Indian Bank Restores Site After Malware Attack
678969
The web site of Bank of India, one of India&#39;s leading banks, was restored early Tuesday. The bank has closed the site on Friday after it found that the site had been hacked, and was dispensing malicious code.
178847
A bug in Microsoft&#39;s Internet Security and Acceleration (ISA) Server 2000 and Proxy Server 2.0 can let hackers spoof Web content, such as a trusted site, with their own fake content, the Redmond
153353
The tricky business of thwarting online fraud Logistic and technical issues have hampered the rollout of a system designed to thwart phishing scams by UK bank Barclays.â¦
82975
Security researchers are working to shut down a hacking attack targeting Internet banking users of at least 50 financial institutions in the U.S. and Europe.
36812
In a twist, security researchers have discovered a group of hackers who are exploiting a new category of victims -- aspiring Internet scammers.A Moroccan group called &quot;Mr. Brain&quot; is offering free phishing kits on a Web site hosted in France, said Paul Mutton, Internet services developer at Netcraft, a security company in Bath, England.The software packages make it easy to quickly set up a fraudulent Web site mimicking a known brand in order to trick people into divulging credit card details or bank account numbers. Templates for spam e-mail are also included, targeting brands such as Bank of America, eBay, PayPal, and HSBC.Mr. Brain&#39;s Web site lists the kits and what kind of details each one is capable of collecting, such as usernames, passwords or Social Security numbers. Netcraft posted screenshots on its Web site.But what the aspiring scammer doesn&#39;t know is that the phishing kits are designed to send any sensitive information that&#39;s collected back to e-mail accounts controlled by Mr. Brain, Mutton said.&quot;Obviously, that&#39;s why they are offering this stuff for free,&quot; Mutton said. &quot;I was impressed by it.&quot;Mr. Brain hides the special e-mail function in a blend of PHP scripts, one of which is encrypted, Mutton said. Just in case someone decrypts it, Mr. Brain has written at the top of the file &quot;Don&#39;t need to change anything here. Created by Mr. Brain Morocco Team.&quot;The scheme seems to be targeted at new phishers, Mutton said. Mr. Brain benefits since other wannabe scammers shoulder the cost and risk of finding an ISP (Internet Service Provider) to host the phishing site, Mutton said.&quot;Essentially, they&#39;re exploiting all these novice phishers -- basically getting them to do all the hard work,&quot; Mutton said.It&#39;s difficult to tell without further research how many of the free phishing kits linked with this latest scam are live on the Internet, but Mutton said Netcraft noticed one earlier this month targeting Bank of America.&quot;Clearly, these are actively being used in phishing attacks,&quot; Mutton said.
25491
A bank that guarantees its online users safety and security has direct evidence that its Web-based banking system is not bullet-proof. Should that bank tells its users?
477742
Security researchers studying the latest Internet crime trends have discovered a new Eastern European website that uses a large botnet to infect vulnerable PCs. The operators of the botnet and website charge clients for each successful PC infection.
328333
A new Trojan program is targeting unwitting users' bank data by intercepting account information before it is encrypted and sending it to a central attacker database.
239180
User-generated Web content is becoming a target for hackers and cross-site scripting attacks on Web sites can lead to malware taking over the browsers of machines that use the sites.
562504
Signs point to the notorious Russian Business Network gang as the originators of a hack that dropped a whopping 22 pieces of malware on the Bank of India Web site.
480779
Malware arrives in the form of a game, disables antivirus protection.
577244
A Google Maps mashup that pinpoints the physical location of affected IP addresses is just one component of an elaborate phishing scam designed to separate bank customers from their money. The scam targets account holders at firms including Bank of America, Germany's Deutsche Bank, and Australia's Westpac and Commonwealth Bank.
380030
INTERNET banking users beware, there appears to be a new "phishing" method about.   The technique, which avoids most detection systems, works after you log on to an authentic site.
319998
Blog: IM directs victims to malicious Web site where they are duped into typing in their password, it then sends itself to the victims' contacts.
612363
(InfoWorld) - Computers belonging to the U.S. government, contractors, and companies in the transportation industry were hit by a targeted computer attack in July that yielded password information for hundreds of Internet and intranet Web sites, a computer security vendor said Tuesday. The malicious code behind the attacks was first detected by computer intrusion prevention vendor Prevx on July 5. In total, the criminals were able to cull 200MB ofÂ information from about 500 computers, including password and login data, Prevx said. All but one of the computers was located in the U.S., and many of the computers that were infected were associated with air transportation, according to Mel Morris, CEO of Prevx. "This was a well-coordinated attack by someone wanting to get information on the related sites." PCs at the U.S. Department of Transportation (DOT), American Airlines, and DOT contractor Booz Allen Hamilton all were compromised, Morris said. If DOT systems were compromised, the department is unaware of the situation. "We haven't found any record of a problem," a DOT spokeswoman said Tuesday. Prevx obtained a sample of the Trojan used in the attacks on Friday of last week. By Saturday, it had tracked down a Web site, hosted by YahooÂ in Sunnyvale, California, where information from the compromised PCs was dropped. Because Prevx found a "massive amount" of job applications on the Web site used by the criminals, the company believes that victims may have downloaded the malicious software while thinking they were applying for a job. That Web site, which had probably been hacked by the criminals behind the scam, was shut down on Tuesday, Morris said. It hosted about 200MB of password information, and log-files on the server showed the IP addresses of the infected PCs. Victims of the Trojan, called Win32.PSWSteal.Gen , are told that their hard drive has been encrypted and that they will need to pay $300 to for a decryption tool. Morris believes this extortion threat is actually a ruse designed to conceal the attacker's true motivation: data gathering. "We think the ransomware is to point anyone investigating this down the wrong alley," he said. Morris said he is troubled that such a high percentage of the infected PCs are related to the transportation sector, which has been the target of terrorist attacks. "When we reverse-engineered the IP addresses of those computers, we couldn't believe that this was a daisy chain that led to government-associated sites and to other defense contractors, and to American Airlines," Morris said. "This was a very highly targeted attack." Criminals have increasingly turned to this type of targeted attack in order to collect and eventually sell data from corporations and government agencies, said Marcus Sachs, deputy director of research group SRI International's Computer Science Laboratory. But while Prevx's list of compromised organizations is "kind of scary," it's still hard to characterize what was motivating the attack, Sachs said. "I wouldn't necessarily associate it with terrorists," he said.
63702
TechWeb - Officials think the site's server was hacked sometime between Jan. 26 and Jan. 28.
665800
InfoWorld - The Web site for Indian antivirus vendor AvSoft Technologies has been hacked and is being used to install malicious software on visitors' computers, security researchers said Thursday.