Beware of the Poodle Bug!

There’s a new security bug in town. Technically, it is called CVE­-2014­-3566, and elsewhere, as the Poodle Bug. Three Google engineers have discovered this security vulnerability in SSL version 3. Let’s know how this vulnerability may affect you.

Poodle

What is SSL?

SSL (Secure Sockets Layer) is an encryption service that keeps your Internet communications (such as your connection to your bank’s website, online shopping site, etc.) private and from getting into the wrong hands.

How POODLE bug affects SSL 3.0

SSL 3.0 is an 18-year old technology. Although stronger encryption technologies such as TLS (Transport Layer Security) are now in force, SSL 3.0 is still used in 1% of web traffic, and supported by 95% of web browsers.

Coming to POODLE, it stands for ‘Padding Oracle On Downgraded Legacy Encryption’. It is a security flaw that exists in SSL version 3. Under the right conditions, the POODLE bug can allow an attacker to access your session cookies. With this information at hand, an attacker can take control of your online accounts including your email, banking and social networking account.

Now all this may sound scary, but the POODLE bug is not as threatening as Heartbleed or Shellshock that took the Internet by storm. It is hard to exploit.

So, Why POODLE should not worry you much? Here’s why!

An attacker who intends to use the POODLE vulnerability, has to come in between you and the website you are visiting. And one of the most likely ways an attacker can do this is when you are accessing your online account on an unsecured public Wi-Fi network.

So, is disabling SSL 3.0 support a solution?

While disabling SSL 3.0 support will mitigate the risk, it might present compatibility problems with older web browsers and servers. So, for now, end users can take the following measures:

1. Avoid accessing online accounts on unsecured Wi-Fi; this even includes your instant messaging services like WhatsApp.

2. Ensure that your browser is configured to automatic updates.

The POODLE bug story is developing. We will keep you posted about this as we collect more information. Stay tuned to our blog, and stay safe!

Rajiv Singha

Rajiv Singha

You may also like...

Microsoft March-2012 Patch Tuesday Released

POWERSHELL: AN ATTACKER’S PARADISE

PowerShell: An Attacker’s Paradise

Is the End of Windows XP Support Putting ATMs at Risk?

105 Comments

Your email address will not be published.

CAPTCHA Image

  1. Avatar Musa ahmodu • October 17, 2014 at 1:20 PM

    Thanks for this vital info, looking forward to more update on the POODLE BUG.

    Reply
  2. Avatar B.J.MASSAWE • October 17, 2014 at 1:31 PM

    THANKS FOR THE INFORMATION.

    Reply
  3. Avatar yandamoori • October 17, 2014 at 2:14 PM

    thanks

    Reply
  4. Avatar sooryanarayanan • October 17, 2014 at 3:12 PM

    Thanks for the timely information,,,Also updated automatically…Why should we worry

    when QUICK HEAL is protecting my computer….Am Right?

    Thank u sir…

    Reply
  5. Avatar gl bhasin • October 17, 2014 at 4:09 PM

    thanks. hope Quick Heal is protecting us

    Reply
  6. Avatar mayur • October 17, 2014 at 4:51 PM

    please mail me all suggestions

    Reply
    • Rajiv Singha Rajiv Singha • October 18, 2014 at 6:24 PM

      Hi Mayur,

      You can bookmark this page and save the information on your computer. You can also subscribe to our blog for receiving such news on a regular basis.

      Regards,

      Reply
  7. Avatar Phiroze Mehta • October 17, 2014 at 5:00 PM

    Thank you for the warning. But is a QH user vulnerable if computer usage is not very regular?

    Reply
    • Rajiv Singha Rajiv Singha • October 18, 2014 at 6:22 PM

      Hi Phiroze,

      Your computer is not vulnerable to new threats as long as your Quick Heal product is up-to-date.

      Regards,

      Reply
  8. Avatar Mayur • October 17, 2014 at 5:58 PM

    Thanks for this information……

    Reply
  9. Avatar Mayur Desai • October 17, 2014 at 6:01 PM

    WE r waiting for Quick heal online shopping Security …….

