Free Republic

Chinese security outfit Qihoo 360 Netlab on Wednesday said it has identified Linux backdoor malware that has remained undetected for a number of years.The firm said its bot monitoring system spotted on March 25 a suspicious ELF program that interacted with four command-and-control (C2) domains over the TCP HTTPS port 443 even though the protocol used isn't actually TLS/SSL."A close look at the sample revealed it to be a backdoor targeting Linux X64 systems, a family that has been around for at least three years," Netlab researchers Alex Turing and Hui Wang said in an advisory.An MD5 signature for the...

You probably think your antivirus software can snare corrupt ZIP email attachments. But you'd be dead wrong. Say hello to a newly discovered--and dangerous--quirk in the ZIP file format. When everyone finds out about how this nasty new trait in ZIP file name handling can be exploited, something unseemly is going to hit the fan. Why? Because antivirus scanners can be conned, very simply, by ZIP files with excessively long names. And the code that makes it possible has been copied and incorporated by seemingly every big-name software company under the sun--not to mention its widespread use in security...