Phishing Vulnerability in Accela BizSearch Document View Window

Overview The document view window in Accela BizSearch Gateway Option has the following vulnerabilities which allow a remote attacker to: display a fraudulent web page over a legitimate web page steal cookies stored in browser place arbitrary cookies into browser Impact A remote attacker could...

Пресечена деятельность хакеров-вымогателей

Источник: http://www.kguvd.ru/news/7 Когда: 31 Августа, 2010 Оперативники отдела "К" и УБЭП ГУВД Москвы пресекли деятельность группы хакеров, заражавших вредоносными программами компьютеры пользователей и вымогавших деньги за разблокировку. Деньги взимались с помощью платных SMS стоимостью от 300...

Ransomware Tactic Lures Via Copyright Scare

An ongoing ransomware campaign is pretending to be the fake ICPP Foundation icpp-online.com, where the ransomware locks down the user’s desktop issuing a “Copyright violation: copyrighted content detected” message which lists torrent files found on the infected PC and forces the user to pay $400...

Hackers Indicted in $25 Million Ticket Scheme

A ring of ticket brokers has been indicted in connection to an elaborate hacking scheme that used bots and other fraudulent means to purchase more than 1 million tickets for concerts, sporting events and other events. The defendants made more than $25 million in profits from the resale of the...

Facebook scams

Beware of scams on Facebook. Two common ones are: 1 One of your friends all of a sudden sends you a message that he needs emergency money because he got robbed or something in a far away land. You are then engaged in a conversation to wire him some money. This is what happens when your friend has...

Fraudulent eBay Cookie-Code Stuffer Busted

Federal authorities are charging a Las Vegas man with marketing a so-called “cookie-stuffing” operation, enriching himself and others while defrauding eBay along the way. Read the full article. Wired...

Ransomware Variant Features Novel Payment Scheme

A new ransomware variant encrypts files on a computer but uses a novel twist on monetizing the extortion threat. Instead of demanding money directly for decryption keys, as has been the case in other instances, it presumes that the owner of an infected computer will search for information to help...

Botnet-Infected Computers Powering Click Fraud

According to new data from ClickForensics, botnet-infected computers are behind the majority of click-fraud attacks against advertisers and publishers. For the third quarter this year, about 43 percent of all fraudulent clicks came from computers within botnets. The figure is the highest in four...

Fraudsters Trying to Capture Bank Cards at Machines

If your cash card gets eaten by the automated-teller machine, it may not end up in the hands of a bank employee. European financial institutions are seeing a sharp rise in card “trapping,” where criminals use various tricks in order to capture and retrieve a person’s ATM card for fraudulent use...

*.com accepted as wildcard match in SSL/TLS name matching

Certificate authorities are expected to vet all certificate registrations, but may fail to prevent fraudulent or erroneous registrations. Certificates which use a wild card immediately before the top level domain, or nulls in the domain name, may pass validation checks in Opera. Sites using such...

Malware-Infected CD Mailing was Part of Pen Test

The malware-infected CDs that were mailed to some credit unions may have been part of a penetration test designed to gauge whether an employee would run the software. The SANS Internet Storm Center says it was notified by a representative from Microsolved that the mailing was part of an authorize...

Hitachi Web Server Vulnerability in SSL Client Authentication

Overview Hitachi Web Server contains a vulnerability in handling SSL client certificates, which could allow an attacker to manipulate environment variables and/or spoof the client to access Web servers. Impact An attacker could manipulate environment variables and/or spoof the client to access We...

Twitter Suspends Accounts of Users With Infected Computers

From IDG News Service Jeremy Kirk Twitter is suspending the accounts of some users whose computers have fallen victim to a well-known piece of malicious software that has targeted other sites such as Facebook and MySpace. The malware, Koobface, is designed to spread itself by checking to see if...

Cache-poisoning attack snares top Brazilian bank

From The Register Dan Goodin One of Brazil’s biggest banks has suffered an attack that redirected its customers to fraudulent websites that attempted to steal passwords and install malware, according to an unconfirmed report. According to this Google translation of an article penned in Portuguese...

Conficker virus and the 'scareware' link

Ryan Naraine on KGO AM 810 Newstalk Radio – April 10, 2009 Ed and Jen from San Francisco’s KGO talk radio talk again with Threatpost editor Ryan Naraine. It looks like Conficker is stirring to life after doing absolutely nothing on April 1 and Ryan says it’s linked to “scareware programs” that po...

Online crime complaints hit record high in 2008

The FBI’s Internet Crime Complaint Center IC3 says complaints of online crime hit a record high in 2008, driven mostly by non-delivery of goods and service and those pesky 419 Nigerian e-mail scams. Accordign to a new report PDF from ic3.gov, the center received a a total of 275,284 complaints, a...

MD5 vulnerable to collision attacks

Overview Weaknesses in the MD5 algorithm allow for collisions in output. As a result, attackers can generate cryptographic tokens or other data that illegitimately appear to be authentic. Description A secure cryptographic hash algorithm is one that generates a unique identifier of a fixed size...

Hitachi Web Server SSL Client Authentication Vulnerability

Overview Hitachi Web Server accepts an SSL certificate sent by a clinet trying to connect to the Server even if the certificate is fraudulent. The vulnerability does not affect the product if the SSL authenticaton client feature is disabled. Impact An attacker could gain access with a fraudulent...

After 6 months - fix available for Microsoft DNS cache poisoning attack

After 6 months - fix available for Microsoft DNS cache poisoning attack On April this year I discovered a new vulnerability that enables DNS cache poisoning attack against the Windows DNS server. Today November 13th, 2007 - six and a half months after being informed - Microsoft released a fix for...

BIND 8 EOL and BIND 8 DNS Cache Poisoning (Amit Klein, Trusteer)

BIND 8 EOL and BIND 8 DNS Cache Poisoning Note: this is a different attack from BIND 9 DNS cache poisoning. I discovered a new weakness in BIND 8 DNS server which enables "DNS Forgery Pharming". An attacker can remotely poison the cache of any BIND 8 caching DNS server and force users who use thi...