Square Launches Bug Bounty, Hires Top Security Researcher

The bug bounty phenomenon began mainly with major software vendors and security companies, which were the main targets for security researchers and attackers. But it is now moving to virtually every corner of the Web and software ecosystem, and the latest company to join the party is Square, the...

Expert Warns of Chip-and-PIN Pitfalls

LAS VEGAS – The inevitable changeover from magnetic strip-based payment cards to EMV, or chip-and-PIN, is coming for consumers and merchants in the United States. And coming along with it are a raft of weaknesses and real-world attacks that shoot holes in the presumption that EMV will remedy cred...

Legal Line Between Security Research, Cybercrime Murky

LAS VEGAS — In his keynote address at Black Hat Wednesday, Dan Geer, the CISO of In-Q-Tel and a respected security luminary noted that the industry has never been closer to the forefront of corporate and government policy decision making. Despite this, security research remains a dangerous busine...

Threat Outbreak Alert RuleID10975: Email Messages Distributing Malicious Software on August 6, 2014

Medium Alert ID: 35187 First Published: 2014 August 6 20:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10975 may contain the following files: Name | Si...

Call Center Phone Fraud for Fun at Profit at Black Hat

Reconnaissance in the context of targeted attacks usually involves scouring freely available online resources such as social media and developer forums. Personal information willfully posted to these sites are clues a hacker can use to build a profile on a target, map systems and network...

POWELIKS — A Persistent Windows Malware Without Any Installer File

Malware is nothing but a malicious files which is stored on an infected computer system in order to damage the system or steal sensitive data from it or perform other malicious activities. But security researchers have uncovered a new and sophisticated piece of malware that infects systems and...

PayPal payment defects caused by the lied to pay the amount of vulnerability-vulnerability warning-the black bar safety net

Recently, white hat Jan Kechel found PayPal there lied to pay the amount of the vulnerability and proof of this may be and is utilized to carry out the fraud. Jan Kechel given in the Demo:the http://lvps91-250-100-5.dedicated.hosteurope.de:43926/ The author on the page gives detailed steps and...

Threat Outbreak Alert RuleID10802: Email Messages Distributing Malicious Software on July 25, 2014

Medium Alert ID: 35048 First Published: 2014 July 25 14:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10802 may contain the following files: Name | Siz...

Million cloud mailbox register logic flaws-vulnerability warning-the black bar safety net

Million network top level domain names sent to cloud mailbox activity, the cloud mailbox can be any resolution, may lead to phishing or fraud, specifically the details look at the following graphic, the language is not too easily described Some time ago promising a domain name, ready for...

Dennis Fisher and Mike Mimoso Discuss This Week's Microsoft Takedown

Dennis Fisher and Mike Mimoso discuss the Microsoft malware takedown, its legal and security implications and the revelation of a massive financial fraud campaign in Brazil. Download: digitalunderground157.mp3 Music by Chris Gonsalves...

Brazilian Payment Fraud Campaign Steals Billions

UPDATE–Hackers are targeting Brazil’s Boleto payment system, the second most popular payment method in the country, and have conducted hundreds of thousands of fraudulent transactions, though researchers differ over how much money has been stolen. Formally known as Boleto Bancario, Boletos are...

New Android Malware 'HijackRAT' Attacks Mobile Banking Users

Cybercriminals have rolled out a new malicious Android application that wraps different varieties of banking fraud trick into a single piece of advanced mobile malware. GOOGLE SERVICE FRAMEWORK - APPLICATION OR MALWARE? Security researchers at the security firm FireEye have came across a maliciou...

Subex Nikira Fraud Management System GUI 'message' Parameter Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/38311/info The Subex Nikira Fraud Management System GUI is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

Luuuk Bank Fraud Campaign Nets €500K in One Week

A fraud campaign siphoned more than half a million dollars from a European bank over the course of a week earlier this year, researchers with Kaspersky Lab announced this week. The campaign, dubbed Luuuk, extracted €500,000 roughly $679,700 USD from 190 victims, mostly in Italy and Turkey, from...

FBI, European Authorities Go After GameOver Zeus Botnet

UPDATE–Law enforcement agencies in Europe and the United States, including Europol and the FBI, ran a coordinated takedown of the GameOver Zeus botnet on Friday, seizing servers and disrupting the botnet’s operation. Authorities say that the same botnet has been used to distribute the CryptoLocke...

Fraudsters Physically Deploy Malicious Software to Hack ATMs

Criminals will not let any way to cheat an ATM machine out of its cash, as it’s one of the easiest way for them to get the hands on cash. ATM skimmers have now discovered a new and high-tech approach to target cash machines directly by inserting a physical notorious device into it instead...

Threat Outbreak Alert: Email Messages Distributing Malicious Code on May 27, 2014

Medium Alert ID: 34359 First Published: 2014 May 27 16:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages related to bank fraud. The email message attempts to persuade the recipient to open the attachment for details. However, the .zip...

Chip and PIN EMV Protocol security vulnerabilities found

Chip-and-PIN payment cards are coming to the United States after a long head start as a standard card-present payment method in Europe and Asia. Already, retailer Target accelerated its plan to move its branded debit and credit cards to chip-and-PIN, also known as EMV Europay, MasterCard and Visa...

Pre-Play Vulnerability Allows Chip-and-PIN Payment Card Cloning

In March this year, we reported that the major card distributor companies, VISA and Mastercard are migrating to EMV chip cards, also known as PIN-and-Chip cards. Unlike traditional magnetic stripe payment cards, EMV chip cards generates a unique code for every transaction, making it nearly...

Book Review: Hacking Point of Sale, In-Depth Study on Payment Applications

Point-of-sale POS is the hottest topic in payment structures and its one of the most popular technology topics as well. A Point-of-sale POS machine is a computerized replacement for a cash register. It has ability to quickly process a customer's transaction, accurately keep the records, process...