    Reply
  10. Avatar Vishwadeep Patil • October 17, 2014 at 6:44 PM

    Thanks and update us about POODLE bug next time

    Reply
  11. Avatar Vishwadeep Patil • October 17, 2014 at 6:44 PM

    thanks n update us

    Reply
  12. Avatar shailesh patel • October 17, 2014 at 6:47 PM

    start the quic heal anti virus

    Reply
  13. Avatar Mangesh • October 17, 2014 at 7:00 PM

    great info ragib..

    Reply
  14. Avatar Nagnath Jirvankar • October 17, 2014 at 7:04 PM

    Thanks for giving this information…..

    Reply
  15. Avatar Prof C B Singh • October 17, 2014 at 7:06 PM

    It appears significantly more relevant for those who are fond of using pirated Windows and rest everything either pirated free for use. Re-think, the human life starting from birth to death is a paid service. Re-think be thankful to Quick Heal

    Reply
  16. Avatar Ranjan • October 17, 2014 at 7:51 PM

    a) we use wifi from mts or iphone hotspot. is this safe?
    b) how can we get such blogs , new bugs news on direct our cellphones via sms or email?
    c) is whatsapp so unsecured? major coys are subscribing and not using sms now….
    d) QuickHeal which version is enuf for such internet bugs ?

    Reply
    • Rajiv Singha Rajiv Singha • October 18, 2014 at 6:20 PM

      Hi Ranjan,

      – If you are using secured Wi-Fi connection, then you are safe.
      – Please subscribe to your blog post by proving your email address on the Stay Updated section (right hand side of this post)
      – We cannot comment on the security of WhatsApp. However, we recommend users not to share any private, intimate, financial or confidential information over this platform.
      – Every Quick Heal product is designed to protect users from Internet and malware threats. Learn more about these products here – https://www.quickheal.co.in/home-users

      Regards,

      Reply
  17. Avatar George Oommen • October 17, 2014 at 8:06 PM

    Thanks for the information

    Reply
  18. Avatar Hiralal shah • October 17, 2014 at 8:33 PM

    Thank you for alerting us.

    Reply
  19. Avatar subham sahoo • October 17, 2014 at 8:35 PM

    please tell how to be protected from this virus?

    Reply
    • Rajiv Singha Rajiv Singha • October 18, 2014 at 6:16 PM

      Hi Subham,

      – Avoid using unsecured Wi-Fi networks.
      – Keep Automatic Updates on for your Internet Browsers.

      Regards,

      Reply
  20. Avatar Yogesh B Kakkad • October 17, 2014 at 8:35 PM

    Thanks

    Reply
  21. Avatar renukadas u dixit • October 17, 2014 at 8:49 PM

    thanks for giving very valid information

    Reply
  22. Avatar chander • October 17, 2014 at 9:21 PM

    I AM USING QUICK HEAL TOTAL SECURITY ON MY LAPTOP.HAVING OP SYS AS WINDOW XP.
    WILL THE QUICK HEAL TOTAL SECURITY NOT PROTECT AGAINST Poodle Bug

    Reply
    • Rajiv Singha Rajiv Singha • October 21, 2014 at 12:39 PM

      Hi Chander,

      As mentioned in the post, to exploit the POODLE BUG, an attacker has to come in between you and the website you are visiting. This area of vulnerability is off-limits for any antivirus software. So, it depends on the user to be more cautious, which, in this case means not using unsecured Wi-Fi network.

      Regards,

      Reply
  23. Avatar Chetan Patel • October 17, 2014 at 9:59 PM

    THANKS FOR THE INFORMATION.

    Reply
  24. Avatar Manohar Chaudhari • October 17, 2014 at 10:05 PM

    Thanks for information

    Reply
  25. Avatar Pradip Mondal • October 17, 2014 at 10:16 PM

    I AM USING QUICK HEAL TOTAL SECURITY ON MY LAPTOP.HAVING OP SYS AS WINDOW7.
    WILL THE QUICK HEAL TOTAL SECURITY NOT PROTECT AGAINST Poodle Bug

    Reply
    • Rajiv Singha Rajiv Singha • October 21, 2014 at 12:39 PM

      Hi Pradip,

      As mentioned in the post, to exploit the POODLE BUG, an attacker has to come in between you and the website you are visiting. This area of vulnerability is off-limits for any antivirus software. So, it depends on the user to be more cautious, which, in this case means not using unsecured Wi-Fi network.

