New Android Banking Trojan targeting Korean users

A very profitable line for mobile malware developers is Android Banking Trojans, which infect phones and steal passwords and other data when victims log onto their online bank accounts. One recent trend is Android malware that attacks users in specific countries, such as European Countries, Brazi...

New Android Banking Trojan targeting Korean users

None...

Threat Outbreak Alert: Fake Bank Payment Advice Notification Email Messages on October 18, 2013

Medium Alert ID: 31370 First Published: 2013 October 21 14:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain banking information for the recipient. The text in the email message attempts to convince the recipient to ope...

trs某系统任意文件下载漏洞第二弹

简要描述： 感觉挺严重的问题，存在的地方包括但是不局限银行、政府等行业。 详细说明： exp inforadar/jsp/util/filedownload.jsp?filePath=../../../../../../../etc/passwd exp2 http://inforadar.trs.com.cn/jsp/util/filedownload.jsp?filePath=c:%5Cboot.ini%00.xml 官方网站需要加个截断，就可以了 应该是神马雷达系统。 很多地方都有这问题。 但是google找不到多少个，因为很多都是二次开发，目录明改变了。 比如招行。。。...

Threat Outbreak Alert: Fake Online Banking Transaction Notification Email Messages on October 14, 2013

Medium Alert ID: 31243 First Published: 2013 October 14 14:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain personalized bank payment details for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Online Banking Payment Notification Email Messages on October 10, 2013

Medium Alert ID: 31196 First Published: 2013 October 11 01:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain online banking payment notification for the recipient. The text in the email message attempts to convince the...

Ukrainian Banking App Vulnerable to Attack

Privat24, the mobile banking application for Ukraine’s largest commercial bank, contains an insufficient validation vulnerability in its iOS, Android, and Windows phone apps that could give an attacker the ability to steal money from user accounts after bypassing its two-factor authentication...

UniCredit Bank Cross Site Request Forgery / Cross Site Scripting / Shell Upload

============================================================================================== UNICREDITBANK Cross Site Scripting & Dom Based / File Upload / form without CSRF protection = ============================================================================================== TIME-LINE...

Threat Outbreak Alert: Fake Bank Payment Notification Email Messages on September 18, 2013

Medium Alert ID: 30880 First Published: 2013 September 19 19:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank payment notification for the recipient. The text in the email message attempts to convince the...

Shylock/Caphaw Banking Malware Infections on the Rise

Two dozen major U.S. and European banks are in the crosshairs of the Shylock, or Caphaw, financial malware of late, and victims who trade with one of the 24 financial institutions are at risk of giving up their credentials and losing assets in their accounts. Malware researchers have noticed a ri...

Vodafone Germany Hacked; Attackers accesses banking data of two million customers

Vodafone Germany has been hacked and Personal details of more than two million customers have been compromised, some including banking details. Stole data includes names, addresses, birth dates, and bank account information, but the hacker had no access to credit-card information, passwords, PIN...

Vodafone Germany Hacked; Attackers accesses banking data of two million customers

Vodafone Germany has been hacked and Personal details of more than two million customers have been compromised, some including banking details. Stole data includes names, addresses, birth dates, and bank account information, but the hacker had no access to credit-card information, passwords, PIN...

Hesperbot - A New Banking Trojan that can create hidden VNC server on infected systems

Security firm ESET has discovered a new and effective banking trojan, targeting online banking users and designed to beat the mobile multi-factor authentication systems. Hesperbot detected as Win32/Spy.Hesperbot is very identical to the infamous Zeus and SpyEye Banking Malwares and infects users ...

Hesperbot - A New Banking Trojan that can create hidden VNC server on infected systems

Security firm ESET has discovered a new and effective banking trojan, targeting online banking users and designed to beat the mobile multi-factor authentication systems. Hesperbot detected as Win32/Spy.Hesperbot is very identical to the infamous Zeus and SpyEye Banking Malwares and infects users ...

Hand of Thief Linux Banking Trojan Not Ready For Primetime

Upon further examination, a new banking Trojan variant may not be as commercially viable as it was thought to be. Researchers at RSA Security have peeled back the layers this week on the Hand of Thief banking Trojan, a piece of malware that made headlines over the summer after it was thought to b...

Questions Linger About New Linux 'Hand of Thief' Trojan

It looks like cybercriminals will soon be able to add yet another Trojan to their hacking repertoire, the Hand of Thief banking malware that targets Linux machines. Currently being sold on the Russian black market, Hand of Thief is fetching $2,000 USD €1,500 EUR but could be poised to run a cool...

Threat Outbreak Alert: Fake Online Banking Account Credential Information Email Messages on August 1, 2013

Medium Alert ID: 30276 First Published: 2013 August 1 15:58 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam e-mail messages that claim to contain online banking account credential information for the recipient. The text in the e-mail message attempts to...

Threat Outbreak Alert: Fake Online Banking Software Security Update Email Messages on July 30, 2013

Medium Alert ID: 30264 First Published: 2013 July 31 14:10 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an online banking software security update notification for the recipient. The text in the email message attempts...

KINS Banking Trojan For Sale in Underground Forum

It seems the cybercrime underground is pining for a new breed of banking Trojan. With heavyweights such as Citadel no longer generally available for purchase, rumblings on forums for months have indicated that a new project would be welcomed and financed. Since February, researchers at RSA’s...

Disaster date: the Internet in China was tragically Struts2 high-risk vulnerabilities-torn-vulnerability warning-the black bar safety net

Struts is the Apache Foundation's Jakarta project team an open source project, Struts by using Java Servlet/JSP technology, the Java EE-based Web applications Model-View-Controller（MVC design pattern application framework, MVC is a classic design pattern in a classic product. Currently, the Strut...