Cyber Security Fraud in the Banking Industry: Lessons Learned in OCC Examiner Training

In late October 2011, Coalfire participated in a day of IT audit training with about 35 bank examiners. As you would expect, we covered a lot of previously hot topics. The conversation changed as we started talking about the amount of fraud being realized by community banks and credit unions...

Reports Point to Credit Card Processor Breach in Europe

The Romanian Banks Association has issued a warning to credit card users in that country to be on the lookout for suspicious charges, after the Agency received notice of a possible breach at European credit card processor.PDF The warning followed a similar notice from CEC Bank on Wednesday that i...

DNS Hijacks Now Being Used to Serve Black Hole Exploit Kit

Attackers have been going after various pieces of the DNS infrastructure for a long time now, and it’s not unusual for there to be somewhat organized campaigns that target certain vertical industries or geographic regions. But researchers lately have been seeing an interesting pattern of...

Anonymous Release Press Release for Operation Tarmageddon

Anonymous Release Press Release for Operation Tarmageddon Early in July, Anonymous said it planned to attack oil firms and banks supporting the controversial extraction of oil from sand in Alberta, Canada. Exxon Mobil, ConocoPhillips, Canadian Oil Sands, Imperial Oil, and the Royal Bank of Scotla...

Operation Satiagraha - Brazil Corruption Scandal exposed, #Antisec provide 5GB of evidence

Operation Satiagraha - Brazil Corruption Scandal exposed , Antisec provide 5GB of evidence Once Again Pandora's box is open. In a joint move between LulzSec and Anonymous, as part of Operation Antisec, were released documents, photos, audio files and videos, exposing that wich was one of the...

Timesofmoney Database Hacked using Sql Injection Vulnerability

Timesofmoney Database Hacked using Sql Injection Vulnerability General Information About the Vulnerability This is again a critical vulnerability discovery made by zSecure Team in TimesofMoney website. The group claims that there exist a critical SQL Inejction Vulnerability in the timesofmoney's...

Timesofmoney Database Hacked using Sql Injection Vulnerability

Timesofmoney Database Hacked using Sql Injection Vulnerability General Information About the Vulnerability This is again a critical vulnerability discovery made by zSecure Team in TimesofMoney website. The group claims that there exist a critical SQL Inejction Vulnerability in the timesofmoney's...

Obama wants Internet ID for Every American !!

Everyone in the UK will already be familiar with this story with the New Labour's plan for biometric identity cards. That plan, which costs billions of pounds and was later shelved by the new coalition government, will now probably never happen in the UK. Now US President Barak Obama wants to...

Undetectable fake ATM keyboard steals PINs in real time !

Thieves and scammers are an inventive bunch, especially when it comes to stealing you money indirectly. And the latest discovery of a fake keyboard that is placed over an ATM's legitimate one and records the typed-in PIN - in conjunction with a fake magnetic strip reader that can be manufactured...

Three cyber crimes a week in Andhra Pradesh this year !

Andhra Pradesh witnessed three cyber crimes a week on average in 2010 and a majority of them were Nigerian frauds, according to the state crime investigation department. Briefing media on the latest case, Additional SP cyber crimes U Ramamohan said this was the 54th case this year registered at t...

Martinweb CMS Cross Site Scripting / SQL Injection

Hello Full-Disclosure! I want to warn you about vulnerabilities in Martinweb CMS. It's Ukrainian commercial CMS which is used particularly at web sites of security companies and banks. ------------------------- Affected products: ------------------------- Vulnerable are possibly all versions of...

Banks Lack Cybersecurity Measures: Top Interpol Official Raises Concerns

A top Interpol chief has expressed concerns about the cybersecurity measures in banks across the region. According to Major Ali Qubaisi, the Interpol team leader for the Middle East and North Africa, and head of the Economic Crimes unit of the Qatari Interior Ministry, banks in the region are...

CBI was actually Hacked By Hamza (Zombie_KSA) !

CBI was actually Hacked By Hamza ZombieKSA CBI was Hacked By Hamza, Know as ZombieKSA. He is from Kingdom of Saudi Arabia. ZombiEKsA he is famous Pakistani Hacker , member of PAKbugs ! have hacked alot BiG sites ! Including 3 Indian banks, 4 Indian police websites ! Indian CID !! and Now CBI also...

U.S. Court Finds Two Russian Hackers Guilty of $1.3 Million Bank Fraud

A US court has found two Russian hackers guilty of bank fraud, involving over $1.3 million. The investigation revealed that the fraudsters broke into computer systems of various companies and used the obtained banking data to steal money from their bank accounts. Authorities believe the fraudster...

В США задержаны 11 хакеров из России

Они входили в преступную группу, похитившую из американских банков 3 млн долларов Дмитрий ГОНЧАРУК, Никита КРАСНИКОВ — 05.10.2010 Еще шесть граждан России были задержаны в США по обвинению в причастности к команде мошенников, которая воровала деньги с банковских счетов. Гражданство других девяти...

Researchers Find Government Site Hosting Phishing Data

Phishing gangs have been getting bolder of late, and there’s no clearer evidence than the cache of phishing data that researchers at Sunbelt found on a site owned by the Paraguayan government.The researchers discovered that a site belonging to the federal government in Paraguay is currently hosti...

Changes to Flash Good for Bank Fraud

When the final version of Adobe Flash Player 10.1 hits desktops later this year, it will bring with it new functionality designed to allow users to automatically clear Flash cookies after a Web session. But while the feature may be lauded in the name of privacy, it may also force online banks to...

Banks Cover Crime Victims Case By Case

When a computer virus infection at a business allows thieves to steal tens of thousands of dollars from the company’s commercial banking account, banks typically don’t reimburse the victim company. But the truth is, most banks make that decision on a case-by-case basis. Take, for example, the cas...

Financial Industry Group Plans Cyber Attack Simulation

A financial services industry group is planning to simulate a series of cyber attacks to test how well banks, payment processors and retailers deal with online threats. Participants will be expected to activate their incident response procedures in accordance with the scenario presented and to...

Jobs Fighting Cybercrime Are In Demand

Banks, military contractors and software companies, along with federal agencies, are looking for “cyber ninjas” to fend off a sophisticated array of hackers, from criminals stealing credit card numbers to potential military adversaries. Read the full article. NY Times...