotspots you are an easy target for man-in-the-middle and session hijacking attacks.

Hackers can use tools like Firesheep and AirJack to perform "man-in-the-middle" attacks where they insert themselves into the wireless conversation between sender and receiver. Once they have successfully inserted themselves into the line of communications, they can harvest your account passwords, read your e-mail, view your IMs, etc. They can even use tools such as SSL Strip to obtain passwords for secure websites that you visit. I recommend using a commercial VPN service provider to protect all of your traffic when you are using wi-fi networks. Costs range from $7 and up per month. A secure VPN provides an additional layer of security that is extremely difficult to defeat. Unless the hacker is extremely determined they will most likely move on and try an easier target.