[ Product News ] 27 April, 2012 16:20

  1. What's "LINE" ?

     As a fast and light messenger that provides free messaging and voice calls, LINE has been ranked no. 1 in the free app category in Japan, Singapore, Hong Kong, Taiwan, Thailand, Malaysia, Macau, Saudi Arabia, Kuwait, Bahrain, United Arab Emirates, Qatar, Jordan, Israel, Switzerland and Turkey. LINE provides FREE messenger and VoIP services on 3G and Wi-Fi networks. Users do not have to pay for these services. 

     With LINE you can:      

  • Send photos as well as location info.      
  • Use any of the 255 unique stickers and emoticons.
  • Enjoy free messaging.
  • Create or join group chat rooms with up to 100 people. 
  • Make free voice calls.   

2. Why to Detect/Block "LINE"?

     In corporate environment, company always want to enforce the security policies and to supervisor the communications. For mobile devices inside corporate, they may leverage company WiFi & gateway to access the network, and in such case, the company always want to know what the traffic is. The AegisLab Application Control is a suite of signature service that can identify and control over 1,000 applications, and we also move fast to couple with the scenario that more and more mobile applications are widely used.

3. How and Which Version?

  A. Lionic Application Guard signature database can prevent the use of LINE since 25/04/2012.

  B. Application Guard can block the following versions of LINE by enabling policies in "IM/LINE" category ·          

  • LINE 2.0.2 (for iPhone)·          
  • LINE 2.0.9 (for Android)·          
  • LINE 1.1.18.84 (for Windows)·          
  • LINE 1.1.18.84 (for Mac OS X)  

 

4. Notes: "What's App" was already can detected & blocked. 

By AegisLab 

 

[ Security Alert ] 27 April, 2012 16:02

    In last December we had a security alert about SQL injection directs to "lilupophilupop.com", and in the January of this year we also gave a warning about 2M websites are tampered. Several months passed, the ISC SANS discovered another massive wave of SQL injection attacks as following figure.

 Massive Injection Searched by Google,

 

      As previous "Lilupophilupop SQL injection" attack, it still targets to ASP, IIS and MSSQL. Now we had known lots of sites are injected whether it can lead to successful attacks or not.

      AegisLan reminds the webmasters to check your own site, or using Google to discover it. And for users, better to have antivirus software installed. For MIS or CSO, better to consider deploying malicious URL filtering solution or product in the corporate environment.

By AegisLab