      Regards,

      Reply
  26. Avatar nlpun • October 17, 2014 at 11:15 PM

    thanks for your kind informetion.

    Reply
  27. Avatar shantanu kumar jena • October 17, 2014 at 11:25 PM

    thanks .

    Reply
  28. Avatar Mahesh kumar sihag • October 17, 2014 at 11:35 PM

    Thaks sir.

    Reply
  29. Avatar Shailendra • October 18, 2014 at 1:10 AM

    Thanks for telling

    Reply
  30. Avatar bharati • October 18, 2014 at 1:32 AM

    nice information. thanks.

    Reply
  31. Avatar Jarjeena • October 18, 2014 at 5:58 AM

    Thanks a lot

    Reply
  32. Avatar Rakesh • October 18, 2014 at 6:12 AM

    Thanks for the information.

    Reply
  33. Avatar Animesh N Mistry • October 18, 2014 at 6:23 AM

    thks for update

    Reply
  34. Avatar raficul islam • October 18, 2014 at 11:35 AM

    thank u for this important information. plz keep this relation so that we can not fall in trap

    Reply
  35. Avatar chaitanya • October 18, 2014 at 12:36 PM

    thanks , was useful to me

    Reply
  36. Avatar RC Jat • October 18, 2014 at 12:43 PM

    Thanks for this vital information, looking forward to more update on this BUG.

    Reply
  37. Avatar Haradhan Mohajan • October 18, 2014 at 2:45 PM

    Thanks.

    Reply
  38. Avatar dalip • October 18, 2014 at 2:51 PM

    thanx for valuable information

    Reply
  39. Avatar JTR Nair • October 18, 2014 at 2:55 PM

    Useful information. Thanks. Please keep us updated.

    Reply
  40. Avatar Satish Divya • October 18, 2014 at 3:04 PM

    Grand thanks

    Reply
  41. Avatar Satish Divya • October 18, 2014 at 3:05 PM

    Supper

    Reply
  42. Avatar wasim • October 18, 2014 at 3:51 PM

    Thanks for the information.

    Reply
  43. Avatar Pradip Buveja • October 18, 2014 at 4:00 PM

    Thx for the enlightenment. I will act accordingly and might stay safer online.

    Reply
  44. Avatar bablu upadhya • October 18, 2014 at 5:04 PM

    thks for update

    Reply
  45. Avatar JASHUBHAI M PATEL KAPADWANJ • October 18, 2014 at 5:34 PM

    thanks for the information

    Reply
  46. Avatar kaushal kishor • October 18, 2014 at 5:55 PM

    Thanks for the information

    Reply
  47. Avatar devendra • October 18, 2014 at 6:35 PM

    thanksfor information

    Reply
  48. Avatar PRASHANT • October 18, 2014 at 10:37 PM

    THNK U

    Reply
  49. Avatar Gopal Shrestha • October 18, 2014 at 10:59 PM

    Thanks for useful information.

    Reply
  50. Avatar dr g s rekhi • October 18, 2014 at 11:27 PM

    thanks for info!
    if my quick heal is updated reg and working , do i need to worry or do anyother thing , pls advise .dr rekhi

    Reply
    • Rahul Thadani Rahul Thadani • October 20, 2014 at 10:23 AM

      Hi Dr. Rekhi,

      No, you need not worry if your Quick Heal product is regularly updated. Our virus databases are constantly working around the globe and resolving issues of hundreds of malware applications.

      Regards.

      Reply
  51. Avatar Moksh Ranka • October 18, 2014 at 11:47 PM

    I am very-very thankful for the important information provided.

