Proactive IT Security
 

Righard Zwienenberg's entries

Righard J. Zwienenberg started dealing with computer viruses in 1988 after encountering the first virus problems on a system at the Technical University of Delft. His interest thus kindled, Zwienenberg has studied virus behaviour and presented solutions and detection schemes ever since. Initially he started as an independent consultant, then in 1991 he co-founded CSE Ltd where he was the Research and Development Manager. In October 1995, Zwienenberg left CSE and one month later he started at the Research and Development department of ESaSS BV - developers of ThunderBYTE - to reinforce the team and have some new challenges in life. In 1998, Norman Data Defense Systems acquired ESaSS and Zwienenberg joined the Norman Development team where he was working on the engine of Norman Virus Control and represented Norman in several cooperation-bodies. In 2005 Zwienenberg took the role of Chief Research Officer at Norman.

After AMTSO was formed, Zwienenberg was chosen as its president.

Zwienenberg has been a member of CARO since late 1992. He is a frequent speaker at conferences - among these Virus Bulletin, EICAR, AVAR, RSA, InfoSec, etc - and seminars. His interests are not limited to viruses but have broadened to include general security issues and encryption technologies over the past years.

His hobbies include Star Trek, Rock & Roll and Rhythm and Blues music, theatre and movies. A few years ago he took up the art of magic again and playing the drums as well.

To the Millions and Millions of people… How not to warn the Millions!   Comment [0]


Last week, a data breach at Epsilon has put millions of e-mail addresses and names on the street. According to Epsilon, only 2% of their client data is affected, but that still leaves a lot of data on the street. Epsilon is handling the (bulk) e-mail for lots of large corporations with millions of customers worldwide. And I am a customer of several of their customers. So I should expect the unexpected and pay attention to phishing mails.

Today I received two similar e-mails from Marriott and Hilton…

Blog tags:

666.624 IPv4 addresses sold for $7.5M to Microsoft   Comment [1]

Don’t you love it when your predictions come true… On 3 February 2011 I wrote a blog item “IPcalypse happened: Will the Internet collapse? For $ale, my IPv4 number!!!

In that blog I wrote

“Another curious effect we may see is people offering their IPv4 numbers for $ale on e.g. auction sides as eBay. Wherever ISP’s have not transferred to IPv6, this can be a booming business.”

Today the “Internet Governance Project” published that Nortel, a Canadian telecommunications manufacturer, sold its legacy…

Blog tags: New trends

Damage caused by internet banking fraud quintuples... What’s next?   Comment [0]

It is not a surprise, more and more people are banking online and thus cybercriminals move more and more into that region. Banking fraud on the internet is not new. It has been existing for a few years and with different variants of the Zeus Banking Trojan, many people became a victim.

Last month, a variant of SpyEye was successful in stealing credentials and modifying transactions using a Man in the Browser attack. Norman’s Snorre Fagerland made a detailed description of SpyEye, which you can find…

Domain name scam relived: AsiaGov   Comment [0]

Two years ago a wrote a series of blogs on Domain Name Scammers trying to sell Norman domains we did not want and were “claimed” by “unknown” people. But if we reacted promptly, although they use a first come, first serve principle, they “generously” would allow us the domains. You can read up on this highly entertaining blogs here:

part 1, part 2, part 3, part 4, and part 5.

Recently we were contacted again, the same drill, but things got a bit more professional (on the scammers side).

After…

IPcalypse happened: Will the Internet collapse? For $ale, my IPv4 number!!!   Comment [0]

As I mentioned in my blog from 17 January "IPv4: IPcalypse", the available number of IPv4 addresses was reaching zero. That has happened, IANA Central Registry of IPv4 addreses is exhausted. Not on the predicted 11 February 2011, but 8 days earlier, today, 3 February 2011. It will be a little while more (it may even take the rest of this year) before the Regional Internet Registry (RiR's) pools of reserved IPv4 addresses will be exhausted as well, but don’t hold your breath as you may miss that.…