CVE-2012-1707: Undefined Security Weakness

Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 5.0.2, 5.3.0 through 5.3.4, 6.0.1, and 6.2.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Core-Base, a different vulnerability than...

CVE-2012-0579: Undefined Security Weakness

Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and 11.0.0 through 11.4.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Core...

CVE-2012-0575: Undefined Security Weakness

Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Software 10.0.0 through 10.5.0 and 11.0.0 through 11.2.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Core...

Citing Terms Of Service, Google Takes Down Blog Of Iranian Security Researcher

An Iranian man who revealed a vulnerability in a widely used point of sale POS system in Iran had his blog confiscated by Google, which cited violations of its Terms of Service. A Google spokesman acknowledged that the company pulled down the Blogger site that Khosrow Zarefarid, an Iranian IT...

Malware Poses as US Department of Justice Violation Notice

Posing as the US Department of Justice DoJ, a new variant of the Citadel Malware called Reveton is responsible for a ransomware campaign that attempts to extort $100 from its victims. The infections are occurring after users are lured to a drive-by download site where a dropper installs the Citad...

German Court Rules Victims – Not Banks – at Fault in Phishing Scams

A German court ruled earlier this week that victims of phishing scams, and not banks, are responsible for money lost in online scams. The German Federal Court of Justice in the town of Karlsruhe made the ruling on Tuesday, according to English language German newspaper The Local, which called the...

Specialized Trojan can stealing credit card details from hotel

Specialized Trojan can stealing credit card details from hotel The next time you check in to a hotel, a cybercriminal could be checking you out. A remote access computer Trojan RAT designed to steal credit card details from hotel point-of-sale PoS applications is being sold on the underground...

Errors, Outliers Obscure Cybercrime Losses

Estimates of the extent of cyber crime are hopelessly overblown, two computer security researchers argue in an editorial from Sunday’s New York Times. Arguing counter to the prevailing opinion that online crime is a modern day Yukon Gold Rush for entrepreneurial hackers, the two Microsoft...

Banking System Vulnerability - 3 million bank accounts hacked in Iran

Banking System Vulnerability - 3 million bank accounts hacked in Iran Iran's Central Bank has announced that the electronic information of 3 million customers of 10 Iranian banks have been compromised. These banks now require their customers to change their ATM pin numbers before they can access...

New Ice IX Variant Steals Information From Facebook Users

A new iteration of the Ice IX malware has been spotted attacking Facebook users, according to researchers at Trusteer, who claim that now the malware is trying to swindle unsuspecting users out of sensitive information like credit card numbers and addresses. After launching a web injection, the...

Mobile Banking Malware: Protect Your Finances

The prolific rise in smartphones, tablets and other portable devices has greatly expanded the ways in which we interact with personal and professional services. The public can now singlehandedly use their mobile device to pay for things with the ease of flashing their cell phone. Unfortunately,...

Money Mules, Not Customers, The Real Victims of Bank Fraud

Money mules – the accomplices who help move stolen funds – may be the real victims of online banking scams, not the bank customers who are the ostensible targets of fraudsters, according to new research from Microsoft. In a paper that turns conventional thinking about online banking crime on its...

Carberp Banking Trojan Scam - 8 Arrested in Russia

Carberp Banking Trojan Scam - 8 Arrested in Russia 8 Men suspected of being involved in the Carberp phishing scam have been arrested in Russia. The men were arrested after a joint investigation by the Russian Ministry of Internal Affairs MVD and Federal Security Service FSB. According to the MVD,...

Video: College Professor, Students Crack Zeus Trojan Mystery

A segment from last night’s Rock Center, Brian Williams’ TV news magazine, gives the inside scoop on how a college professor and his students helped law enforcement crack one of the largest and most profitable banking Trojan operations around. Reporter Richard Engel sat down with Gary Warner, a...

Russian Agencies Take Down Carberp Gang

A collaborative effort between a Russian security company and two Russian federal agencies has yielded the arrest of eight men allegedly involved in the Carberp Trojan scam, it was announced today. Officials from Russia’s Ministry of Internal Affairs MVD and Federal Security Service FSB, along wi...

Malicious Android application stealing banking credentials

Malicious Android application stealing banking credentials A new form of smart Android malware can not only steal your online banking information, but update itself in the future and secretly send contact information stored on your device off to the Bad Guys. Security researchers at McAfee have...

Android Malware Stealing Online Banking Credentials

Malware that targets Android phones has been on a steady rise for the last couple of years, and much of it has come in the form of compromised apps or outright malicious apps disguised as games or utilities. But now researchers have come across a new Android threat that is designed specifically t...

Fake Chat Screen Malware Hijacks Banking Customers

A new attack against online banking customers uses a malware platform to trick its victims into verifying bogus transactions. The attack, first described by Trusteer CTO Amit Klein, waits for an unsuspecting business banking customer to log online before telling them that “security checks” need t...

Postal savings banks the UKEY useless-vulnerability warning-the black bar safety net

Today to the postal Savings Bank postal savings bank of china to go to the opening of the postal green card through the online banking, in order to safeguard the Bank account of the funding security, the requirements for online banking opened UKEY protection, the Bank staff attitude good, and...

CVE-2012-1020

Multiple cross-site scripting XSS vulnerabilities in login.php in NexorONE Online Banking allow remote attackers to inject arbitrary web script or HTML via the 1 visitorlanguage parameter to register.php or 2 message parameter...