    Reply
  52. Avatar ARIJIT DAS • October 19, 2014 at 12:01 AM

    MY QUICK HEAL IS NOT UPDATING.. POP UP MSG SHOWING THAT PLEASE LOG IN BY ADMIN. BT ITS OPERATING FROM ADMIN..

    Reply
  53. Avatar Rahul Gokhale • October 19, 2014 at 12:25 AM

    Nice tips everytime to protect our Pcs. Thanks!!! Does quickHeal Have any solution for TORNTV.com?

    Reply
    • Rajiv Singha Rajiv Singha • October 28, 2014 at 3:53 PM

      Hi Rahul,

      “TornTv” is a video streaming, potentially unwanted program and may install third-party software additionally.

      It may collect information regarding your virtual activity, and this could be used by cyber criminals to flood your browsers with unreliable adware.

      Quick Heal detects the “Torn TV” PUP (Potentially Unwanted Program) in Antimalware module.

      To clean your system, in case it is infected with this PUP, follow the below steps (Take latest updates)

      1) Right click on QH system tray icon -> select “Launch Antimalware” or
      Open QH scanner -> Tools -> “Launch Antimalware”
      2) Click on “Scan Now” option.
      3) Scanning will start. If any PUP is found it will be shown in PUP’s files and folders.
      4) Make sure “Set System Restore Point before cleaning” check box is selected.
      4) Click on “Clean” option.
      5) It may ask to restart the system for proper cleaning.

      In case of any doubt you can raise a ticket on the below portal.

      https://support.quickheal.com/v4/

      Regards,

      Reply
  54. Avatar Swetang Patel • October 19, 2014 at 8:01 AM

    Thanks For These INFO, inform Us about if there is some updates regarding POODLE BUG!!!!!!!!!!!!

    Reply
  55. Avatar Dhyanesh.M • October 19, 2014 at 8:54 AM

    Thanks for your kind information!

    Reply
  57. Avatar Dheeraj Yadav • October 19, 2014 at 9:46 AM

    Thanks sir ji for more info…

    Reply
  58. Avatar VAGHELA S.N. • October 19, 2014 at 11:13 AM

    thanks

    Reply
  59. Avatar Yamini • October 19, 2014 at 12:17 PM

    Thank u for d info.

    Reply
  60. Avatar shubhangi rajanwar • October 19, 2014 at 2:16 PM

    thnks…………

    Reply
  61. Avatar dhaval • October 19, 2014 at 2:35 PM

    thanksforthisinformation

    Reply
  62. Avatar Hemant Rao • October 19, 2014 at 4:12 PM

    Thanks for the information

    Reply
  63. Avatar Bidhu Debbarma • October 19, 2014 at 5:12 PM

    THANKS FOR THIS INFORMATION.

    Reply
  64. Avatar Ananthank • October 19, 2014 at 6:00 PM

    Quick heal nice application
    9710087414

    Reply
  65. Avatar kaushal • October 19, 2014 at 6:41 PM

    i am using a personal wifi..can this still affect me?

    Reply
  66. Avatar DEBOBRATA PODDAR • October 19, 2014 at 6:47 PM

    I’m really impressed knowing this news about POODLE bug vulnerability in SSL version 3.Can you me more details about this vulnerability..

    Reply
    • Rahul Thadani Rahul Thadani • October 20, 2014 at 10:11 AM

      Hi Debobrata,

      Thank you for reading our post and for sharing your feedback. Stay tuned to our blogs for more details about this bug and other security news.

      Regards.

      Reply
  67. Avatar AKP • October 19, 2014 at 8:02 PM

    thanks for info it is vital n thnx to quick heal

    Reply
  68. Avatar surendra thakor • October 19, 2014 at 8:03 PM

    pl.send alerts in hindi

    Reply
  70. Avatar KIRAN KUMAR • October 20, 2014 at 5:09 AM

    Thanks for alerting

    Reply
  71. Avatar Suryakanta • October 20, 2014 at 8:58 AM

    Thanks for informing us about this we will take the precaution as per the insruction.

