ie8 fix

Finjan

Finjan sues McAfee, Symantec over patents

Former security company Finjan has filed a lawsuit against five companies--McAfee, Symantec, Webroot Software, Websense, and Sophos--claiming they are in violation of its patents.

Finjan is asking for financial damages and an injunction to stop the five security companies from selling software allegedly tied to the patents.

The lawsuit, filed Monday in U.S. District Court for the District of Delaware, targets two patents.

The first, Patent No. 6,092,194, is for a "system and method for protecting a computer and a network from hostile downloadables" and covers both an interface and a security policy to determine … Read more

Security firm M86 acquires Finjan

The security industry consolidation continues.

Web and e-mail security provider M86 Security was set to announce on Tuesday the acquisition of Finjan.

Finjan brings to the table a secure Web gateway product and software-as-a-service solutions, M86 said in a statement. Under the merger, which is effective immediately, Finjan will maintain a development center and operations in Netanya, Israel.

U.S.-based Finjan SW will remain an independent company to retain its malware detection intellectual property, according to a statement.

M86 was created a year ago with the merger of Marshal and 8e6. In March 2009, the combined company acquired behavioral … Read more

Banking Trojan steals money from under your nose

Researchers at security firm Finjan have discovered details of a new type of banking Trojan horse that doesn't just steal your bank log-in credentials but actually steals money from your account while you are logged in and displays a fake balance.

The bank Trojan, dubbed URLZone, has features designed to thwart fraud detection systems which are triggered by unusual transactions, Yuval Ben-Itzhak, chief technology officer at Finjan, said in an interview Tuesday. For instance, the software is programmed to calculate on-the-fly how much money to steal from an account based on how much money is available.

It exploits a … Read more

Finjan offers free SecureTweets browser plug-in

Updated October 30 at 9:58 a.m. PDT: The software was called SecureTwitter when this article was first published. The name was later changed to SecureTweets and the article has been updated to reflect that.

Finally, there's a tool that can help prevent people from clicking on URLs that appear to come from friends on Twitter and other social media sites but which lead to sites hosting malware.

Web security firm Finjan began offering this week a free browser plug-in dubbed SecureTweets that warns users when they encounter a malicious URL in Twitter, as well as in Gmail, … Read more

'Golden Cash' botnet-leasing network uncovered

Researchers at security firm Finjan said on Wednesday that they have uncovered an underground botnet-leasing network where cyber criminals can pay $5 to $100 to install malware on 1,000 PCs for things like stealing data and sending spam.

The Golden Cash network, dubbed "Your money-making machine" on its home page, sells access to botnets comprised of thousands of compromised PCs to cyber criminals for custom malware spreading jobs, according to issue 2 of the Cybercrime Intelligence Report for 2009.

Here's how it works: a cyber criminal creates a botnet by hiding malicious code in a legitimate … Read more

Finjan finds botnet of 1.9 million infected computers

SAN FRANCISCO--Security firm Finjan has uncovered what it says is one of the largest bot networks controlled by a single cybergang, with 1.9 million infected zombie computers.

The botnet has been in use since February, is hosted in the Ukraine, and is controlled by a gang of six people who are instructing the Windows XP-based machines to copy files, record keystrokes, send spam, and take screenshots, Ophir Shalitin, Finjan marketing director, said in an interview on the eve of the RSA security conference.

The gang has compromised computers in 77 government-owned domains in the U.S. and elsewhere, he … Read more

Report: Rogue antivirus software pays off for scammers

Updated March 23, 5:03 a.m. PDT with a link to the new Cybercrime Intelligence Report.

Online scammers are making a lucrative business out of redirecting visitors from legitimate Web sites to sites that try install rogue antivirus software, according to a report due to be released by security firm Finjan on Monday.

Finjan's Malicious Code Research Center came across a traffic management server in Ukraine used by underground online scammers to keep track of how many redirects their rogue antivirus sites get from legitimate sites that have been compromised.

Typically, rogue antivirus software displays a message saying … Read more

Security firm Finjan raises $22 million

Finjan, which sells Web gateway security software to the corporate market, announced Wednesday a $22 million investment round.

HarbourVest Partners led the round, which also includes Benchmark Capital, Israel Seed Partners, Benhamou Global Ventures, and Cisco Systems.

San Jose, Calif.-based Finjan said it plans to expand its sales and marketing infrastructure with the money.

Haute Secure blocks Web threats

New Web threats today come not necessarily from sites built to host malicious content, but also from legitimate sites that have been compromised. A new safe Web surfing product, Haute Secure, is out of beta and available for free home use with both Internet Explorer and Firefox. Founded in 2006 by former Microsoft security engineers, Haute Secure hopes to distinguish itself in a crowded field of products, including Grisoft Linkscanner and Finjan SecureBrowsing.

Haute Secure is a free 32-bit or 64-bit download when used for home use; businesses will be charged to have their Web pages checked for malicious code. … Read more

Evasive Web attacks are on the rise, says Finjan

Criminal hackers are flying well below the radar these days with a new technique that, according to security vendor Finjan, marks a new level of sophistication among criminal hackers. Documenting this trend in its latest Web Security Trends Report, Finjan calls these "evasive attacks" because of their stealth-like quality. First, criminal hackers use a cross-site scripting attack to place an IFrame that calls down malicious code on a popular Web site. That part is not new. What is new is the fact that the end-user is hit with the malicious code only once, making it hard for network … Read more