Webware

A new variant of the Bredolab Trojan horse is attached to a fake "Facebook Password Reset Confirmation" e-mail, security firm MX Labs is reporting.

Some users are receiving the e-mail from "The Facebook Team," according to the security firm. The sender's e-mail address displays "service@facebook.com." In reality, the address and sender were spoofed.

MX Labs found that the e-mail was accompanied by an attachment named, "Facebook_Password_4cf91.zip and includes the file Facebook_Password_4cf91.exe" that, the e-mail claims, contains the user's new Facebook password. The security firm said that the element between the underscore and .zip are randomly chosen letters and numbers for each recipient.

When a user downloads the file, it could wreak havoc on their computer. MX Labs said in a blog post that the Trojan horse Bredolab "executes files from the Internet, such as rogue anti-spyware. To bypass firewalls, it injects its own code into legitimate processes svchost.exe and explorer.exe. Bredolab contains anti-sandbox code (the trojan might quit itself when an external program investigates its actions)." In other words, it's nasty.

Once it makes its way to the user's PC, Bredolab creates "%AppData%\wiaservg.log" and "%Programs%\Startup\isqsys32.exe" in the user's system files. MX Labs said that it also creates two new processes, called "isqsys32.exe" and "svchost.exe."

Another security watchdog, M86 Security, wrote that there's more to the outbreak than Bredolab. After it sneaks its way onto the user's computer, M86 said, Bredolab downloads a bot called Pushdo. The company found that Pushdo immediately starts "spamming out more of these Facebook password reset e-mails."

For its part, Facebook was quick to point out that the e-mail containing the virus wasn't coming from the social network.

"This virus is being distributed through email, not on Facebook," a Facebook spokesperson wrote. "The email is disguised as a Facebook password reset e-mail with an attachment that purportedly contains the new password, but is actually the virus. We're educating users on how to detect this through the Facebook Security Page."

Facebook said that users should be "suspicious of unexpected emails claiming to be from Facebook." The company also said that it will never send users a new password as an attachment.

Those users that have downloaded the file should use anti-malware software to remove it. Click here for a list of security software available from CNET's Download database.

Updated at 1:03 p.m. PDT to include new details from M86 Security.

Mozilla's Thunderbird team has been working on software called Raindrop that aims to unify communications channels such as e-mail, Facebook, and Twitter into a single interface with enough built-in smarts to separate the important messages from the routine.

"E-mail used to house the bulk of the conversations that took place on the internet, but that's no longer the case today. In today's world people use a combination of Twitter, IM, Skype, Facebook, Google Docs, e-mail, etc., to communicate. For many of us this means that we have to keep an eye on an ever-growing number of places we might get new messages," the Raindrop developers said in a blog post about the technology. "We hope to lead and spur the development of extensible applications that help users easily and enjoyably manage their conversations, notifications, and messages across a variety of online services."

A key part of the effort will be to spotlight messages that are important.

"Raindrop intelligently separates the personal messages from the bulk," said developer Bryan Clark. Among other things, it will automatically recognize messages from e-mail lists and from sources such as Facebook or Amazon that send numerous updates, filing them accordingly.

Given Mozilla's two main projects, Firefox and Thunderbird, there's one particular interesting aspect to Raindrop: It's a Web application, not downloadable software. "Our flagship applications will be built entirely for any modern web browser that supports Open Web technologies," the developers said. However, the group expects to support front-end software, including applications for mobile devices, that can use the Web-based service.

The vision has been knocking around Mozilla for some time. David Ascher said in a 2007 interview as he was taking over as chief executive of the Mozilla Messaging subsidiary, "People end up subscribing to more and more channels of communications. It makes it hard to keep track of what's going on if they have to check six different inboxes, search across a variety of systems." He said the group wanted to address the issue.

As of 2:15 p.m. Tuesday e-mail delivery had started to return to normal for some Postini customers, although problems remained.

(Credit: Screenshot by Tom Krazit/CNET)

Some customers of Google's Postini e-mail security product experienced significant problems Tuesday, with reports of hours-long delays in e-mail delivery that are still affecting some customers.

Threads throughout Google's Postini forums spread involving the issue, which seemed to begin overnight on System 7--one of several systems used by the service--and was still affecting some customers as of Tuesday afternoon, although e-mail delivery had resumed for others. Users also reported problems accessing the management consoles used to log into the Postini service, preventing them from understanding exactly what was happening.

Postini, acquired by Google in 2007, offers e-mail security services to businesses. Postini scans all e-mails directed to the networks of its customers for viruses, malware, and spam, passing along the genuine messages to the network once they have been cleared. However, Tuesday it appeared that for a significant portion of the morning, all messages for customers using System 7 were blocked before they reached their destination, and customers could not log into their accounts to see what was going wrong.

