Anonymous Hacker 'Kahuna' sentenced to 3 years in prison for hacking Police websites

An Anonymous Hacker and Online hacktivist who was responsible for hacking into the City of Springfield’s website and others Police websites has been sentenced to 3 years in federal prison. John Anthony Borell III, a 22-year-old man from Ohio with the online handle @ItsKahuna started advertising h...

Call for Ban on Vulnerable PHP SuperGlobal Variables

The ease with which PHP applications can be subverted should be pretty apparent by now given the number of botnets supported by compromised sites hosting PHP code. The biggest culprit in the PHP universe may be a set of nine variables called SuperGlobals that provide programmers with development...

Adobe Photo Loader Malware Posts Craigslist Spam

An attacker is going to a lot of trouble to post spam messages to Craigslist. Researchers at Solera Networks have come across an attack where malware is using compromised machines to post poorly worded ads for an Android application marketed at parents for the purposes of monitoring the activitie...

Twitter Account 'Classifier' Detects Fraudulent Accounts

Fraudulent Twitter accounts are a booming business, accounting for significant underground money for spammers, fake antivirus scams, drive-by downloads and phishing schemes. But research presented at USENIX yesterday proposes a means for driving up the cost for attackers to get these campaigns of...

Threat Outbreak Alert: Fake Package Delivery Failure Notification Email Messages on September 3, 2013

Medium Alert ID: 30380 First Published: 2013 August 12 16:35 GMT Last Updated: 2013 September 4 14:50 GMT Version: 7 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a package delivery failure notification for the...

Russian Hackers charged for stealing 160 million Credit Cards

A Group of Hackers, Four Russians and a Ukrainian allegedly broke computer networks of more than a dozen major American and international corporations and stole 160 million credit card numbers over the course of seven years, the largest data theft case ever prosecuted in the U.S. They are accused...

Hacking Ring Steals $300 Million, 160 Million Card Numbers

The U.S. Attorney’s Office in the District of New Jersey is expected to further discuss charges today against five hackers who allegedly stole at least 160 million credit and debit card numbers and netted more than $300 million over the course of seven years in what could be the largest cybercrim...

Russian Hackers charged for stealing 160 million Credit Cards

A Group of Hackers, Four Russians and a Ukrainian allegedly broke computer networks of more than a dozen major American and international corporations and stole 160 million credit card numbers over the course of seven years, the largest data theft case ever prosecuted in the U.S. They are accused...

Weaknesses in CFAA language exposed at Black Hat

The Computer Fraud and Abuse Act CFAA can be unsettling even to the most stalwart security researcher. The law, enacted in 1986 and revisited several times since, is still littered with loopholes and nuances that can be leveraged by a prosecutor in a criminal case, or turned against a white hat i...

Threat Outbreak Alert: Fake Account Credential Information Email Messages on July 23, 2013

Medium Alert ID: 30182 First Published: 2013 July 23 15:50 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an account credential information for the recipient. The text in the email message attempts to convince the...

College Student Gets Year in Prison for Wire Fraud in Tampering With Student Election

A former Cal State San Marcos student was sentenced to a year in prison this week for wire fraud and other charges related to election tampering by using keystroke loggers to grab student credentials and then vote for himself. Matthew Weaver, 22, of Huntington Beach, Calif., stole almost 750...

Threat Outbreak Alert: Fake Tax Documentation Email Messages on August 27, 2013

Medium Alert ID: 30103 First Published: 2013 July 16 17:42 GMT Last Updated: 2013 August 27 13:05 GMT Version: 3 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain tax documentation for the recipient. The text in the email message attempt...

Threat Outbreak Alert: Fake Billing Statement Email Messages on July 12, 2013

Medium Alert ID: 30065 First Published: 2013 July 15 12:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an electronic billing statement for the recipient. The text in the email message attempts to convince the recipie...

Threat Outbreak Alert: Fake Fraud Complaint Information Email Messages on July 3, 2013

Medium Alert ID: 29937 First Published: 2013 July 3 14:41 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a complaint case claim notification for the recipient. The text in the email message attempts to convince the...

Taobao fraud and a module XSS vulnerabilities can steal user cookies-vulnerability warning-the black bar safety net

First let's look at TaobaoXSSvulnerability ! Taobao decoration can invoke a third-party module, this means that this third party template if there is a vulnerability even being invaded are likely implicated in Taobao shop! Edit the third party Module, added toXSScode, and then the shop calls ! Op...

Citadel Banking Malaware Variant Delivers Localized Content

With builders for the Citadel Trojan freely available on any number of underground criminal forums, it’s no surprise to see some legs left in the malware despite a takedown of more than 1,400 Citadel botnets less than a month ago by U.S. law enforcement and Microsoft. A new variant has popped up ...

CareerBuilder man in the browser attack

No one can say that hackers don’t have a sense of irony. In search of money mules, attackers behind a variant of the Zeus Trojan have configured the malware to activate when users visit careerbuilder.com with code that redirects victims to an advertisement for a mule-recruitment website...

FBI seized Citadel banking Trojan servers

Microsoft and the FBI have taken down a botnet that controlled millions of infected PCs, which was responsible for massive bank fraud. Botnets are networks of computers infected with viruses that let them be controlled by hackers. The outfit runs the Citadel Botnets and is believed to have stolen...

FBI seized Citadel banking Trojan servers

Microsoft and the FBI have taken down a botnet that controlled millions of infected PCs, which was responsible for massive bank fraud. Botnets are networks of computers infected with viruses that let them be controlled by hackers. The outfit runs the Citadel Botnets and is believed to have stolen...

26 Million Veterans data breached by eight state sponsored organizations

Since 2010, foreign state sponsored organizations have repeatedly compromised an unencrypted database maintained by the Veterans Affairs Department that contains personally identifiable information on roughly 26 million veterans. Including at least eight foreign-sponsored organizations, mostly...