Regional Bank Trojans Slip Under the Radar

Cybercrooks have developed regionally-targeted banking Trojans that are more likely to slip under the radar of security defenses. Read the full article. The Register...

A Closer Look At Security Insurance

An inside look at a California-based engineering company defrauded by an online banking Trojan, automated clearing house transfers, East-coast based money mules, yet the company was holding a cybersecurity insurance policy and looks to recover all of its stolen funds. Read the full article...

Watching MiTB Behavior in Banking Attacks

Man-in-the-browser attacks are increasingly being used to successfully bypass authentication mechanisms used by online banking sites, according to a security researcher. Read the full article. eWEEK Security Watch...

Banking Botnet in Eastern Europe Steals, Disrupts

Banks in Russia and Ukraine are under continued siege by criminal gangs wielding a sophisticated, next-generation exploitation kit that hacks the financial institutions’ authentication system and then hits it with a denial-of-service attack. Read the full article. The Register...

New Tabbed Browsing Phishing Attack Exploits User Trust

A researcher has developed a new type of phishing attack that takes advantage of the way that browsers handle tabbed browsing and enables an attacker to use a script running in one tab to completely change the content in another tab. The attack, demonstrated by Aza Raskin of Mozilla, could be use...

The Coming Wave of Mobile Attacks

The pace of innovation on mobile phones and other smart wireless devices has accelerated greatly in the last few years, adding features, speed and computing power. But now the attackers are beginning to outstrip the good guys on mobile platforms, developing innovative new attacks and methods for...

Fire Alarm Co. Latest Credential-Theft Victim

A fire alarm company in Arkansas lost more than $110,000 this month when hackers stole the firm’s online banking credentials and drained its payroll account. Read the full article. KrebsonSecurity...

New Zeus Botnet Variant Targets Firefox

A new version of the data-stealing trojan Zeus is for the first time able to successfully exploit Mozilla’s Firefox browser to commit sophisticated online banking fraud. Read the full article. Secure Computing...

Top 20 'Critical Controls' from SANS Institute

The SANS Institute has released critical security controls for cyber defense agreed to by a consortium of agencies including: “NSA, US Cert, DoD, DoD JTF-GNO, the Department of Energy Nuclear Laboratories, Department of State, DoD Cyber Crime Center plus the top commercial forensics experts and p...

Inside a Banker Trojan

The attackers behind the raft of banker Trojans emanating from Brazil these days are continuing to refine their craft and learn new tricks. Their latest efforts have seen them going to greater lengths than ever to obfuscate their creations and hide their true functionality in order to evade...

Dental Practice Loses $200K to Criminals

Organized computer criminals yanked more than $200,000 out of the online bank accounts of a Missouri dental practice this month, in yet another attack that exposes the financial risks that small- to mid-sized organizations face when banking online. Read the full article. KrebsonSecurity...

Facebook Spam Tries to Phish Credentials

Hackers have flooded the Internet with virus-tainted spam that targets Facebook’s estimated 400 million users in an effort to steal banking passwords and gather other sensitive information. The emails tell recipients that the passwords on their Facebook accounts have been reset, urging them to...

Zeus/Zbot Banking Trojan/Data Theft (credentialed check)

The remote Windows host has files that indicate that the Zeus also known as Zbot banking trojan has been installed, or that stolen data collected by this trojan remains on the system. The Zeus trojan will intercept and log activity related to online banking, as well as other logins, such as web,...

Banking Losses for Small Biz Blowing Up

Most small business owners have no clue about the threats they face or the liability they assume when banking online, even as the frequency and sophistication of attacks appears to be increasing. Read the full article. KrebsonSecurity...

Online Banking Crime By The Numbers

Organized cyber criminals stole more than $25 million from small to mid-sized businesses in brazen e-banking heists in the 3rd quarter of 2009 alone, federal regulators said last week. Read the full article. KrebsonSecurity...

RSA 2010: BlackEnergy 2 Botnet Revealed

Like the sequel to a successful movie, the botnet behind the distributed denial of service attacks that hit the country of Georgia during its conflict with Russia in 2008 has been updated. This time though, the idea isn’t hacktivism—it’s stealing financial data and, unlike in the case of other...

RSA 2010: Banking Malware Sophistication Dupes Systems

The new class of threat represented by today’s banking malware like ZeuS can defeat much of the technology out there to combat it, admitted RSA bank-security panelists. Read the full article. Tech Target...

Mariposa Botnet Caught and Killed

Authorities have smashed one of the world’s biggest networks of virus-infected computers known as the Mariposa botnet, a data vacuum that stole credit cards and online banking credentials from as many as 12.7 million poisoned PCs. Read the full article. Associated Press...

Bank Trojan Annoys Users With Pop Ups

Researchers recently came face to face with a Trojan with an aggressive modus operandi – it continually forces you to update your banking credentials with irritating pop up windows. Read the full article. Help Net Security...

Here's How to Fix Online Banking Fraud

Guest editorial by Roel Schouwenberg Over the last few months, there’s been quite a lot of news chatter around Banker Trojans emptying out online bank accounts of small businesses in the U.S. Today, I was reading one of such stories on Brian Krebs’ site. After reading that story I came across...