Mobile Banking Malware: Protect Your Finances

The prolific rise in smartphones, tablets and other portable devices has greatly expanded the ways in which we interact with personal and professional services. The public can now singlehandedly use their mobile device to pay for things with the ease of flashing their cell phone. Unfortunately,...

Money Mules, Not Customers, The Real Victims of Bank Fraud

Money mules – the accomplices who help move stolen funds – may be the real victims of online banking scams, not the bank customers who are the ostensible targets of fraudsters, according to new research from Microsoft. In a paper that turns conventional thinking about online banking crime on its...

Carberp Banking Trojan Scam - 8 Arrested in Russia

Carberp Banking Trojan Scam - 8 Arrested in Russia 8 Men suspected of being involved in the Carberp phishing scam have been arrested in Russia. The men were arrested after a joint investigation by the Russian Ministry of Internal Affairs MVD and Federal Security Service FSB. According to the MVD,...

Video: College Professor, Students Crack Zeus Trojan Mystery

A segment from last night’s Rock Center, Brian Williams’ TV news magazine, gives the inside scoop on how a college professor and his students helped law enforcement crack one of the largest and most profitable banking Trojan operations around. Reporter Richard Engel sat down with Gary Warner, a...

Russian Agencies Take Down Carberp Gang

A collaborative effort between a Russian security company and two Russian federal agencies has yielded the arrest of eight men allegedly involved in the Carberp Trojan scam, it was announced today. Officials from Russia’s Ministry of Internal Affairs MVD and Federal Security Service FSB, along wi...

Malicious Android application stealing banking credentials

Malicious Android application stealing banking credentials A new form of smart Android malware can not only steal your online banking information, but update itself in the future and secretly send contact information stored on your device off to the Bad Guys. Security researchers at McAfee have...

Android Malware Stealing Online Banking Credentials

Malware that targets Android phones has been on a steady rise for the last couple of years, and much of it has come in the form of compromised apps or outright malicious apps disguised as games or utilities. But now researchers have come across a new Android threat that is designed specifically t...

Fake Chat Screen Malware Hijacks Banking Customers

A new attack against online banking customers uses a malware platform to trick its victims into verifying bogus transactions. The attack, first described by Trusteer CTO Amit Klein, waits for an unsuspecting business banking customer to log online before telling them that “security checks” need t...

Postal savings banks the UKEY useless-vulnerability warning-the black bar safety net

Today to the postal Savings Bank postal savings bank of china to go to the opening of the postal green card through the online banking, in order to safeguard the Bank account of the funding security, the requirements for online banking opened UKEY protection, the Bank staff attitude good, and...

CVE-2012-1020

Multiple cross-site scripting XSS vulnerabilities in login.php in NexorONE Online Banking allow remote attackers to inject arbitrary web script or HTML via the 1 visitorlanguage parameter to register.php or 2 message parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in login.php in NexorONE Online Banking allow remote attackers to inject arbitrary web script or HTML via the 1 visitorlanguage parameter to register.php or 2 message parameter...

CVE-2012-1020

CVE-2012-1020 affects NexorONE Online Banking: XSS in login.php where an attacker can inject arbitrary script/HTML by supplying (1) visitor_language to register.php or (2) message parameter. Public records (NVD, CVE List, PRION) confirm the vulnerability across multiple references, with the attac...

CVE-2012-1020

Multiple cross-site scripting XSS vulnerabilities in login.php in NexorONE Online Banking allow remote attackers to inject arbitrary web script or HTML via the 1 visitorlanguage parameter to register.php or 2 message parameter...

VolksBank Online Banking - Multiple Web Vulnerabilities

Document Title: =============== VolksBank Online Banking - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=172 Release Date: ============= 2012-02-07 Vulnerability Laboratory ID VL-ID: ==================================== 172...

VolksBank Online Banking Cross Site Scripting / Redirection

Title: ====== VolksBank Online Banking - Multiple Web Vulnerabilities Date: ===== 2012-02-07 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=172 VL-ID: ===== 172 Introduction: ============= Die Volksbank AG trifft eine Reihe von Sicherheitsvorkehrungen, die einen...

Citigroup sites hit by Brazilian Anonymous hacker #OpWeeksPayment

Citigroup sites hit by Brazilian Anonymous hacker Citigroup has confirmed its consumer banking sites were temporarily offline Friday because of what a bank spokesman referred to as temporary outages. Hackers with Anonymous have claimed to be behind the attacks. The operation behind the attacks...

NexorONE Online Banking Cross Site Scripting

Title: ====== NexorONE Online Banking - Multiple Cross Site Vulnerabilities Date: ===== 2012-02-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=304 VL-ID: ===== 304 Introduction: ============= NexorONE is the leading online banking software provider for Private...

NexorONE Online Banking - Multiple Cross Site Vulnerabilities

Document Title: =============== NexorONE Online Banking - Multiple Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=304 Release Date: ============= 2012-02-04 Vulnerability Laboratory ID VL-ID: ==================================...

NexorONE Online Banking - Multiple Cross Site Vulnerabilities

Document Title: =============== NexorONE Online Banking - Multiple Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=304 Release Date: ============= 2012-02-04 Vulnerability Laboratory ID VL-ID: ==================================...

Video: New Banking Trojan Caught Breaking CAPTCHA

A new banking Trojan variant can bypass CAPTCHA, as demonstrated by a video posted today by security firm Websense on their Security Labs blog. Once downloaded to the machine, Cridex, a data-stealing Trojan, will track content from various web forms. Cridex also downloads a ‘spamming module’ to t...