Employment Scam

Interesting story of an old-school remote-deposit capture fraud scam, wrapped up in a fake employment scam. Slashdot thread...

U.S. Dept Of Defense: ████ - Complete account takeover

Summary: ███████ ██████████ was updated today 03/04, which includes a backend rewrite. Unfortunately, the new site is insecure and allows a password to be reset given only a username. This allows access to payment records for any DoD employee given only their username, which is commonly known...

Tradebox CryptoCurrency - symbol SQL Injection Vulnerability

Exploit for php platform in category web applications Title: Tradebox - CryptoCurrency Buy Sell and Trading Exploit Author: Abdullah Çelebi Vendor Homepage: https://www.bdtask.com Software Link: tradebox.bdtask.com/demo-v5.3/ Version: 5.4 Category: Webapps Tested on: WAMPP @Win Software...

Part 1: Mobile Banking and Buying – The Good and the Bad

Banking and buying with your mobile device is powerful and convenient—and in some ways safer than using your bank card. You can check your balance, make secure payments, deposit checks, and transfer funds. You can even connect your debit or credit card to Apple or Google Pay or another payment...

Someone Stole Almost Half a BILLION Dollars from Japanese Cryptocurrency Exchange

Coincheck, a Tokyo-based cryptocurrency exchange, has suffered what appears to be the biggest hack in the history of cryptocurrencies, losing $532 million in digital assets nearly $420 million in NEM tokens and $112 in Ripples. In 2014, Mt Gox, one of the largest bitcoin exchange at that time,...

Wise Ride Android App Has Logic Design Flaws

Smart Ride Ride Le app is a smart city public bike rental app. There is a logic design loophole in the Zhixing Jiale Android app. After logging into the system, an attacker can modify the amount of payment arbitrarily by clicking on the "Alipay Payment Credit Deposit" option and intercepting it...

EZZY APP Android version of the deposit function module has a payment design loophole

EZZY APP is a car intelligent sharing platform APP created by Beijing Daimeng Technology Co. The Android version of EZZY APP has a vulnerability in the amount payment design. After logging into the system, an attacker can arbitrarily modify the size of the payment amount by clicking on the paymen...

PayPal Deposit major vulnerability, 1 0 seconds no need to verify stolen brush Bank card within the amount-vulnerability warning-the black bar safety net

! Usually online often see Alipay stolen brush cases, but from their very far, did not expect this thing but in this day are happening in my body. The genuineness, without warning. Only 1 0 seconds, I did not receive any input the verification code or Payment password in the process, the Bank car...

Automatic SQL Database Injection: jSQL Injection

jSQL Injection is a lightweight application used to find database information from a distant server. Tool is free, open source and cross-platform Windows, Linux, Mac OS X, Solaris. Features: GET, POST, header, cookie methods Normal, error based, blind, time based algorithms Automatic best algorit...

Threat Outbreak Alert RuleID18587: Email Messages Distributing Malicious Software on October 9, 2015

Medium Alert ID: 41463 First Published: 2015 October 9 15:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID18587 may contain the following files: Name |...

Threat Outbreak Alert: Fake Bank Account Deposit Notification Email Messages on March 28, 2014

Medium Alert ID: 34391 First Published: 2014 May 28 16:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a bank account deposit notification for the recipient. The text in the email message attempts ...

Threat Outbreak Alert: Fake Bank Account Deposit Notification Email Messages on May 21, 2014

Medium Alert ID: 34334 First Published: 2014 May 22 13:04 GMT Last Updated: 2014 May 23 18:40 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank transfer slip for the recipient. The text in the email message attempts...

Threat Outbreak Alert: Fake Bank Account Deposit Notification Email Messages on May 22, 2014

Medium Alert ID: 34335 First Published: 2014 May 22 12:54 GMT Last Updated: 2014 May 23 12:25 GMT Version: 2 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain bank deposit details for the recipient. The text in the...

Threat Outbreak Alert: Fake Deposit Slip Attachment Email Messages on May 19, 2014

Medium Alert ID: 34280 First Published: 2014 May 19 19:08 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a deposit slip for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Bank Account Deposit Notification Email Messages on May 15, 2014

Medium Alert ID: 34238 First Published: 2014 May 16 13:36 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a bank account deposit notification for the recipient. The text in the email message attempts ...

Threat Outbreak Alert: Fake Bank Account Deposit Notification Email Messages on May 9, 2014

Medium Alert ID: 34177 First Published: 2014 May 9 15:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank account deposit notification for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Bank Account Deposit Notification Email Messages on May 7, 2014

Medium Alert ID: 34151 First Published: 2014 May 7 13:39 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank account deposit notification for the recipient. The email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake German Bank Deposit Notification Email Messages on August 26, 2015

Medium Alert ID: 33662 First Published: 2014 April 7 15:02 GMT Last Updated: 2015 August 26 21:01 GMT Version: 3 Summary Cisco Security has detected significant activity related to German-language spam email messages that claim to contain bank deposit details for the recipient. The text in the...

Threat Outbreak Alert: Fake Bank Deposit Notification Email Messages on March 20, 2014

Medium Alert ID: 33441 First Published: 2014 March 20 21:43 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a bank deposit notification for the recipient. The text in the email message attempts to convince the recipient ...

Threat Outbreak Alert: Fake Bank Account Deposit Notification Email Messages on March 17, 2014

Medium Alert ID: 33361 First Published: 2014 March 17 14:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain a bank deposit notification for the recipient. The text in the email message attempts to...