Banking data fears over Fasthosts intruder
185565
Customers in the dark Investigators are racing to establish whether banking information was stolen by the intruder who hacked into a server at Gloucester-based web host Fasthosts.â¦
4964
Unlucky web host firm suffers second downtime in a week Fasthosts, which last week suffered a major system outage, saw its woes continue today, with its headquarters hit by the floods in Gloucester.â¦
428153
Internet payment system Worldpay is under attack from hackers delaying transaction times for hundreds of online retailers.
379395
Customers are protesting about changes made by web firm Fasthosts following a security breach.
24864
(InfoWorld) - The web site of Bank of India, one of India's leading banks, was restored early Tuesday. The bank had closed the site on Friday after it found that the site had been hacked, and was dispensing malicious code. Sunbelt Software Inc., a provider of security software in Clearwater, Florida, had on Thursday alerted users on its blog that the bank's site had been compromised, and advised them not to visit the site. Unidentified hackers had inserted malicious code into the bank's main web page, a senior employee familiar with the situation said on Tuesday, speaking on condition of anonymity. The bank's designated spokesman on this issue was not immediately available for comment. As a result, persons coming to the bank's web site were likely to be temporarily redirected to another site where Trojans and other malware were downloaded onto their computers, the employee said. The user was then brought back to the bank web-site. The bank's IT staff thought they had the situation under control Friday morning, until they found that each time they changed the index page for the web site, it was immediately replaced by the hackers. The bank then decided to bring the web site down. "The web site was hosted externally by a hosting company in the U.S.," the employee said. The bank has since changed the company hosting the service, though the employee clarified that the change in hosting provider had been on the cards even before the hacker attack. The attack on the web site did not however affect the bank's online banking operations, according to the employee. The bank's customers access online banking services through a link on the home page of the bank's web site. The online banking service is provided to users from well-protected servers hosted and monitored within the bank by Hewlett-Packard Co., the employee said. The bank is as yet not clear about the identity of the hackers, although Sunbelt suggested in its blog that it was a criminal gang, called the Russian Business Network (RBN). "We have called for the logs from the hosting provider in the U.S., and we may have some definite information then," the employee said.
533018
Abbey's online banking system suffers problems which mean some customers are shown details relating to other users.
80556
GNUCitizen is describing an apparent vulnerability that could trick people into revealing personal data.
79424
Third time's the charm Punch drunk Fasthosts customers are set to be hit with a third compulsory password reset next week, as the budget web hosting company scrambles to cope with a major security breach.â¦
739728
Net payment system Worldpay is under attack from hackers delaying transaction times for hundreds of online retailers.
159977
Home net hardware could come under attack from malicious hackers, say security researchers
207163
Thousands of credit card numbers and other personal data may have been compromised.
258959
British TV presenter learns Web lesson: Never give out ID freely. Also: MBR Rootkit takes aim at Windows users.
542850
A directory reversal within "flat" extensions could lead to system profile attacks.
337561
(InfoWorld) - A new hacking method is causing concern for the lengths it goes to avoid detection by security software and researchers. The attack involves a Web site that has been hacked to host malicious code, an increasingly common trap on the Internet. If a user visits one of the sites with an unpatched machine, it's possible that the computer can become automatically infected with code that can record keystrokes and steal financial data typed into forms. The new method, which uses special JavaScript coding, ensures that malicious code is only served up once to a computer that visits the rigged site, said security vendor Finjan. "These attacks represent a quantum leap for hackers in terms of their technological sophistication," according to the report. "Equally important, this minimizes the exposure of the malicious code to forensic analysis or security research, as there is just one opportunity for a visitor to actually see the code." After a user visits the malicious Web site, the hackers record the victim's IP (Internet protocol) address in a database. If the user goes to the site again, the malicious code will not be served, and a benign page will be served in its place, Finjan's report said. It's also possible for hackers to block exposure of malicious code for users in a particular country. Also, the hackers can identify IP addresses of crawlers used by search engines and reputation services, which evaluate the risk in visiting certain Web sites, and serve them legitimate content. These methods are used to avoid alerting security researchers. Hackers generally want their malware to be effective for as long as possible, but that window has increasingly been closed by faster reaction times from antivirus companies. For example, a huge spam run with a Trojan horse program -- one that looks harmless but isn't -- is usually quickly detected by antivirus companies, which issue updates for their software to detect the malware. However, the quantity of malicious code has moved security vendors to add other defenses to their software, such as the ability to detect when a new program is doing something suspicious, such as suddenly communicating with a remote server. It wasn't immediately clear how many Web sites may be using this style of attack. However, Finjan said it's an example of how hackers are raising the bar to mask their attacks on computers and steal data, such as bank details. "Large numbers of infected users means higher revenues for the attackers," Finjan said. Â
70475
Layered Technologies, a Texas-based server hosting company, told customers this week that hackers had broken into its support database and stolen as many as 6,000 client records.
147130
Security experts say they have discovered a Trojan horse that records e-banking user details and Web surfing habits. Antivirus company Sophos is warning that the Banker-AJ Trojan is targeting online customers
180369
Companies that have not patched servers against the Windows Internet Naming Service flaw need to act fast, according to a security site.