Data attack targets Commerce Department
479066
Bureau was target of an attempt to gain access to employees' user account information for its computer network.
387344
On 20 November 2004, a major malicious-code attack emerged targeting European Web sites via banner ads. This two-step attack exploits two previously identified security vulnerabilities: the Bofra (or IFRAME
637829
The holidays are ripe for hackers, spammers and spies who go after personal information from holiday shoppers and write special programs to infect new computers when they first go online.
698101
SAN JOSE, Calif. -- Consumers are bombarded with warnings about identity theft. Publicized threats range from mailbox thieves and lost laptops to the higher-tech methods of e-mail scams and corporate data invasions.
763547
Online credit card processor Authorize.net on Wednesday acknowledged that large-scale data attacks have disrupted credit card processing for its Internet merchants over the last week.
22770
Unpatched Windows machines are vulnerable to latest adware attack
524524
An attack utilizing a vulnerability in an ActiveX control for the popular RealPlayer media program may be spending in a more more dangerous fashion than anyone realized. Exploit code for the vuln has been found embedded in ads served up from a popular advertising site.
612363
(InfoWorld) - Computers belonging to the U.S. government, contractors, and companies in the transportation industry were hit by a targeted computer attack in July that yielded password information for hundreds of Internet and intranet Web sites, a computer security vendor said Tuesday. The malicious code behind the attacks was first detected by computer intrusion prevention vendor Prevx on July 5. In total, the criminals were able to cull 200MB ofÂ information from about 500 computers, including password and login data, Prevx said. All but one of the computers was located in the U.S., and many of the computers that were infected were associated with air transportation, according to Mel Morris, CEO of Prevx. "This was a well-coordinated attack by someone wanting to get information on the related sites." PCs at the U.S. Department of Transportation (DOT), American Airlines, and DOT contractor Booz Allen Hamilton all were compromised, Morris said. If DOT systems were compromised, the department is unaware of the situation. "We haven't found any record of a problem," a DOT spokeswoman said Tuesday. Prevx obtained a sample of the Trojan used in the attacks on Friday of last week. By Saturday, it had tracked down a Web site, hosted by YahooÂ in Sunnyvale, California, where information from the compromised PCs was dropped. Because Prevx found a "massive amount" of job applications on the Web site used by the criminals, the company believes that victims may have downloaded the malicious software while thinking they were applying for a job. That Web site, which had probably been hacked by the criminals behind the scam, was shut down on Tuesday, Morris said. It hosted about 200MB of password information, and log-files on the server showed the IP addresses of the infected PCs. Victims of the Trojan, called Win32.PSWSteal.Gen , are told that their hard drive has been encrypted and that they will need to pay $300 to for a decryption tool. Morris believes this extortion threat is actually a ruse designed to conceal the attacker's true motivation: data gathering. "We think the ransomware is to point anyone investigating this down the wrong alley," he said. Morris said he is troubled that such a high percentage of the infected PCs are related to the transportation sector, which has been the target of terrorist attacks. "When we reverse-engineered the IP addresses of those computers, we couldn't believe that this was a daisy chain that led to government-associated sites and to other defense contractors, and to American Airlines," Morris said. "This was a very highly targeted attack." Criminals have increasingly turned to this type of targeted attack in order to collect and eventually sell data from corporations and government agencies, said Marcus Sachs, deputy director of research group SRI International's Computer Science Laboratory. But while Prevx's list of compromised organizations is "kind of scary," it's still hard to characterize what was motivating the attack, Sachs said. "I wouldn't necessarily associate it with terrorists," he said.
80556
GNUCitizen is describing an apparent vulnerability that could trick people into revealing personal data.
174087
When data breach investigator Bryan Sartin gets a call to check into an incident involving customer records loss at a retailer, he knows that the situation most likely involves information that has been lifted from a company's point-of-sale systems.
740908
Danish security research firm Secunia has reported a vulnerability that occurs in most browsers that can be exploited by hackers looking to spoof the content of Web sites.
310622
The U.S. Federal Trade Commission (FTC) is looking for victims of a data breach at ChoicePoint announced in early 2005.
63220
Going, going, own3d Security researchers have discovered a sophisticated botnet attack targeting eBay customers, particularly those in the UK.â¦
648984
Elections, banking, and point-of-sale systems have largely moved to the Web, so cyberattacks can have a profound effect on commerce.
466855
New service helps companies thwart online scams.
717712
Some digital picture frames and other devices sold over the holidays may include malicious software.
96436
Lycos vigilante attack on spammers has been hit by a vigilante attack. Spammers are suspected.