Subex Nikira Fraud Management System GUI - 'message' Cross-Site Scripting

source: https://www.securityfocus.com/bid/38311/info The Subex Nikira Fraud Management System GUI is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Former Researcher Iceman Sentenced to 13 Years

A former security researcher turned criminal hacker has been sentenced to 13 years in federal prison for hacking into financial institutions and stealing credit card account numbers. Max Ray Butler, who used the hacker pseudonym Iceman, was sentenced Friday morning in U.S. District Court in...

Nikiara Fraud Management System XSS Vulnerability

Exploit for unknown platform in category web applications ================================================= Nikiara Fraud Management System XSS Vulnerability ================================================= -------------------------------------------------------------------- Exploit Title: Nikia...

Nikiara Fraud Management System Cross Site Scripting

-------------------------------------------------------------------- Exploit Title: Nikiara Fraud Management System XSS Vulnerability Date: 10 Feb 2010 Author: thebluegenius Software Link: http://www.subexworld.com/fraud-management.html Version: All Tested on: Unix | Apache 2.2.4 CVE : NA...

Researchers Discover New ACH Banker Trojan

Malware hunters at SecureWorks have intercepted a new banker Trojan being used by cyber-criminals to steal financial credentials from banks in the U.S. The Trojan, dubbed “Bugat,” targets Automated Clearing House ACH and wire transfer transactions by small- and mid-sized business in the U.S., muc...

Another Look at ATM Skimmers

Brian Krebs talks with Rick Doten, chief scientist at Lockheed Martin’s Center for Cyber Security Innovation. Doten has built an impressive slide deck on ATM fraud attacks. Read the full article. KrebsonSecurity...

Massachusetts Man Arrested for Hacked Modems

Matthew Delorey of New Bedford, MA was arrested on wire fraud and conspiracy charges relating to his sale of hacked cable modems modified to permit a user to hide his or her identity and steal service from Internet service providers. Read the full statement. FBI.gov...

Rich People More Likely Victims of ID Theft

A study — which was created using the unlikely combination of identity fraud incidence statistics with basic consumer demographics — indicates that identity thieves are successfully targeting the wealthy and affluent, regardless of the systems and software they use. Read the full article. Dark...

A Closer Look At ATM Skimmers

Security reporter Brian Krebs goes visual with ATM skimmers, asking readers to look at images and see if they would be able to tell the difference between a real ATM card reader and actual skimming devices. Read the full article. KrebsonSecurity.com...

Hackers Winning Bank Authentication Battle

Security measures such as the use of one-time passwords and phone-based user authentication — considered among the most robust forms of IT defenses — are no longer enough to protect online banking systems against fraud, a Gartner report warns. Read the full article. Computerworld...

Banking Phisher Facing 5 Years In Prison

A Romanian national pleaded guilty to a charge related to a phishing operation that sought to defraud customers of banks such as Citibank and Wells Fargo, and of Web sites such as eBay. Read the full article. Computerworld...

FBI Indicts 19 Texans For Cybercrime Fraud

A federal grand jury in Dallas returned a superseding indictment this week charging 19 defendants in a massive cybercrime conspiracy, announced U.S. Attorney James T. Jacks of the Northern District of Texas. Read the statement. FBI...

Q&A: Eugene Spafford on Cybercrime, Security Research

Threatpost editor Dennis Fisher talks with Eugene Spafford of Purdue’s CERIAS center about cybercrime, funding for long-term security research projects and whether the federal cybersecurity coordinator position matters. Fisher: Do you see any indications that there will be more funding coming fro...

ID Thief Feels Bite of Prison Sentence

Michael A. Roseboro, a/k/a “Mike Ross,” a/k/a “Michael Johnson,” a/k/a “Michael Smith,” was sentenced on November 25 to 116 months in prison for his participation in a massive identity-theft and credit card fraud scheme in which he targeted and stole the identities of at least 176 dentists. Read...

Qchex's Fraud-Enabling Biz Gets FTC Smackdown

The Federal Trade Commission has charged those behind the shady online check service Qchex with contempt, and wants daily fines imposed on them until they give up the ghost. The group has launched a new site—a Qchex clone—with the same questionable policies that made Qchex a “dinner bell for...

UK Police Warn Job Seekers to Avoid Being Money Mules

The Serious Organised Crime Agency Soca says websites are currently being used to recruit “money mules”. The “mules” are ordinary people who send and receive payments through their bank accounts to facilitate business. But in reality, the cash has been laundered from crime, leaving unwitting mule...

U.S. Takes Down $9 Million RBS WorldPay Hacking Ring

U.S. and international prosecutors have taken down a criminal ring that they allege was responsible for an ATM scam last year that stole about $9 million from RBS WorldPay. The criminals were able to evade the company’s encryption system used on payroll debit cards and withdraw money from ATMs in...

FBI Reports Malware on Rise in Electronic Funds Fraud

The FBI reports it has seen a rise of malware over the past few months targeting small and medium businesses and municipal government entities and school districts. Once a malicious attachment or link is opened, keylogging tactics obtain bank account info where criminals then initiate wire...

Guilt by Association: Modem Hacker Arrested for Others' Crimes

Hardware hacker and author, Ryan Harris, aka “DerEngel,” has been arrested in Boston for aiding and abetting intrusion and wire fraud. Harris oversees TCNiSO, a group who hacks cable modems and other hardware. Harris thinks he is being busted for the plights of those who took performance-boosting...

Southern California Man Gets 11 Years in Slammer for ID Theft Ring

Martin Quoc Pham, 28, of Garden Grove was sentenced by a judge to 11 years in Federal prison for spearheading an identity theft ring targeting home equity lines. The compromised accounts of JP Morgan Chase customers were fraudulently accessed and lines of credit were stolen including nearly $1...