    Reply
  72. Avatar shivam • October 20, 2014 at 9:36 AM

    Thanx for quick heal to protect my phone

    Reply
  74. Avatar ANIL KUMAR • October 20, 2014 at 10:25 AM

    poodle bug solution and update quick heal

    Reply
  75. Avatar Sujit • October 23, 2014 at 12:19 AM

    I would like to know more about this poddle bug.

    Reply
  76. Avatar B.K.Sinha • October 23, 2014 at 3:50 PM

    Thanks but I’m scared.I don’t know much about encryption etc.but my wi-fi has WPA2 security. Is it sufficient for QHT.

    Reply
  77. Avatar aaru • October 29, 2014 at 11:40 PM

    Hello…
    I have a problem with my pc…im unable to open some of the websites in all browsers..when im seriously browsing something,my page navigates automatically to someother page…im unable to open any websites like songs.pk,downloadming,Movies25…pls resolve my problem…

    Reply
    • Rahul Thadani Rahul Thadani • October 30, 2014 at 9:26 AM

      Hi,

      Firstly, we recommend that you run a full system scan on your machine, via your Quick Heal product. If this issue still persists beyond that, you should contact our support center. They can be reached on 0-927-22-33-000 or you can even submit a ticket and request a callback by visiting this link – https://www.quickheal.co.in/submitticket.

      Regards.

      Reply
  78. Avatar anshu priya • November 5, 2014 at 5:44 PM

    i problem my facebook account jb mai apna fb open ki hu to close hi nhi ho rha h imean logout ho hi nhi rha h pls aap bataye ki logout kaise hoga , mai logout bar bar krti hu pr logout ho hi nhi raha h pls aap bataeye meri question ka sollution.

    Reply
  79. Avatar anshu priya • November 6, 2014 at 5:27 PM

    thanks bhiya mera problem solve ho gya apki wajah se thanks for ur suggestion

    Reply
  80. Avatar anshu priya • November 6, 2014 at 5:45 PM

    aap mujhe whatsapp k bare m bataeye kya mai pc par whattsapp chala sakti hu or mujhe ye bi pta h ki whatsapp pc pr chala sakti hu ek website h bluestacks.com es par download kr pc m run kra du to mai pc pr bi whatsapp chala sakti hu par maine sare procceess kr chuki hu nhi ho pa raha h pls bataye ki mere pc pr whattsapp kaise chalega yo bi ek – ek step bataye !

    Reply
  81. Avatar Anshu priya • November 11, 2014 at 6:21 PM

    mere question ka answer abi tk nhi mila h ?

    Reply
  82. Avatar Anshu priya • November 22, 2014 at 4:08 PM

    hello sir! sir mere lapy m quick heal antivirus h so ab end hone ja raha h so pls mujhe bataye ki “renew now” kar k mere lapy pr aa raha h notification and jb mai usse click krti hu “renew now” ko to new key magta h lekin quick heal to bola tha ki “renew now” krne se mujhe 2 month tk quick heal antivirus nhi barbana padega pr “renew now ” krne pr aisa kuch nhi hota h mujhe bataye ki kaise karu mai renew now or bolta h ki 20 days expire ur quick heal lieance pls renew now

    Reply
    • Rajiv Singha Rajiv Singha • November 24, 2014 at 2:15 PM

      Hi Anshu,

      Thank you for using Quick Heal. We would request you to contact our Renewal Team, and they will be happy to assist you. Below is the contact details:

      020-66835945 / 020-6683559

      Regards,

      Reply
  83. Avatar Anshu priya • November 22, 2014 at 4:27 PM

    or ha jb mai internet use krti hu to ek floder khulata h jisme likha rahta h ki There are new suspicious file entries in your quarantine floder , that are yet to be submitted to research
    Lab. Suspicious file submission ensures the detailed analysis of the file in reaserch lab of quick heal. After the detailed analaysis it can be added in the know virus signature data base which will be provided in updates to all user fir email mangata h submit krne k liye kya mai apna id de du pls aap mujhe bataye

    Reply

This website uses cookies to ensure you get the best experience on our website. Learn more