DOJ Shuts Down Botnet, Disables Infected Systems

The U.S. Department of Justice and the FBI said on Wednesday that they had taken actions to disable an international botnet of more than two million infected computers that was stealing corporate data including user names, passwords and financial information. Thirteen unnamed “John Doe” defendent...

Mariposa: December, 2009

The takedown of the Mariposa botnet is an example of both the possibilities and complications facing law enforcement around the world as they work to stamp out botnets. A cyberlaw enforcement success story, the take down of Mariposa by Spanish authorities in December, 2009, followed months of wor...

Bredolab: October, 2010

At its height, the Bredolab botnet numbered more than three million hosts and was responsible for 30 million infections and 3.6 billion spam e-mails daily.The global botnet was brought down by the Dutch cyber crime unit, which seized the command and control infrastructure used by the botnet and,...

FBI raids on 40 Anonymous hackers !

The FBI would have conducted 40 raids yesterday and seized the computers of members of the loosely organized group of hackers known as Anonymous. Several members have posted their stories in online forums, including images of kicking in doors. The FBI has seized every computer in every house and...

Thousands of Social Security Numbers Stolen in New York Data Breach

Thousands of Social Security numbers have been stolen from the computers of a New York state agency. The Social Security Administration in New York City reports that a subcontractor, who was working for the Office of Temporary Disability Assistance on computer infrastructure upgrades, illegally...

Audit: NASA Fails To Properly Wipe Data From Discarded Drives

A recent internal audit at NASA, the U.S. space agency, found significant weakness in the way the agency disposes of IT equipment, including evidence that used hard drives containing sensitive NASA data may have been sold to the public on the secondhand market. The audit focused on the Johnson an...

CBI Website Hacked by Pakistani Cyber Army, NIC Security Questioned

The recent hacking of the Central Bureau of Investigation's CBI website by a group called the 'Pakistani Cyber Army' has raised concerns about the security measures of servers maintained by the National Informatics Centre NIC. The NIC is responsible for government server maintenance. While the NI...

Hacker blackmailed women into making porn movie !!

A CALIFORNIA man has been charged after he allegedly hacked into more than 100 computers to look for sexually explicit photos that he then used to blackmail his victims into handing over homemade sex tapes. Luis Mijangos, 31, was charged with extortion after he allegedly infected more than 100...

Fedora Update for ocsinventory-agent FEDORA-2010-16334

Check for the Version of ocsinventory-agent OpenVAS Vulnerability Test Fedora Update for ocsinventory-agent FEDORA-2010-16334 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Don't use public computers

Do not use public computers to log on to your personal accounts. No airport internet machines, no hotel business center, nothing. I know how many times you really need to check your email from a friend’s computer – just don’t do it. You have no idea what’s running on that machine...

Infected computers

So many times I hear people around me saying “hey, my computer is infected, but it’s okay, I can still do my things.” You can still do your things, but who knows who else is doing their thing, intercepting your browsing sessions or logging every key that you press. That includes, all of your...

How to Avoid Getting Your Twitter Account Hacked

“All upcoming Guns N’ Roses dates are officially canceled. Please contact your place of purchase for any refunds.” No Guns N’ Roses fan ever wants to see this text. And especially when it’s published on Axl Rose’s official Twitter account, it’s a guaranteed recipe for disaster. This is not the...

Botnet Targets SSH Servers Via Brute Force

The ddssh bot is currently responsible for an increase in brute force attacks on SSH connections. Botnet herders are apparently injecting the script via a phpMyAdmin vulnerability and using the compromised computers for targeted SSH attacks. Read the full article. The H Security...

Major Check Counterfeiting Ring Uncovered

A researcher has uncovered a sophisticated check counterfeiting ring that uses compromised computers to steal and print millions of dollars worth of bogus invoices and then recruit money mules to cash them. Read the full article. The Register...

PHP 4.x < 4.4.5, 5.x < 5.2.1 Multiple Format String Vulnerabilities

PHP is prone to multiple format-string vulnerabilities due to a design error when casting 64-bit variables to 32 bits. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Simple Network penetration spying on a command-vulnerability warning-the black bar safety net

ipconfig /all //You can view the current network card configuration information, including the domain and IP section This command can be seen: the host name---shwdm, IP--192.168.103.8, the gateway IP---192.168.103.10,DNS domain name resolution IP address---192.168.100.1 to an primary WINS server...

Researchers Can Keep Web Servers Up During Attack

MIT researchers funded by DARPA U.S. Defense Department’s Defense Advanced Research Projects Agency have developed a system to keep web servers — or, for that matter, any Internet-connected computers — running even when they’re under attack. Read the full article. MIT News...

Pushdo Botnet Making the Rounds

More than 300 Web sites are being pestered by infected computers that are part of the Pushdo botnet, according to security researchers. Read the full article. Security Central...

Symantec Altiris Notification Server 6.x Static Encryption Key

SUMMARY Symantecs Altiris Notification Server 6.0.x web console stores a static encryption key for encrypted credentials entered by the administrator. These credentials include ones used to enumerate the computers within a windows domain during discovery sessions allowing dissemination of Altiris...

Conficker Infections Drop With New Year

People have one more reason to celebrate the new year, according to the Shadowserver Foundation: Nearly a million Conficker-infected computers have oddly disappeared overnight. Read the full article. Security Focus...