A Google representative acknowledged the e-mail delivery delays in a statement. "We're aware of an issue that's causing a delay in mail delivery for some Postini customers in the US, and are working to fix it as quickly as possible. We know how important mail is to our users, so we take issues like this very seriously, and apologize for the inconvenience. We encourage anyone having technical difficulty to visit the Postini support portal at https://www.postini.com/support/support_login.php."

It has not been a good week for the cloud. Hosted applications and services such as Postini were sure to get a second look following the debacle at Microsoft involving the Sidekick and possible data loss.

It's also another example of Google's growing pains with customer support. Google Checkout customers reported significant issues for over a month without any resolution, and angry e-mail administrators on Postini's message boards complained that Google support personnel were very difficult to reach during Tuesday's issues.

Google support technicians promised some Postini customers--who pay between $12 per user per year and $25 per user per year--that their e-mails were not lost, which is at least some good news for customers affected by the problems. But running a business without e-mail in the 21st century is a very difficult thing to do.

Gmail's labs section is full of tools that help advanced users fine-tune the interface of the free Web mail service. What may be more impressive, though, are its tweaks for the not-so-advanced users, the kind who need a little hand-holding to keep them from firing off e-mails while intoxicated, or missives that they didn't mean to send in the first place.

To add to these two features, Google on Tuesday introduced "got the wrong Bob?", a very simple tweak that, based on first names, will give you a subtle nudge if it thinks you're sending an e-mail to someone outside of the group you usually correspond with. The alert shows up just above the subject line and asks "Did you mean: ____ instead of ____?" Clicking that link replaces the wrong e-mail address immediately.

Gmail's new labs feature checks to make sure you're sending that e-mail to the correct person if it senses that you typed in the wrong first name.

(Credit: CNET)

In my testing I got it to work pretty well on family and co-workers, although it misfired a few times on groups of friends with whom I had past group e-mailing history. Obviously the more you send to certain people, the better it should get at identifying the ones who don't fit. However, I think most people aren't bound to get into this kind of trouble with Gmail's contact auto-complete suggestions which are quite good. It shows you the person's full name, and their e-mail address, making it difficult to accidentally select the wrong person. Then again, if you're in a rush, mistakes can most definitely happen.

Hotmail users aren't the only ones who've been hit by a phishing scheme over the past week. Google told BBC News on Tuesday that Gmail users have also been affected by the hackers who posted passwords online.

The problem is far more widespread than was disclosed on Monday, possibly affecting Yahoo and AOL e-mail accounts as well, according to BBC News.

Google described the issue as an "industrywide phishing scheme." BBC News said it has seen two lists posted online with "more than 30,000 names and passwords" from Gmail, Yahoo, AOL, Microsoft's Windows Live Hotmail, and other service providers.

"We recently became aware of an industrywide phishing scheme through which hackers gained user credentials for Web-based mail accounts including Gmail accounts," a Google representative told me in an e-mail.

The representative said that Google immediately "forced passwords resets on the affected accounts."

In an e-mail to CNET, a Google representative said that the company had to reset the passwords on fewer than 500 Gmail accounts so far. However, that figure could change.

Despite Google's and Microsoft's awareness of the problem, it doesn't seem that users are out of the woods just yet. Google's representative told CNET that it will continue to force password resets on any newly affected user accounts.

Like Microsoft, Google was quick to point out to the BBC that the phishing scheme was a "scam to get users to give away their personal information to hackers" and not an internal security issue. It didn't say how users fell victim to the scheme.

Google's admission that Gmail users were affected by the phishing scheme comes on the heels of Microsoft acknowledging that over 10,000 Live Hotmail accounts were compromised by the scam. The passwords apparently first hit the Internet on October 1.

Updated at 9:10 a.m. PDT to include Google's comments.

Although social networking may be seen as a personal-communications alternative to e-mail, those that find themselves on several social-media sites throughout the day generally spend more time reading and writing e-mail messages than those that don't engage in as much social networking, according to a study released on Monday by Nielsen.

After considering the impact social networks have on Web surfers' activities online, Nielsen tested its assumption that "consumption of social media decreases e-mail use" to determine how social networking has impacted e-mail.

To do so, the research firm broke its test population into four groups based on the amount of time they spend consuming social media. The first three groups were labeled low, medium, and high consumers of social media, respectively. The fourth group featured people who didn't use social sites.

Using that data as a framework, Nielsen, which recently partnered with Facebook to gauge user sentiment around the social network's advertising, then examined how often people in those groups used their e-mail programs over the course of a year.

After analyzing the data, Nielsen found that its hypothesis didn't quite hold up. According to the researchers, "it actually appears that social-media use makes people consume e-mail more, not less, as we had originally assumed--particularly for the highest social-media users."

