Visa Says Criminal Group Planning Fraud

Visa is warning financial institutions that it has received reliable intelligence that an organized criminal group plans to attempt to move large amounts of fraudulent payments through a merchant account. Read the full article. KrebsonSecurity...

Advertising Losses Mount in Botnet Click Fraud

The clever hacking of online advertisements has quietly grown into a multi-million dollar criminal industry showing no signs of slowing. The big losers: online advertisers. Read the full article. The Last Watchdog...

New Zeus Botnet Variant Targets Firefox

A new version of the data-stealing trojan Zeus is for the first time able to successfully exploit Mozilla’s Firefox browser to commit sophisticated online banking fraud. Read the full article. Secure Computing...

Friending HR: A Rich and Mineable Source of Intelligence

One of the most common complaints I hear from information security executives in large organizations is that they are constantly playing defense, not offense. Their network security apparatus is designed to wait for an attack, see if it’s successful and, if it is, to plug the hole, then repeat. T...

Changes to Flash Good for Bank Fraud

When the final version of Adobe Flash Player 10.1 hits desktops later this year, it will bring with it new functionality designed to allow users to automatically clear Flash cookies after a Web session. But while the feature may be lauded in the name of privacy, it may also force online banks to...

ID Thieves Took $4 Million from Tax Returns

A group of sophisticated identity thieves managed to steal more than $4 million by filing bogus tax returns using the names and Social Security numbers of other people, many of them deceased, according to a 74-count indictment unsealed in Arizona. Read the full article. Wired...

Online Fraud Loss Reaches $560 Mil in 2009

Reported losses from online fraud more than doubled last year, from $265 million in 2008 to nearly $560 million in 2009, according to figures released Friday by the FBI. Read the full article. KrebsonSecurity...

Monoprice.com Goes Offline, Investigates Fraud

Audio visual cabling giant monoprice.com shut down its Web site – possibly for the next couple of weeks – while it investigates the possible compromise of its customer credit and debit card information. Read the full article. KrebsonSecurity...

Hijacked Brands Grew in 2009 Phishing Attacks

The Anti-Phishing Working Group APWG released its Q4, 2009 Phishing Activity Trends Report, which reveals that eCrime syndicates are expanding the base of brands they exploit for online fraud far beyond major financial institutions and online merchants, with the number of hijacked brands reaching...

Darkmarket Founder Gets 56 Months in Jail

Renukanth Subramaniam, 33, who had previously plead guilty was sentenced to 46 months for conspiracy to defraud and 10 months for five counts of mortgage fraud, the terms to run consecutively. Also sentenced was Darkmarket user John McHugh, 66, who had the sign in “Devilman” and created fake cred...

Cross site scripting

Cross-site scripting XSS vulnerability in the login/prompt component in Subex Nikira Fraud Management System allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2010-0706

Cross-site scripting XSS vulnerability in the login/prompt component in Subex Nikira Fraud Management System allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2010-0706

CVE-2010-0706 corresponds to a Cross-site scripting (XSS) vulnerability in the login/prompt component of Subex Nikira Fraud Management System. The issue allows remote attackers to inject arbitrary web script or HTML via the message parameter. The provided sources confirm the affected product and ...

CVE-2010-0706

Cross-site scripting XSS vulnerability in the login/prompt component in Subex Nikira Fraud Management System allows remote attackers to inject arbitrary web script or HTML via the message parameter...

Small Company Bankrupt After ZeuS, Bank Fraud

A New York marketing firm that as recently as two weeks ago was preparing to be acquired now is facing bankruptcy from a computer virus infection that cost the company more than $164,000. Read the full article. KrebsonSecurity...

IT Consultancy Defrauded of $100K

A New Hampshire-based IT consultancy lost nearly $100,000 this month after thieves broke into the company’s bank accounts with the help of 10 co-conspirators across the United States. Read the full article. KrebsonSecruity...

ID Theft Criminal Sentenced to 309 Years in Prison

Robert Thompson, also known as John Lawson, age 43, of Zachary, La., was sentenced to a term of 309 years in prison. Thompson, the leader of a massive identity theft and bribery scheme, was sentenced based on charges of conspiracy, wire fraud, mail fraud, bank fraud, computer fraud, access device...

Subex Nikira Fraud Management System GUI - message Cross-Site Scripting

Subex Nikira Fraud Management System GUI - message Cross-Site Scripting source: https://www.securityfocus.com/bid/38311/info The Subex Nikira Fraud Management System GUI is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may...

Subex Nikira Fraud Management System GUI - 'message' Cross-Site Scripting

source: https://www.securityfocus.com/bid/38311/info The Subex Nikira Fraud Management System GUI is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Former Researcher Iceman Sentenced to 13 Years

A former security researcher turned criminal hacker has been sentenced to 13 years in federal prison for hacking into financial institutions and stealing credit card account numbers. Max Ray Butler, who used the hacker pseudonym Iceman, was sentenced Friday morning in U.S. District Court in...