3972 matches found
Man in the Browser: Inside the Zeus Trojan
Man in the Browser a.k.a MITB is a new breed of attacks whose primary objective is to spy on browser sessions mostly banking and in that process intercept and modify the web page contents transparently in the background. In a classic MITB attack, it’s very likely that what the user is seeing on...
73 Percent of Users Reuse Banking Passwords
The majority of online banking customers reuse their online-banking login credentials on other websites, according to a new survey on password insecurity. Read the full article. The Register...
Hackers Winning Bank Authentication Battle
Security measures such as the use of one-time passwords and phone-based user authentication — considered among the most robust forms of IT defenses — are no longer enough to protect online banking systems against fraud, a Gartner report warns. Read the full article. Computerworld...
Inside An Online Banking Money Mule Scam
New evidence indicates one of the gangs chiefly responsible for bank attacks actually managed to hack directly into a West Virgina U.S. bank last year and siphon off tens of thousands of dollars with the aid of unsuspecting money mules. Read the full article. KrebsonSecurity...
User Logins At New York Bank Hacked
Hackers have stolen the login credentials for more than 8,300 customers of New York’s Suffolk County National Bank after breaching its security and accessing a server that hosted its online banking system. Read the full article. The Register...
Malware Open Season on Taxpayers
As any reader of this site knows, cybercriminals can steal your money not just by putting malware on your machine, but by phishing attacks too. Phishing attacks don’t just target online banking and e-payment systems, but almost any site which asks the user to input sensitive data. Sites run by...
Small Biz Targeted by Banking Criminals
The American Bankers Association and the FBI are advising small and midsize businesses that conduct financial transactions over the Internet to dedicate a separate PC used exclusively for online banking as they ahve become targets of banking malware. Read the full article. The Last Watchdog...
Cisco Defines Cybercrime ROI
The Cisco Cybercrime Return on Investment Matrix identifies the innovative and lucrative banking Trojan Zeus, as well as successful Web exploits that have dominated cybercrime as “rising stars.” Read the full article. TechTarget...
UK Police Arrest 2 in Zbot Plot
Authorities in the U.K. have arrested two people in connection with using a notorious Trojan in a scheme to steal online banking information. The man and the woman, both 20, were arrested by the Metropolitan Police Service in Manchester, according to police. The duo is accused of using the Zeus...
Online Banking Criminals Sentenced in UK
U.K. police are hailing the sentencing of four people who used a sophisticated Trojan horse program to siphon money out of online bank accounts. The men used a Trojan horse program called PSP2-BBB that executed a so-called man-in-the-browser attack when potential victims logged into online bank...
Citing Cybercrime, FBI Director Doesn't Bank Online
The head of the U.S. Federal Bureau of Investigation has stopped banking online after nearly falling for a phishing attempt. FBI Director Robert Mueller said he recently came “just a few clicks away from falling into a classic Internet phishing scam” after receiving an e-mail that appeared to be...
Online Banking Threats, Circa 1999
In this Dateline NBC video from 1999, experts, including an unnamed Chris Wysopal, then of the L0pht, now of Veracode, discuss the dangers of online banking and the use of Trojans to steal data. Everything old is new again...
Researcher Publishes Valid Wildcard SSL Certificate
In the wake of Moxie Marlinspike’s SSL talk at Black Hat this summer, another security researcher has used the technique described in the talk to create and publish a valid wildcard certificate and private key that could be used to fool browsers into believing a site is legitimate when it is in...
Hackers Using Custom Trojans to Hide Online Bank Thefts
Online criminal gangs have begun using special malware that enables them to hide the amount of money that they’re stealing from victims’ online banking accounts, helping them evade detection for longer periods of time and extend the effectiveness of their crime sprees. Using a banking Trojan call...
Modern Banker Malware Undermines Two-Factor Authentication
Once pitched as an additional layer of security for E-banking transactions, two-factor authentication is slowly becoming an easy to bypass authentication process, to which cybercriminals have successfully adapted throughout the last couple of years. Read the full story zdnet.com. Also see this MI...
New Security Standards for Mobile Payments Coming
From SC Magazine Angela Moscaritolo A financial services technology group is developing standards for making secure mobile payment transactions. The goal of the project, an effort of the Financial Services Technology Consortium FSTC, is to develop standards and processes so that banking customers...
New fake banking cert attacks in play
From eWEEK Matt Hines Researchers with security training experts SANS Institute have reported the emergence of a new wave of attacks seeking to take advantage of trust in online banking sites and digital certificate e-banking security programs. The involved attacks target customers of Bank of...
Frontline in phishing and online fraud still expanding
As some consumers play a growing role in the fight against online fraud and phishing, others need more education on the problem. That’s the bottom line from a panel discussion that included risk managers from Bank of America, JP Morgan Chase, and PayPal. Consider the experience of Bank of America...
Cambridge researchers slam banking card readers
The Register is reporting on a new study by Cambridge security researchers that show that card readers for online banking are inherently insecure. Researchers Saar Drimer, Steven J Murdoch and Ross Anderson found a number of serious security shortcomings after reverse engineering the underlying...
