Should have used triangulation to find it

from here and here

The Operation Triangulation malware is far from the first malware for the iPhone, but the fact that we've reached the point that we can no longer wait for Apple to take care of such things themselves must really be eating at the old-school Apple fanbois. 

We're still stuck in a position that anti-malware apps can't scan the iPhone directly, though. That's going to make detection much less likely since few are going to go through the aggravation of making a backup so they can scan that.

Trojan Horse shirt

Product Page

Well, it's definitely an eye-catchingly colourful design. I'm sure it will attract attention.

Might as well be twirling your moustache

from here and here

Sometimes you really have to wonder what's going through malware writers' minds when they leave clues like that in their malware. I'm not saying this is what gave them away, but it certainly didn't do them any favours.

Maybe that will get users to stop plugging strange things in

from here and here

I kinda think that if neither malware nor hardware destroying circuitry will stop users from plugging strange USB devices into their computers, explosive charges probably won't stop them either. But I'd certainly love to be proven wrong.

Cyber Security Awareness: Malware & Spear Phishing

Watch on YouTube

Careful where you click and what you plug into your computer. There are all sorts of threats out there.

Not that they can do much about it

found on Imgflip

So there's some novel malware afoot that can embed itself into UEFI. What exactly are we expecting ordinary Windows users to do about it? What can they do about it? Not much, honestly. Their best bet is to not run the installer, but the tools at their disposal to help them avoid that are the same tools they use to avoid launching other malware, so they're probably already doing everything they can, short of deploying an application allow-list (and hoping they don't add the malware to the allowed list).

Pre-Owned

from here and here

Not to make you paranoid about buying used computers, but they probably should be shown at least a little extra care - wipe the drives and install a fresh operating system before they're used.

Phishing Attack

Watch on YouTube

It's not usually viruses, per se, that are in modern phishing attacks. This might be a hold-over from a time when people used the term virus to mean any kind of malicious software. Thankfully people have figured out the proper term for that is must malware.

Too many attack surfaces, not enough hours

from here and here

The idea that you can be secure if you just keep everything up to date ignores how many things need to be kept up to date and how much more difficult it is for some things than others. So when people go around installing malware on routers there's a pretty good chance there won't be anything standing in their way most of the time.

When interests align

from here and here

Advertisers and malware operators are like two peas in a pod. They'll both stuff junk in your inbox to suit their own financial interests without any regard to your wishes. Somehow one is regarded as much worse than the other, though. It's a mystery as to why. One runs their crap on your computer and the other runs their crap in your brain.

Beware Of Malware sticker

Product Page

If you want to make crooks think twice about messing with your unattended laptop (why is it unattended again?), this sticker could do the trick. It's not much of a deterrent, but if there's lower hanging fruit around they may go after that instead.

I Play With Malware sticker

Product Page

Maybe it's just me, but this seems like the kind of sticker which, if it were on your laptop, could keep people away from it if you accidentally left it unattended in the coffee shop. Either that or someone would call the cops.

First time cyber

from here and here

I don't know why I've never heard of cybercrime against a liquor store before, especially since it's such a staple of real-life crime. I know we've already seen it happen to convenience stores.

Turning a $44B social media site into FakeAV

from here and here

Fraudulently reporting sites as malware seems like the kind of scam that should be obviously illegal. I'm not sure how the consequences of his actions haven't caught up to him yet.

Half-assed ransomware

from here and here

If you've ever paid to get your data back and it worked, count yourself lucky. Not every ransomware is that well made, which means some people get ransomware that can't give their files back even after they pay.

Live by the hack, die by the hack

from here and here

Even though the security company that discovered the malware vulnerability aren't publishing it, I have high hopes that people less scrupulous than them will use it to take the criminals down. That's not to say that I don't want the criminals in question to face justice, but rather I have my doubts whether most of them will, and in the absence of legal consequences, the increased cost due to business disruptions could conceivably make the operation less financially viable. Also, if the hack forces them to re-infect people or to infect even more people then that probably will increase their exposure with regards to law enforcement and might be the thing that gets them caught.

Curiosity killed the corporate network

from here and here (USB image source)

I've found USB drives before. I know how strong the sense of curiosity can be, but I also know what can go wrong, and even though Microsoft has tried to make it harder for malware to spread that way, it's still possible - especially with social engineering (and they're already have the advantage of piquing a curious person's interest).

No backsies

from here and here

I'm not going to go into specifics about why this is a desirable outcome, except to say that it makes things easier for the defenders. So by all means, if you're a malware author, keep testing your creations against Virustotal. It's totally good and fine and it warms my heart to learn that some of them are still doing it.

Are you not amazed?

found on Huge LOL

I'm not going to claim all pirated software is full of malware (that always seemed to be little more than a scare tactic), but there definitely was some tainted software out there, and being able to consistently avoid it (while still downloading) required some deliberate care. 

Suddenly, disabling antivirus doesn't seen quite so bad

found on 9Gag

I bet this makes security people rethink their priorities. If I had known you could monetize infected machines this way, I'd be a millionaire right now.