CVE-2010-4212

The USAA application 3.0 for Android stores a mirror image of each visited web page, which might allow physically proximate attackers to obtain sensitive banking information by reading application data...

Information disclosure

The USAA application 3.0 for Android stores a mirror image of each visited web page, which might allow physically proximate attackers to obtain sensitive banking information by reading application data...

CVE-2010-4212

The USAA application 3.0 for Android stores a mirror image of each visited web page, which might allow physically proximate attackers to obtain sensitive banking information by reading application data...

Wells Fargo, BoA Cited For Lax Mobile App Security

Days after publishing a report on serious security lapses in the PayPal mobile payments application for the iPhone, a Chicago firm has released an analysis that finds similar problems in a mobile banking applications by Bank of America and Wells Fargo. The report, published on Thursday by...

iPhone Jailbreak Tool Sets Stage for Mobile Malware

SAN DIEGO–The success of a group of hackers in compromising the security of Apple’s iPhone may set the stage for more malware for the popular handset, including rootkit-style remote monitoring tools and data stealing malware. In a presentation at the ToorCon Hacking Conference here on Saturday,...

Week in Review: Stuxnet Redux and The Wire's D.C. Edition

Stuxnet Redux and The Wire: United States Governments, the Internet and security were the theme as Internet wiretapping, trans national cyber laws and the further proliferation of Stuxnet – a computer virus believed to have state backing – topped this week’s news. After more than a week of intens...

More Than 60 Charged in N.Y. in Zeus Scam

The Manhattan district attorney on Thursday announced charges against 36 people in connection with the operation of the Zeus malware campaign. It’s the second major bust of suspects in the Zeus investigation this week, following the arrest of 20 people in the U.K. on Tuesday. The U.S. Attorney in...

Stolen Digital Certificates Becoming Standard Malware Components

In the 15 years or so of serious malware production before 2010, there had been perhaps a handful of examples of malicious programs using digitally signed binaries to bypass antimalware systems. The emergence of Stuxnet earlier this year brought this tactic into the center of the spotlight, and n...

Zeus Botnet Raids Result in 19 UK Arrests

UK police have arrested 19 cybercrime suspects who allegedly used the ZeuS crimeware toolkit to capture online banking credentials before looting victims’ bank accounts. Read the full article. The Register...

NJ Takedown puts spotlight on sophisticated bust out schemes

HED: NJ Takedown puts spotlight on sophisticated bust out schemes DEK: Mike Braatz of Memento Security says the complex schemes can run for years and may be the biggest source of banking fraud – but you didn’t hear that from the banks When FBI agents descended on Sang-Hyun a.k.a “Jimmy” Park and...

Zeus Variant Targets Mobile Online Banking Apps

Researchers have discovered a variant of the Zeus bot malware that specifically targets users who perform online-banking operations from the mobile phones, playing on the increasingly common use of SMS-based one-time passwords in order to dupe users into loading the malware. The attack begins wit...

Google Adds Two-Factor Authentication to Apps Accounts

Google has added a two-factor authentication mechanism to the login procedure for its Google Apps offerings, hoping that the addition will help cut down on the amount of fraudulent activity on these accounts. The way that Google has chosen to approach the problem of two-factor authentication is...

A Closer Look at Work at Home Scams

A recent chat with an individual who was almost tricked into helping organized criminals launder thousands of dollars stolen through e-banking fraud displayed one of the more clever and convincing money mule recruitment Web sites encountered. Read the full article. KrebsonSecurity...

Malwarians at the Gate: Banks, Businesses and ACH Fraud

Banks and their customers are on opposite ends of a feud over which is responsible when online banking accounts get hacked and pillaged. But where does the fault really lie? Banks and their customers are on opposite ends of a feud over which is responsible when online banking accounts get hacked...

Malwarians at the Gate: Banks, Business Customers and ACH Fraud

Banks and their customers are on opposite ends of a feud over which is responsible when online banking accounts get hacked and pillaged. But where does the fault really lie? And is there a cure for the plague of online banking fraud? You left your car unlocked. When you return, it was vandalized...

Malwarians at the Gate: Banks, Business Customers and ACH Fraud

Banks and their customers are on opposite ends of a feud over which is responsible when online banking accounts get hacked and pillaged. But where does the fault really lie? And is there a cure for the plague of online banking fraud? You left your car unlocked. When you return, it was vandalized...

TechCrunch Europe Was Hacked

TechCrunch Europe has cleaned up its website following the discovery of malicious code that left visiting surfers exposed to infection by a variant of the infamous Zeus banking Trojan. Read the full article. The Register...

Analyzing the Latest UK Banking Botnet

More details have emerged of how security researchers tracked down a Zeus-based botnet that raided more than $1m from 3,000 compromised UK online banking accounts. Read the full article. The Register...

6 Arrested in UK Online Bank Fraud Scheme

Six people have been arrested on suspicion of stealing credit cards, personal information and banking details as part of a suspected online banking fraud. Read the full article. Help Net Security...

iPhone Banking Flaw in Citi Bank App

Citigroup has urged customers conducting mobile banking from their iPhones to immediately upgrade because a security flaw in the older app secreted account information on the smartphone. Read the full article. Computerworld...