According To The Researcher - "75% PHP Installations Is Unsafe"

Approximately 75% of the PHP installation is unsafe, so the popular scripting language is one of the most unsafe platforms. That suggests Anthony Ferrara , "developer advocate" at Google. Ferrara had recently written an article about what it means to be a responsible developer.

PHP is one of the most popular programming languages ​​and Google employee also wanted to know how many percent of the plant is safe. He used the statistics W3Techs and correlated that with the versions that are managed by well-known Linux distributions. Users can install PHP namely itself or use the version offered by the Linux distribution used.

Then turns out 78.3% of the PHP installations at least include one or more vulnerabilities, while 21.7% identified as being safe. Ferrara says that the percentage of safe installations still high estimated because installations of PHP 5.4.4 on Debian, which is still supported, can not be distinguished from 5.4.4 installations that are not derived from Debian and are no longer supported. The percentage of 21.7% by Ferrara also described as "optimistic".

"It is totally unacceptable. This means that more than 78% have at least one vulnerability of the PHP installations. Sadly," concludes Ferrara. He calls on everyone to monitor his or her PHP installation. "Do not force people to update. Do not accept" if it works, do not fix it .'... You have the power to change it, so change it. Security is a problem for everyone. What is important is how you handle it. "

The investigation of the Google employee received the necessary attention and he decided to out for other platforms run it, as well as PHP, this time with Fedora and PHP 4.5.34 on Debian 7 were counted. Then it appears that 82.3% of the installations of the Perl programming language is safe. In the case of the Python programming language is about 77.6%. Ultimately, the recount of PHP, which Debian 7 extra is included, a slightly higher percentage of secure PHP installations, namely 25.6%. That would still mean that sure 74.4% of the installations is unsafe.

XP malware allows criminals ATM emptying via SMS

ATM malware infects a Windows XP installation makes it possible for criminals by sending a single SMS message to retrieve the dispenser. Empty It involves the Ploutus malware last October for the first time in Mexico was discovered, but is now active in more countries.

Two weeks after the discovery of a new variant Ploutus was found . This version was translated not only in English but also had a modular architecture. Anti-virus company Symantec has this version further analyzed and discovered that criminals now the ATM to clean out. via sending text messages.

Attack
To attack the ATM criminals first need to have physical access to it. Then the ATM machine booted from a boot CD. This boot CD contains the Ploutus malware that infects the operating system of the ATM during startup. In addition, the virus may be present, the malware also switches off.

After installation, it is possible to activate Ploutus via a special key combination can be spent on command. Money Criminals straw men gave the command to retrieve the money had to share this key. If the straw men knew what could be done with the key they can light up their client, says Symantec.

Ploutus ATM attack overview

Smartphone
To solve this problem, the criminals can also link a smartphone to the ATM. The already installed malware ensures that the criminal can communicate. Using the smartphone with the ATM This avoids key shared. Lake with the straw man The criminal can now send an SMS to the ATM which then spends the money that is being recorded. Straw man by himself The attacks would have been observed. Different places in the world.

Symantec notes that as encrypted hard drives, which installed the malware may occur. Modern ATMs have better security, Older ATMs, however, would run on XP and are therefore more vulnerable. Ploutus example works only on Windows XP. Banks also get the advice to Windows 7 or 8 upgrade. In addition, the BIOS must be locked so that it can not be booted. From other media.

MD5:
488acf3e6ba215edef77fd900e6eb33b
b9f5bd514485fb06da39beff051b9fdc

Virus Total Link:
https://www.virustotal.com/en/file/0106757fac9d10a8e2a22dce5337f404bfa1c44d3cc0c53af3c7539888bc4025/analysis/

https://www.virustotal.com/en/file/34acc4c0b61b5ce0b37c3589f97d1f23e6d84011a241e6f85683ee517ce786f1/analysis/