Monster.com torpedoes rogue server as malware scam rolls on
23306
Apply here to empty your bank account Trying to contain damage amid reports that con artists are targeting online job sites, Monster Worldwide has shut down a rogue server that was siphoning personal information from the resumes of job seekers. The disclosure came amid new details of a Trojan that's amassed personal information on hundreds of thousands of people.â¦
206847
A newly identified malicious program not only messes up its victims' computers, it taunts them too.
385525
InfoWorld - Some Macintosh users have encountered a security program whose function and Web site have the tell-tale signs of a scam.
119103
Job portal Monster.com has released details of how cyber thieves stole confidential information.
97619
(InfoWorld) - Attackers have targeted the zero-day VML vulnerability on an unknown number of Windows-based machines, using a layered approach that first involved exploiting a hole in cpanel, an application that's popular with Web hosting services. AccordingÂ to posts on the support forum of HostGator, criminals accessed the company's servers using the cpanel hole, which was also a zero-day vulnerability. Once in, they planted code on many of the Web sites of HostGator's customers. End users who used Internet Explorer to visit those sites and had not followed work-around procedures were then infected with a virus, which attacks vector markup language in Windows. "The person or group that did this is very intelligent, and obviously knows how to plan a big attack," a HostGator official wrote in the forum. "Since this exploit could have worked on anyone running cpanel it had nothing to do with how secure we were. We suspect it was done by someone in china as we have a small piece of information supporting this." HostGator says the vulnerability in cpanel has been patched. The attack demonstrates the growing sophistication of computer attacks. According to HostGator, the cpanel vulnerability was discovered about a month ago, leading officials to speculate that the attackers waited for a zero-day to emerge before exploiting it.ADVERTISEMENTMAKE SOA REAL WITH IBM WEBSPHERE PODCASTStreamline processes and maximize efficiency within a proven service oriented architecture. Take back control of your business processes with IBM WebSphere.
666009
Good-guy sites, like CastleCops.com, are suffering Web site outages from distributed denial-of-service attacks.
754347
Hacker web sites are claiming to have posted proof-of-concept exploit code for the latest critical Microsoft Corp software vulnerability, which is sometimes a precursor to broader attacks using a worm.
464490
MySpace.com is under attack by an extremely effective worm that steals log-in credentials and spreads spam promoting adware sites.
388987
The latest variant of the MyDoom mass-mailing worm is spreading fast, even as security firms raise the worm&#39;s threat assessment.
570280
InfoWorld - One week after&#160;hackers stole personal information from millions of people who had posted their resumes to the job-searching site Monster.com, the company has warned its users to be vigilant about online fraud because the breach was not an isolated incident.
108165
But one in 10 sites with a domain from the island of Tokelau spread malicious software or warrant a warning.
226902
How bad is the Monster.com data breach? Bad enough. Did the crooks get their hooks in deep? Remarkably deep. Gregg Keizer has the details on what has gone wrong so far in the Infostealer.Monstres attack.
201915
Antivirus firm Symantec is facing a denial-of-service attack on its Web site from the latest version of the MyDoom worm. Authors of MyDoom.
36812
In a twist, security researchers have discovered a group of hackers who are exploiting a new category of victims -- aspiring Internet scammers.A Moroccan group called &quot;Mr. Brain&quot; is offering free phishing kits on a Web site hosted in France, said Paul Mutton, Internet services developer at Netcraft, a security company in Bath, England.The software packages make it easy to quickly set up a fraudulent Web site mimicking a known brand in order to trick people into divulging credit card details or bank account numbers. Templates for spam e-mail are also included, targeting brands such as Bank of America, eBay, PayPal, and HSBC.Mr. Brain&#39;s Web site lists the kits and what kind of details each one is capable of collecting, such as usernames, passwords or Social Security numbers. Netcraft posted screenshots on its Web site.But what the aspiring scammer doesn&#39;t know is that the phishing kits are designed to send any sensitive information that&#39;s collected back to e-mail accounts controlled by Mr. Brain, Mutton said.&quot;Obviously, that&#39;s why they are offering this stuff for free,&quot; Mutton said. &quot;I was impressed by it.&quot;Mr. Brain hides the special e-mail function in a blend of PHP scripts, one of which is encrypted, Mutton said. Just in case someone decrypts it, Mr. Brain has written at the top of the file &quot;Don&#39;t need to change anything here. Created by Mr. Brain Morocco Team.&quot;The scheme seems to be targeted at new phishers, Mutton said. Mr. Brain benefits since other wannabe scammers shoulder the cost and risk of finding an ISP (Internet Service Provider) to host the phishing site, Mutton said.&quot;Essentially, they&#39;re exploiting all these novice phishers -- basically getting them to do all the hard work,&quot; Mutton said.It&#39;s difficult to tell without further research how many of the free phishing kits linked with this latest scam are live on the Internet, but Mutton said Netcraft noticed one earlier this month targeting Bank of America.&quot;Clearly, these are actively being used in phishing attacks,&quot; Mutton said.
176286
Servers that managed global internet traffic have been subjected to a concerted attack by hackers.
57973
A massive hack of several hundred legitimate Web sites is spreading malware to visitors' PCs using a new tack that makes detection "extraordinarily difficult,"  security experts said today.
739255
Scam site purports to sell iPhones but steals personal data and infects the user's PC.