eBank IT Online Banking Cross Site Scripting

Title: ====== eBank IT Online Banking - Multiple Web Vulnerabilities Date: ===== 2012-01-26 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=313 VL-ID: ===== 313 Introduction: ============= As a leading provider of innovative online banking software solutions, eBank-IT!...

eBank IT Online Banking - Multiple Web Vulnerabilities

Document Title: =============== eBank IT Online Banking - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=313 Release Date: ============= 2012-01-25 Vulnerability Laboratory ID VL-ID: ==================================== 313...

PostBank Online Banking - Non Persistent XSS Vulnerability

Document Title: =============== PostBank Online Banking - Non Persistent XSS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=139 Release Date: ============= 2012-01-25 Vulnerability Laboratory ID VL-ID: ====================================...

eBank IT Online Banking - Multiple Web Vulnerabilities

Document Title: =============== eBank IT Online Banking - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=313 Release Date: ============= 2012-01-25 Vulnerability Laboratory ID VL-ID: ==================================== 313...

PostBank Online Banking - Non Persistent XSS Vulnerability

Document Title: =============== PostBank Online Banking - Non Persistent XSS Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=139 Release Date: ============= 2012-01-25 Vulnerability Laboratory ID VL-ID: ====================================...

XERO Banking&Accounting - Cross Site Vulnerabilities

Document Title: =============== XERO Banking&Accounting - Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=316 Release Date: ============= 2012-01-22 Vulnerability Laboratory ID VL-ID: ==================================== 316...

XERO Banking&Accounting - Cross Site Vulnerabilities

Document Title: =============== XERO Banking&Accounting - Cross Site Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=316 Release Date: ============= 2012-01-22 Vulnerability Laboratory ID VL-ID: ==================================== 316...

Canopus Internet Banking FIVE SQL Injection

Title: ====== Canopus Internet Banking FIVE - Auth Bypass Vulnerability Date: ===== 2012-01-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=305 VL-ID: ===== 305 Introduction: ============= Automation of banks, small and medium sized, money transfer systems, corporate...

Canopus IB FIVE Application - Auth Bypass Vulnerability

Document Title: =============== Canopus IB FIVE Application - Auth Bypass Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/380.wmv View: http://www.youtube.com/watch?v=Kh5Qd3mMIs Release Date: ============= 2012-01-13 Vulnerability Laboratory ID...

Canopus IB FIVE Application - Auth Bypass Vulnerability

Document Title: =============== Canopus IB FIVE Application - Auth Bypass Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/380.wmv View: http://www.youtube.com/watch?v=Kh5Qd3mMIs Release Date: ============= 2012-01-13 Vulnerability Laboratory ID...

Canopus Internet Banking FIVE - Auth Bypass Vulnerability

Document Title: =============== Canopus Internet Banking FIVE - Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=305 Release Date: ============= 2012-01-11 Vulnerability Laboratory ID VL-ID: ==================================== 3...

Canopus Internet Banking FIVE - Auth Bypass Vulnerability

Document Title: =============== Canopus Internet Banking FIVE - Auth Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=305 Release Date: ============= 2012-01-11 Vulnerability Laboratory ID VL-ID: ==================================== 3...

New Zeus Variant Could Mean 'Gameover' for Unsuspecting Users

The FBI issued a warning late last week about ‘Gameover,’ a variant of the Zeus malware that can steal usernames and passwords. The malware is being propagated through spam e-mails purporting to come from the National Automated Clearing House Association NACHA, the Federal Reserve Bank and the...

FBI warning about Banking trojan "Gameover"

FBI warning about Banking trojan "Gameover" Organized crooks have begun launching debilitating cyber attacks against banks and their customers as part of a smoke screen to prevent victims from noticing simultaneous high-dollar cyber heists. On Friday the FBI issued a warning about a banking troja...

Cyber Security Fraud in the Banking Industry: Lessons Learned in OCC Examiner Training

In late October 2011, Coalfire participated in a day of IT audit training with about 35 bank examiners. As you would expect, we covered a lot of previously hot topics. The conversation changed as we started talking about the amount of fraud being realized by community banks and credit unions...

USAA Warns Members Of Sophisticated Phishing Scam

USAA is warning its members about a sophisticated phishing scam that attempts to install a malicious banking Trojan on members computers. The Texas-based financial services association issued a notice to members on Monday about what it described as an “aggressive email phishing scam” directed at...

Malware Writers Use Block Cipher in Latin America

The creators of banking trojan programs in Brazil are using sophisticated block ciphers to encrypt their malware, making detection by anti virus products more difficult. The discovery, by Kaspersky Lab researcher Dmitry Bestuzhev is the first known report of block ciphers being used in connection...

Brazil ISP servers under Massive DNS poisoning attacks

Brazil ISP servers under Massive DNS poisoning attacks Kaspersky Lab expert Fabio Assolini Report that A massive DNS cache poisoning attack attempting to infect users trying to access popular websites is currently under way in Brazil. Several large ISPs in the highly connected country have been...

Crime-Ring Orchestrators Plead Guilty to Fraud, Face Four Years

A pair of Ukrainian Nationals is each facing a four year, eight month sentence after pleading guilty at London’s Croydon Crown Court on October 31 to charges of conspiracy to defraud. According to a London Metropolitan Police report, the 29 year-old Yuriy Konovalenko also known as Pavel Klikov an...

Bogus Netflix Application For Android Steals Passwords, Won't Let You Watch Movies

A report from Symantec claims that malware authors tricked an untold number of Netflix users into coughing up their account credentials with a Trojan horse application that doubled as a Netflix app for the Android platform. In a blog post, Symantec researcher Irfan Asrar writes about a new piece ...