Internet Security

Security Holes Found in “Verisign Trusted” Online Stores

February 28, 2012

Softpedia Freedom, the grey hat hacker that in the past period identified a lot of cross-site scripting (XSS) vulnerabilities in some important websites, returns with other interesting finds. He discovered a number of 25 online shops from the United Kingdom containing XSS security holes. The worrying thing is that all of the sites bare Verisign [...]

Read the full article →

Koobface command and control servers silent

January 19, 2012

H Security The Koobface network is apparently down, according to Facebook. Ryan McGeehan, Facebook security official, told Reuters that the company’s decision to expose the five men alleged to be behind the malware had had an effect within 24 hours: “The thing that we are most excited about is that the botnet is down.” Yesterday, [...]

Read the full article →

Koobface malware gang exposed

January 17, 2012

H Security The five men behind the Koobface worm, which spreads over Facebook and other social networks, hide in plain sight, living comfortably in St Petersberg, Russia, according to Facebook investigators and other security researchers. http://www.h-online.com/security/news/item/Koobface-gang-to-be-exposed-by-Facebook-1414813.html IDG News Service – http://www.computerworld.com/s/article/9223484/Facebook_researchers_turn_up_heat_on_Koobface_gang

Read the full article →

Zappos hack exposes personal information

January 16, 2012

Beta News By Ed Oswald Data on up to 24 million customers of online shoe retailer Zappos was compromised according to an email sent by its CEO Tony Hsieh on Sunday. While Hsieh says that full credit card information is safe, hackers may have the last four digits of the cards. Hackers accessed names, email [...]

Read the full article →

10 years after Bill Gates’ Trustworthy Computing memo

January 16, 2012

Beta News By Christopher Budd I joined the Microsoft Security Response Center (MSRC) in April 2001 and left the company in December 2010. During that time I was involved in security and privacy at Microsoft, culminating in my role handling worldwide crisis communications for security and privacy incidents. I am one of a handful of [...]

Read the full article →

Advanced Bootkit attacks in 2011

January 4, 2012

ESET Threat Blog The year 2011 could be referred to as a year of growth in complex threats. Over the course of this year we witnessed an increase in the number of threats targeting the Microsoft Windows 64-bit platform, and bootkits in particular. Here is a self-explanatory diagram depicting the evolution of bootkit threats over [...]

Read the full article →

PC Magazine’s top five security predictions for 2012

December 29, 2011

First Android worm Your personal data will get stolen from a social network. Political Theater (using this theme for malware attacks) SMBs Are No Longer Immune Mac Malware Will Continue to Rise http://securitywatch.pcmag.com/none/291879-top-5-security-predictions-for-2012

Read the full article →

Fake “Important Account Information from Verizon” carries Zbot

December 8, 2011

Heads up from the Microsoft Malware Protection Center. Friendly spam carries Zbot This morning I spotted a few messages from my mobile carrier in my email inbox. This was not surprising as, only a few hours prior, I had logged into the carrier’s website to pay the monthly bill. The standard mode of operation for [...]

Read the full article →

U.S. Attorney Charges Seven Individuals in massive click-fraud scheme

November 10, 2011

FBI Press Release Manhattan U.S. Attorney Charges Seven Individuals for Engineering Sophisticated Internet Fraud Scheme That Infected Millions of Computers Worldwide and Manipulated Internet Advertising Business Malware Secretly Re-Routed More Than 4 Million Computers, Generating at Least $14 Million in Fraudulent Advertising Fees for the Defendants In conjunction with the arrests yesterday, authorities in the [...]

Read the full article →

AOL Administration Center & Uniform Traffic Ticket Spammed Scams

November 8, 2011

“AOL Administration Center” spam comes from a spoofed email address this is a classic example of Canadian Pharmacy spam. Full text of the bogus email, the # in the subject line changes. From: “AOL Administration Center (R)” To: Subject: AOL Administration Center Notification #73916 Hi, You have 1 notification (#73916) from AOL Administration Center Please [...]

Read the full article →