Threat Outbreak Alert: Fake Invoice Payment Confirmation Email Messages on January 24, 2014

Medium Alert ID: 32566 First Published: 2014 January 24 20:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain payment information for the recipient. The text in the email message attempts to convince...

Threat Outbreak Alert: Fake Payment Details Notification Email Messages on January 23, 2014.

Medium Alert ID: 32553 First Published: 2014 January 24 15:12 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain payment details for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Bank Payment Notification Email Messages on January 23, 2014

Medium Alert ID: 32562 First Published: 2014 January 24 15:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank payment copy for the recipient. The text in the email message attempts to convince the recipient to ope...

Neiman Marcus Says 1.1M Cards Compromised in Data Breach

The attackers who penetrated the Neiman Marcus network last year were on the network for at least three months and made off with credit and debit card data belonging to 1.1 million customers. The company said that the data breach was the result of a compromise that began in mid-July and ran until...

Threat Outbreak Alert: Fake Account Payment Notification Email Messages on January 22, 2014

Medium Alert ID: 32522 First Published: 2014 January 22 18:33 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank transaction notification for the recipient. The text in the email message attempts to convince the...

CVE-2014-0669

The Wireless Session Protocol WSP feature in the Gateway GPRS Support Node GGSN component on Cisco ASR 5000 series devices allows remote attackers to bypass intended Top-Up payment restrictions via unspecified WSP packets, aka Bug ID CSCuh28371...

Code injection

The Wireless Session Protocol WSP feature in the Gateway GPRS Support Node GGSN component on Cisco ASR 5000 series devices allows remote attackers to bypass intended Top-Up payment restrictions via unspecified WSP packets, aka Bug ID CSCuh28371...

CVE-2014-0669

The Wireless Session Protocol WSP feature in the Gateway GPRS Support Node GGSN component on Cisco ASR 5000 series devices allows remote attackers to bypass intended Top-Up payment restrictions via unspecified WSP packets, aka Bug ID CSCuh28371...

Threat Outbreak Alert: Fake Payment Confirmation Email Messages on January 20, 2014

Medium Alert ID: 32498 First Published: 2014 January 21 21:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment confirmation notice for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Online Bill Payment Notification Email Messages on January 20, 2014

Medium Alert ID: 32495 First Published: 2014 January 21 16:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an online bill payment notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake TT Payment Copy Attachment Email Messages on January 17, 2014

Medium Alert ID: 32485 First Published: 2014 January 21 16:01 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain telegraphic transfer TT payment copy attachment confirmation for the recipient. The text in the email message...

Private Messaging App Vendor Wickr Offers Hackers $100,000 for Bugs

Bug bounty programs, for the most part, have been the domain of large software vendors and Web companies such as Google, Mozilla, Microsoft, PayPal and Facebook. But some smaller companies are now getting involved, with the latest one to announce a bounty being Wickr, the maker of secure messagin...

Detecting and Preventing Compromises in Retail Payment Systems

Information Weeks Matthew Swartz published an article on the recently- confirmed payment card breaches at Target, Nieman Marcus and three other unnamed retailers. This article and many others reveal that these attacks involve sophisticated malware and some even suggest it is the work of the same...

Threat Outbreak Alert: Fake Payment Slip Attachment Email Messages on January 9, 2014

Medium Alert ID: 32398 First Published: 2014 January 10 15:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment slip attachment for the recipient. The text in the email message attempts to convince the recipient ...

RAM Scrapers and the Target Data Breach

The retail and hospitality industries have a painful history with wonky point-of-sale systems and malware known as RAM scrapers. These attacks, which date back as many as six years, are designed to be injected into running processes and steal payment card data before it’s encrypted by a...

UAEPD Shopping Script SQL Injection

uaepd script – Multiple Sql Injection Vulnerabilty ==================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : [email protected] , [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.uaepd.net/ .:. Dork :...

Threat Outbreak Alert: Fake Invoice Payment Confirmation Email Messages on January 6, 2014

Medium Alert ID: 32329 First Published: 2014 January 6 21:16 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an invoice confirmation notification for the recipient. The text in the email message attempts to convince the...

PrisonLocker Ransomware Emerges From Criminal Underground

Security researchers from Malware Must Die uncovered new ransomware called PrisonLocker, and said the malware author is either a legitimate security researcher or is posing as one via a personal blog and Twitter handle. Malware Must Die has monitored PrisonLocker’s development since spotting it f...

Threat Outbreak Alert: Fake Account Payment Information Email Messages on April 24, 2014

Medium Alert ID: 32294 First Published: 2014 January 2 19:14 GMT Last Updated: 2014 April 25 12:30 GMT Version: 70 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain payment information for the recipient. The text in the email message...

Use of 3DES to Encrypt Stolen Target PIN Data Invites Worry

Target Corp.’s admission that encrypted PIN data was stolen in the Black Friday breach was bad news for consumers. For security experts, especially cryptographers, particular exception was taken to the retail giant’s use of Triple DES 3DES encryption to keep the PIN data safe. With all crypto...