Sunday, December 04, 2011

FBI Warns of Coordinated Malware and DDoS Attacks Designed to Drain Bank Accounts

The FBI is warning the public about a cyber-crime ring that not only steals banking credentials but also launches a distributed denial of service (DDoS) attack on the victim’s financial institution as a diversion.

Read More

Wednesday, August 03, 2011

Malware hides behind DWORD formatted IP addresses

Internet users know what a domain name is, and many of them are aware of the fact that it is a "translation" of a dotted decimal IP address. But how many of them know that there are other formats that a domain name can be presented in?

This poorly known fact has occasionally been taken advantage of by cyber scammers and malware pushers, and another instance of this approach has recently been spotted by Zscaler researchers.



Read More

Monday, July 25, 2011

Apple MacBook batteries found vulnerable to malware

Researcher says Apple laptop microcontroller chips are shipped with default passwords that, once discovered, can be used as a hiding spot for malware

Read More

Thursday, July 21, 2011

How Attackers Use Search Engines and How You Can Fight Back!

We’re seeing a fast-growing trend in the hacking community that, sadly, many aren’t noticing: search engines can be turned into tools for attackers in numerous ways. What can businesses do to fight back?

Read More

Tuesday, July 19, 2011

ATM Hacking Video - Barnaby Jack Demonstrates ATM Hacking at Black Hat USA 2010

The presentation "Jackpotting Automated Teller Machines" was originally on the schedule at Black Hat USA 2009 but the talk was pulled at the last minute. This year it was on! Videos of Barnaby Jack demonstrating both local and remote attacks and a multi-platform ATM rootkit

See More

Microsoft posts $250K reward for Rustock botnet herders

Microsoft upped the ante on Monday in its months-long battle against the Rustock botnet by posting a $250,000 reward for information that leads to the arrest and conviction of the hackers who controlled the malware.

It was the first time Microsoft used its malware bounty program since February 2009, when it offered the same amount for the people responsible for the fast-spreading Conficker worm


ReadMore

Thursday, July 14, 2011

Zeus Banking Trojan Hits Android Phones

The Trojan spyware application known as Zitmo, which is designed to steal people's financial data, has now been altered to target devices running the Android mobile operating system.

Read More

Sunday, April 10, 2011

Microsoft and FireEye give inside story of Rustock botnet shutdown

The team behind the shutdown of the Rustock botnet have been giving details of how they were able to identify and take out the key command servers behind the network, and the legal precedent the case has set.

The Rustock botnet was responsible at one stage for more than half of the world's spam; its demise last week has cut global junk email levels significantly. It is made up of more than one million PCs which were infected over a period of years and remain so, with the possibility it could still be reactivated if any backup systems remain.



Read more:

Saturday, March 19, 2011

Analytical Brief: RSA Breach

This brief details NSS Labs assessment of the recent RSA breach and provides some important points that need to be taken into consideration by enterprises needing to protect critical information.

On Thursday, March 17, 2011, RSA’s Executive Chairman Art Coviello wrote in an open letter on the company’s website and published in their 8-K SEC filing that hackers had mounted an “extremely sophisticated cyber attack” that has put at risk its SecurID product.

RSA: Cyberattack could put customers at risk

government and bank employees, was stolen during an "extremely sophisticated cyberattack," putting customers relying on them to secure their networks at risk, the company said today
"Recently, our security systems identified an extremely sophisticated cyberattack in progress being mounted against RSA," Executive Chairman Art Coviello, wrote in an open letter to customers, which was posted on the company's Web site.