Attackers turn Bank of India site into malware bazaar
635060
31 unique exploits served Bank of India IT staff are mopping up the mess left by attackers who rigged the firm's website to feed malware to customers trying to access online services.â¦
570915
The experts claim hackers have compromised these sites by exploiting scripting vulnerabilities in their guestbooks.
36812
In a twist, security researchers have discovered a group of hackers who are exploiting a new category of victims -- aspiring Internet scammers.A Moroccan group called &quot;Mr. Brain&quot; is offering free phishing kits on a Web site hosted in France, said Paul Mutton, Internet services developer at Netcraft, a security company in Bath, England.The software packages make it easy to quickly set up a fraudulent Web site mimicking a known brand in order to trick people into divulging credit card details or bank account numbers. Templates for spam e-mail are also included, targeting brands such as Bank of America, eBay, PayPal, and HSBC.Mr. Brain&#39;s Web site lists the kits and what kind of details each one is capable of collecting, such as usernames, passwords or Social Security numbers. Netcraft posted screenshots on its Web site.But what the aspiring scammer doesn&#39;t know is that the phishing kits are designed to send any sensitive information that&#39;s collected back to e-mail accounts controlled by Mr. Brain, Mutton said.&quot;Obviously, that&#39;s why they are offering this stuff for free,&quot; Mutton said. &quot;I was impressed by it.&quot;Mr. Brain hides the special e-mail function in a blend of PHP scripts, one of which is encrypted, Mutton said. Just in case someone decrypts it, Mr. Brain has written at the top of the file &quot;Don&#39;t need to change anything here. Created by Mr. Brain Morocco Team.&quot;The scheme seems to be targeted at new phishers, Mutton said. Mr. Brain benefits since other wannabe scammers shoulder the cost and risk of finding an ISP (Internet Service Provider) to host the phishing site, Mutton said.&quot;Essentially, they&#39;re exploiting all these novice phishers -- basically getting them to do all the hard work,&quot; Mutton said.It&#39;s difficult to tell without further research how many of the free phishing kits linked with this latest scam are live on the Internet, but Mutton said Netcraft noticed one earlier this month targeting Bank of America.&quot;Clearly, these are actively being used in phishing attacks,&quot; Mutton said.
128425
A potent new program circulating on the Internet embeds itself on a user's computer and either overwrites saved bookmarks or redirects the victim from the intended banking site to an authentic-looking fake.
86315
The security vendor has fixed the damage, but the site briefly redirected visitors to a malicious site in China.
42407
Malware purveyors earlier this week cracked part of the CA web site and redirected visitors to a site known to be serving malicious software.
399955
An impressively sophisticated piece of malware -- one capable of creditably mimicking human behavior -- is wreaking havoc on banks on two continents.
589694
The outsourcing of security Comment It's the end of yet another RSA security conference, and we're tempted to trade our PCs for an abacus and hole up in the basement while the nightmarish robot invasion on mankind plays out. Malware, we were repeatedly told over the past five days, is lurking everywhere - in PCs, phones and online bazaars - and is waiting for the opportune moment to slip into our toasters and refrigerators.â¦
421870
As the Storm worm raged, tapping countless PCs for nefarious ends, the rush to online applications left many Web sites vulnerable.
176286
Servers that managed global internet traffic have been subjected to a concerted attack by hackers.
46251
Feeding on fat cats A researcher has uncovered malware that targets commercial bank customers by logging into their online accounts and wiring large sums to accounts under the control of criminals.â¦
80272
Tool that identifies sites pretending to be connected to banks, eBay and more could help leave "phishing" scammers dead in the water.
349092
Software maker SCO Group has been targeted by hackers once again. This time, the company&#39;s Web site was defaced. The attacks began during the long holiday weekend and were first noticed
508935
Infected sites feed exploits to visitors--and more sites are affected than first suspected.
440620
The schemes have included unsolicited e-mail messages seeking money and a phony Web site capable of depositing a virus on computers.
172876
Domains of several new phishing sites are cropping up with known Storm worm domains. F-Secure researchers think phishers are leasing parts of the larger botnet.
559392
Hacking tools that let you unlawfully activate trial software can include malware used by hackers to steal financial data.