Phony SSL Certificates issued for Google, Yahoo, Skype, Others

UPDATED: A major issuer of secure socket layer SSL certificates acknowledged on Wednesday that it had issued 9 fraudulent SSL certificates to seven Web domains, including those for Google.com, Yahoo.com and Skype.com following a security compromise at an affiliate firm. The attack originated from...

FBI busts $465,000 credit card scam !

Federal investigators arrested and indicted a former Bridgeport resident who they say orchestrated a scam in which foreign nationals applied for and received credit cards on which they charged up to $465,000 worth of goods before leaving the country with the banks holding the tab. A federal grand...

DSA-2199-1 iceape - security update

Bulletin has no description...

DSA-2200-1 iceweasel - security update

Bulletin has no description...

Mozilla Thunderbird 3.1 < 3.1.9 Invalid HTTP Certificates

The installed version of Thunderbird 3.1 is earlier than 3.1.9. Such versions have an out-of-date SSL certificate blacklist. A certificate authority CA has revoked a number of fraudulent SSL certificates for several prominent public websites. If an attacker can trick someone into using the affect...

Firefox 3.6 < 3.6.16 Invalid HTTP Certificates

The installed version of Firefox 3.6 is earlier than 3.6.16. Such versions have an out-of-date SSL certificate blacklist. A certificate authority CA has revoked a number of fraudulent SSL certificates for several prominent public websites. If an attacker can trick someone into using the affected...

Experts Warn Of Japan Earthquake, Tsunami Spam

As the Pacific Rim braces for deadly Tsunami’s spawned by today’s magnitude 8.9 earthquake in Japan, the SANS Internet Storm Center says users should be on the lookout for a different kind of Tsunami: scam e-mail and Web pages looking to turn curiosity about the events in Japan into illicit gain...

iTunes Users Complain Of Account Hacks

More than six months after reports of wide-scale compromises of accounts at Apple’s popular iTunes online store, there are fresh reports that suggest that the accounts of iTunes users are being used to make fraudulent purchases of music, games and other merchandise. Reports in the Apple forums...

OddJob Trojan Piggybacks On Legitimate eBanking Sessions

A new Trojan leads online banking customer into thinking they have logged out of their sessions when in fact they remain logged in. Discovered by Trusteer researchers, this completely new piece of malware represents the evolution of online attacks in the ways in which it integrates new and old...

Lush Cosmetics Australian website hacked !

The Australian and New Zealand shopping site of cosmetics retailer Lush has been hacked just weeks after a similar breach occurred on the UK site. Credit card details and other intimate information of shoppers have been exposed. If you visit the Lush Cosmetics Australian website you will find a...

Gang stole credit card details of US Citizens !

The cyber abomination badge arrested four youths, who had purchased cottony sarees account over Rs 17 lakh by application baseborn acclaim agenda capacity and agreement orders online. The youths, three of them engineers, had become accompany while alive in a arch alarm centre in the city. While o...

Dozens Charged in $1M Scheme To Fence Apple Goods

UPDATED: The Manhattan district attorney’s office on Wednesday announced the break-up of an identity theft and fencing ring responsible for around $1 million in fraudulent purchases from Apple stores around the country. District Attorney Cyrus Vance and the U.S. Secret Service in a press conferen...

FTC Charges Scareware Operators to Pay $8 Million Settlement

The FTC doled out $8 million in fines to the operators of an online scareware scheme. The scam involves tricking consumers into thinking their computers are infected with malware and then selling them software to remedy problems that doesn’t exist in the first place. A district court order in...

Thurston sees largest identity theft case in the county's history !!

An Olympia-area man has been arrested in what the Thurston County Sheriff's Office says is the largest identity-theft case in the county's history. More than 1,000 victims statewide had their driver's licenses, credit cards and Social Security numbers stolen, according to the Sheriff's Office...

Woman arrested in stolen of credit card !

A woman has been arrested on more than two dozen counts of fraud and other charges after using a stolen credit card over the course of about two weeks. Susan J. Hancock, 53, was arrested on 25 counts of fraudulent use of a credit card, 25 counts of computer tampering, fraudulent schemes, theft of...

ID-theft suspects arrested by Detectives !

A nearly nine-month investigation by Santa Barbara County Sheriff's detectives has led to the arrest of a former UCSB student as a suspected identity thief who bilked at least five victims out of at least $158,000. Imoukhuede Ohiwerei Ehimika, 26, of Nigeria was arrested Dec. 21 at his home in th...

UK's Cyber Cops Take Down 1800 Bogus Websites !

Detectives from London's Metropolitan Police Service's cyber crime unit have in the past year shut down 1,800 bogus websites, which were either fraudulent or advertising counterfeit goods, ranging from tickets to Premier League soccer games to Ugg boots and jewelry from Tiffany & Co. The...

Scammers Impersonate IT Helpdesk to Spread Rogue Antivirus

Criminals are posing as IT support staff, calling unsuspecting U.K. internet users to push rogue antivirus software. GetSafeOnline.org reports this as part of their Internet safety week campaign. These scam operations often involve up to 400 people using sales techniques and social engineering to...

Firm Finds Gaping Holes in Mobile Payments Applications

eBay’s PayPal online payment division is rushing a software patch to users of its iPhone mobile payments application to plug a hole that leaves users vulnerable to man-in-the-middle and phishing attacks, but the firm that found that hole said transaction security is just one problem facing the...

Phishing Vulnerability in Accela BizSearch Document View Window

Overview The document view window in Accela BizSearch Gateway Option has the following vulnerabilities which allow a remote attacker to: display a fraudulent web page over a legitimate web page steal cookies stored in browser place arbitrary cookies into browser Impact A remote attacker could...