New Zeus Variant Could Mean 'Gameover' for Unsuspecting Users

The FBI issued a warning late last week about ‘Gameover,’ a variant of the Zeus malware that can steal usernames and passwords. The malware is being propagated through spam e-mails purporting to come from the National Automated Clearing House Association NACHA, the Federal Reserve Bank and the...

FBI warning about Banking trojan "Gameover"

FBI warning about Banking trojan "Gameover" Organized crooks have begun launching debilitating cyber attacks against banks and their customers as part of a smoke screen to prevent victims from noticing simultaneous high-dollar cyber heists. On Friday the FBI issued a warning about a banking troja...

Cyber Security Fraud in the Banking Industry: Lessons Learned in OCC Examiner Training

In late October 2011, Coalfire participated in a day of IT audit training with about 35 bank examiners. As you would expect, we covered a lot of previously hot topics. The conversation changed as we started talking about the amount of fraud being realized by community banks and credit unions...

USAA Warns Members Of Sophisticated Phishing Scam

USAA is warning its members about a sophisticated phishing scam that attempts to install a malicious banking Trojan on members computers. The Texas-based financial services association issued a notice to members on Monday about what it described as an “aggressive email phishing scam” directed at...

Malware Writers Use Block Cipher in Latin America

The creators of banking trojan programs in Brazil are using sophisticated block ciphers to encrypt their malware, making detection by anti virus products more difficult. The discovery, by Kaspersky Lab researcher Dmitry Bestuzhev is the first known report of block ciphers being used in connection...

Brazil ISP servers under Massive DNS poisoning attacks

Brazil ISP servers under Massive DNS poisoning attacks Kaspersky Lab expert Fabio Assolini Report that A massive DNS cache poisoning attack attempting to infect users trying to access popular websites is currently under way in Brazil. Several large ISPs in the highly connected country have been...

Crime-Ring Orchestrators Plead Guilty to Fraud, Face Four Years

A pair of Ukrainian Nationals is each facing a four year, eight month sentence after pleading guilty at London’s Croydon Crown Court on October 31 to charges of conspiracy to defraud. According to a London Metropolitan Police report, the 29 year-old Yuriy Konovalenko also known as Pavel Klikov an...

Bogus Netflix Application For Android Steals Passwords, Won't Let You Watch Movies

A report from Symantec claims that malware authors tricked an untold number of Netflix users into coughing up their account credentials with a Trojan horse application that doubled as a Netflix app for the Android platform. In a blog post, Symantec researcher Irfan Asrar writes about a new piece ...

Google Pushes Update For Chrome to Fix Faulty Microsoft Malware Detection

Google has pushed out an update for its Chrome browser that fixes a problem caused by the incident last week in which Microsoft Security Essentials mistakenly detected the browser as the Zeus bot and removed it from some machines. The update should automatically fix any damaged Chrome...

European Online Banking - Browser SSL Cert Bypass via IVE

Document Title: =============== European Online Banking - Browser SSL Cert Bypass via IVE References: =========== Download: http://www.vulnerability-lab.com/resources/videos/285.wmv View: http://www.youtube.com/watch?v=UB0tLo5E928 Release Date: ============= 2011-10-02 Vulnerability Laboratory ID...

European Online Banking - Browser SSL Cert Bypass via IVE

Document Title: =============== European Online Banking - Browser SSL Cert Bypass via IVE References: =========== Download: http://www.vulnerability-lab.com/resources/videos/285.wmv View: http://www.youtube.com/watch?v=UB0tLo5E928 Release Date: ============= 2011-10-02 Vulnerability Laboratory ID...

Troubling Cracks Showing in Internet's Security Foundation

The revelation last week that researchers Thai Duong and Juliano Rizzo had developed a new attack on SSL that gives them the ability to decrypt some protected sessions on the fly sparked a lot of discussions about the inherent problems of the protocol and whether it has outlived its usefulness. B...

Vulnerability Discovered in SpyEye Botnet, Exploit Available for Download

Vulnerability Discovered in SpyEye Botnet, Exploit Available for Download Blind SQL injection Vulnerability Discovered in SpyEye Botnet by S4uR4 r00tw0rm.com Exploit : Vulnn type : Blind SQL injection vuln script : frmcardsedit.php Affected version : ALL May use any botnet from : What is SpyEye ?...

Vulnerability Discovered in SpyEye Botnet, Exploit Available for Download

Vulnerability Discovered in SpyEye Botnet , Exploit Available for Download Blind SQL injection Vulnerability Discovered in SpyEye Botnet by S4uR4 r00tw0rm.com Exploit : Vulnn type : Blind SQL injection vuln script : frmcardsedit.php Affected version : ALL May use any botnet from...

SpyEye Trojan stole $3.2 million from US victims,Android users will be next target !

SpyEye Trojan stole $3.2 million from US victims,Android users will be next target ! A Russian cybergang headed by a mysterious ringleader called 'Soldier' were able to steal $3.2 million £2 million from US citizens earlier this year using the SpyEye-Zeus data-stealing Trojan, security company...

Ice IX: Not Cool At All

My colleague Jorge Mieres recently found a C&C server of a botnet based on a malicious program called Ice IX. As announced on several user forums, Ice IX is a bot created using the source code of ZeuS 2.0.8.9, which became publicly available in May. The author of the new bot says the program...

Variant of SpyEye Targets Android Devices

Researchers at security firm Trusteer claim a new version of the SpyEye Trojan horse program that targets mobile banking users with Android mobile phones and intercepts SMS text messages to and from the phone. However, significant obstacles may prevent it from spreading. Writing on the company’s...

Subsembly Banking 3.1.x - Persistent Filter Vulnerability

Document Title: =============== Subsembly Banking 3.1.x - Persistent Filter Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=74 Release Date: ============= 2011-09-11 Vulnerability Laboratory ID VL-ID: ==================================== 74...

Subsembly Banking 3.1.x - Persistent Filter Vulnerability

Document Title: =============== Subsembly Banking 3.1.x - Persistent Filter Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=74 Release Date: ============= 2011-09-11 Vulnerability Laboratory ID VL-ID: ==================================== 74...

HDFC Bank Database Hacked by zSecure team using SQL injection vulnerability

HDFC Bank Database Hacked by zSecure team using SQL injection vulnerability zSecure team is back in news again, this time they have discovered a critical SQL injection vulnerability in HDFC Bank's Web Portal. Using this critical flaw HDFC Bank's various databases can be accessed and dumped as wel...