Although the study ended there, researchers said that correlation might be due to "social media sites like Facebook (that) send messages to your in-box every time someone comments on your posting or something you've participated in, and depending on your settings, can send updates on almost every activity." The researchers also believe that the connections people make through social networks cause them to "extend those connections to e-mail, a phone conversation, or even in-person meetings."

Nielsen concluded that the study was simple, and it plans to "take a more robust approach to develop correlations between platforms to understand if this relationship is different across specific demographics and behavioral groups--rather than by levels of consumption."

Nielsen's findings follow on the heels of another study the company announced in March finding that "member communities," like social networks and blogs, are more popular than e-mail.

Updated 5:45 p.m. PDT with more details about e-mail push.

(Credit: Screenshot by Jessica Dolcourt/CNET)

Some of you who have been restlessly awaiting the arrival of Google's official Gmail push solution for mobile phones can relax now. On Tuesday, Google expanded the over-the-air syncing capabilities in its Google Sync service to include Google's e-mail--but only for the iPhone and iPod Touch (version 3.0), and for Windows Mobile phones.

Google Sync began as a beta service to sync Google calendar items and contacts to iPhone, Windows Mobile, and Symbian Series 60 phones. Owners of iPhones, iPod Touches, and Windows Mobile phones can now set it up to include Gmail messages as well.

The phones will receive Google Sync messages through their native e-mail, calendar, and address book apps. Depending on your settings, your phone could vibrate and/or chime to let you know that a new message has come in. Note that Google Sync will not push visual notification boxes to iPhone and iPod Touch interfaces. For that, you'll need third party apps like GPush for iPhone. Instead, it pushes e-mail from the server to the phone, rather than pulls in a list of e-mail messages, a request that the phone's e-mail client makes of the server. Push e-mail is often preferred over "pulled" e-mail for its real-time updates and its lower toll on battery life.

BlackBerry and Nokia Symbian Series 60 users won't have access to pushed Gmail yet, but they can still sync calendar and contact events to the phone's built-in address book and calendar.

To get started, visit m.google.com/sync from your desktop or mobile browser. The step-by-step setup process is best navigated from your computer, and will require you to ultimately configure your phone to sync over the Microsoft Exchange Server.

Related story: Gmail push on iPhone? Meet GPush

The new Facebook friend request.

(Credit: Screenshot by Caroline McCarthy/CNET)

Facebook has quietly changed the way its friend request e-mails look.

Instead of the old, simple text e-mails sent to Facebook users whenever someone wanted to add them as a friend, the new friend request e-mails feature the familiar blue header with the Facebook logo at the top of the message. Below that, the same text, "(Facebook user's name) added you as a friend on Facebook. We need to confirm that you know (the user) in order for you to be friends on Facebook," is featured.

To the right of that message is a small yellow box displaying a link to log-in to your Facebook account. That same theme follows to the bottom of the message where the confirmation link is made available to the recipient.

Perhaps most importantly, the e-mail also includes a thumbnail image of the user's profile picture. No images were featured in the old version, which made it difficult to determine who the person was without going to their Facebook profile. Assuming the person requesting the connection has a profile picture, the recipient will now be able to immediately figure out who that person is.

It's a minor graphical change, but one that will be considered an upgrade by most. Facebook did not immediately respond to requests for comment on the change.

Check out the old friend request design below.

The old Facebook e-mail.

(Credit: Screenshot by Don Reisinger/CNET)

Communication organization tool Gist is opening up to everyone on Tuesday, and has come a long way since we profiled its private beta offering back in January. It can still plug into your Gmail, Outlook and LinkedIn accounts and help organize things like personal information, appointments and past correspondence. But since then it's added other sources like Salesforce, Facebook, and Twitter. In fact, the company says it's Twitter's third largest API partner, pulling in all of its users' contacts' tweets in real time.

All of this information is funneled into Gist's dashboard, which now lets you tag contacts to make groups of people you regularly follow. It also lets you filter how much of a contact's timeline you want to see from the last 24 hours, all the way to the last three months. This can help cut down on some of the noise as well as give you a broader overview of what they've been up to, something you can tweak further by turning on and off what kinds of content sources you want to see.

Despite removing the private registration, Gist will remain in beta and free of charge, although a paid subscription service is on the horizon. This will be aimed less at casual users looking to track information about friends and more for business users who want to get quick (or detailed) news flybys of contacts and clients before an important meeting--kind of like what a good personal assistant would offer.

Previously: Gist hopes to solve your e-mail overload woes

Gist gives you a quick look back at your correspondence with someone, as well as incoming news and social feeds from them.

(Credit: CNET)