Indian Bank Restores Site After Malware Attack
79613
The Web site for the Bank of India is back up after a four-day outage because of hackers.
24358
Also: New Zealand teen runs internet banking scam. Read these stories and more from around the Web on News.com Extra.
42407
Malware purveyors earlier this week cracked part of the CA web site and redirected visitors to a site known to be serving malicious software.
500415
After facing its first-ever phishing attack last week, Deutsche Bank AG said today it was the target of a renewed assault that began late yesterday and continued until this morning.
360875
The Web site for Indian antivirus vendor AvSoft Technologies has been hacked and is being used to install malicious software on visitors&#39; computers, security researchers said Thursday.The download section of AvSoft&#39;s S-cop Web site hosts the malicious code, according to Roger Thompson, chief research officer with security vendor AVG. &quot;They let one of their pages get hit by an iFrame injection,&quot; he said. &quot;It shows that anyone can be a victim.... It&#39;s hard to protect Web servers properly.&quot;The technique used on the site has been seen in thousands of similar hacks over the past few months. The attackers open an invisible iFrame Window within the victim&#39;s browser, which redirects the client to another server. That server, in turn, launches attack code that attempts to install malicious software on the victim&#39;s computer.The malicious software is a variant of the Virut virus family.The iFrame pages are commonly used by Web developers to insert content into their Web pages, but because it is possible to create an invisible iFrame window, the technology is often misused by hackers as a way to silently redirect victims to malicious Web sites.AvSoft, based in New Delhi, sells an antivirus product called SmartCOP and has sold a second antivirus product called Smartdog. The company, which is not well-known in the U.S., also specializes in recovering data lost due to virus attacks. The company could not be reached for comment Thursday afternoon.That data recovery service could come in handy for some, as Virut is known as a &quot;parasitic infector&quot; virus that is extremely difficult to remove. &quot;It infects all of your programs on your local hard drives, and then it starts hitting your network drives as well the first time you run,&quot; Thompson said.Fortunately, the malware used to install Virut exploits only well-known bugs, meaning that users who are running antivirus software on fully patched systems will probably not be infected by the attack in its current state, security experts say.Nobody knows how the malware got onto the Web site in the first place. News of the hack was reported on the Full Disclosure security discussion list on Thursday.McAfee Security Research Manager Dave Marcus believes that the site was compromised by exploiting a Web programming error, most likely in the site&#39;s SQL or PHP code. Security experts say that criminals have written automated programs that scour the Web for these types of flaws and then automatically infect sites, making this an increasingly common problem.
605581
A major provider of credit card authorizations for Internet retailers was struggling to remain online yesterday. Authorize.net, of Bellevue, Wash., purchased this year by Lightbridge Inc. of Burlington, has been subjected since last week to ''denial of service&quot; attacks, in which vandals try to knock computers out of commission by overwhelming them with data. ''We are working diligently to minimize ...
398332
Russian roulette Webpages of the US Consulate General in St. Petersburg, Russia, were infected by malware earlier this week. The US consulate site was caught up in a much larger hack attack and is not thought to have been targeted as such.â¦
49498
THE PROBLEM with phpBB software, which we reported on this time yesterday is over. And it&#39;s thanks to Google, it appears. F-Secure said that the Santy worm, which defaced web sites and used a Google search
327359
Phishers spoofed the Federal Deposit Insurance Corporation&#39;s (FDIC) Web site again Thursday and using bogus e-mails, tried to entice consumers to sign up for non-existent service that tracks
602831
Credit card processing firm Authorize.Net said today that it was the target of a large-scale distributed denial-of-service attack that had caused disruptions for customers.
400232
More than three million customers of global banking giant HSBC have been left vulnerable while banking over the internet for more than two years because of a security flaw, a newspaper reported.
86315
The security vendor has fixed the damage, but the site briefly redirected visitors to a malicious site in China.
36812
In a twist, security researchers have discovered a group of hackers who are exploiting a new category of victims -- aspiring Internet scammers.A Moroccan group called &quot;Mr. Brain&quot; is offering free phishing kits on a Web site hosted in France, said Paul Mutton, Internet services developer at Netcraft, a security company in Bath, England.The software packages make it easy to quickly set up a fraudulent Web site mimicking a known brand in order to trick people into divulging credit card details or bank account numbers. Templates for spam e-mail are also included, targeting brands such as Bank of America, eBay, PayPal, and HSBC.Mr. Brain&#39;s Web site lists the kits and what kind of details each one is capable of collecting, such as usernames, passwords or Social Security numbers. Netcraft posted screenshots on its Web site.But what the aspiring scammer doesn&#39;t know is that the phishing kits are designed to send any sensitive information that&#39;s collected back to e-mail accounts controlled by Mr. Brain, Mutton said.&quot;Obviously, that&#39;s why they are offering this stuff for free,&quot; Mutton said. &quot;I was impressed by it.&quot;Mr. Brain hides the special e-mail function in a blend of PHP scripts, one of which is encrypted, Mutton said. Just in case someone decrypts it, Mr. Brain has written at the top of the file &quot;Don&#39;t need to change anything here. Created by Mr. Brain Morocco Team.&quot;The scheme seems to be targeted at new phishers, Mutton said. Mr. Brain benefits since other wannabe scammers shoulder the cost and risk of finding an ISP (Internet Service Provider) to host the phishing site, Mutton said.&quot;Essentially, they&#39;re exploiting all these novice phishers -- basically getting them to do all the hard work,&quot; Mutton said.It&#39;s difficult to tell without further research how many of the free phishing kits linked with this latest scam are live on the Internet, but Mutton said Netcraft noticed one earlier this month targeting Bank of America.&quot;Clearly, these are actively being used in phishing attacks,&quot; Mutton said.
328333
A new Trojan program is targeting unwitting users' bank data by intercepting account information before it is encrypted and sending it to a central attacker database.
319998
Blog: IM directs victims to malicious Web site where they are duped into typing in their password, it then sends itself to the victims' contacts.
665800
InfoWorld - The Web site for Indian antivirus vendor AvSoft Technologies has been hacked and is being used to install malicious software on visitors' computers, security researchers said Thursday.
153353
The tricky business of thwarting online fraud Logistic and technical issues have hampered the rollout of a system designed to thwart phishing scams by UK bank Barclays.â¦