Newly Uncovered 'MoneyTaker' Hacker Group Stole Millions from U.S. & Russian Banks

Security researchers have uncovered a previously undetected group of Russian-speaking hackers that has silently been targeting Banks, financial institutions, and legal firms, primarily in the United States, UK, and Russia. Moscow-based security firm Group-IB published a 36-page report on Monday,...

CVE-2017-7833

Some Arabic and Indic vowel marker characters can be combined with Latin characters in a domain name to eclipse the non-Latin character with some font sets on the addressbar. The non-Latin character will not be visible to most viewers. This allows for domain spoofing attacks because these combine...

Latin American ATM Thieves Turning to Hacking

MADRID—ATM jackpotting is hardly a novelty act in Latin America where criminals are more than ever connecting with hackers to figure out how to more efficiently steal money from an automated teller than, say, by using a stick of dynamite. No, it’s not uncommon to hear about thefts in Brazil,...

Why ArtsSEC decided to partner with Wallarm

by Maximiliano Soler, @maxisoler by Maximiliano Soller, CTO of ArtsSEC The greatest thing with partnerships is how well the organisations’ expertise complement each other. Our partnership with Wallarm has incredibly exceeded our expectations in their innovation and expertise in web application...

Legal Robot: Missing homograph filter character

A security researcher pointed out that while fixing report 260938, we missed one homograph of a latin l character...

Latin American social media giant Taringa hacked; 28M accounts stolen

By Waqas Another day, another data breach This time Taringa, a Reddit-like This is a post from HackRead.com Read the original post: Latin American social media giant Taringa hacked; 28M accounts stolen...

Taringa: Over 28 Million Users' Data Exposed in Massive Data Breach

Exclusive — If you have an account on Taringa, also known as "The Latin American Reddit," your account details may have compromised in a massive data breach that leaked login details of almost all of its over 28 million users. Taringa is a popluar social network geared toward Latin American users...

Mozilla: Domain spoofing with combination of Canadian Syllabics and other unicode blocks (MFSA 2017-16)

Characters from the "Canadian Syllabics" unicode block can be mixed with characters from other unicode blocks in the addressbar instead of being rendered as their raw "punycode" form, allowing for domain name spoofing attacks through character confusion. The current Unicode standard allows...

latinamerica.jll.com XSS vulnerability

Vulnerable URL: http://www.latinamerica.jll.com/latin-america/en-us/search?k=%3C/script%3E%3Cimg%20src=x%20onerror=prompt/XSSPOSED/%3E Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 14:29 GMT Vulnerability type:| XSS Vulnerability status:|...

New Variant of Ploutus ATM Malware Observed in the Wild in Latin America

Introduction Ploutus is one of the most advanced ATM malware families we’ve seen in the last few years. Discovered for the first time in Mexico back in 2013, Ploutus enabled criminals to empty ATMs using either an external keyboard attached to the machine or via SMS message, a technique that had...

cultus.hk XSS vulnerability

Vulnerable URL: http://www.cultus.hk/latinlessons/declension/adj3a.php?keyword=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 3736571 VIP website status:| No Check cultus.hk SSL...

Santiago Pontiroli and Roberto Martinez on ATM Jackpotting

Threatpost editor Mike Mimoso talks with Roberto Martinez and Santiago Pontiroli, researchers with Kaspersky Lab’s Global Research and Analysis Team GReAT about ATM malware, jackpotting, and why it works so well in Latin America...

TOTVS RM PORTAL Cross Site Scripting

TOTVS RM PORTAL Educational - Multiple Cross Site Scripting Vulnerabilities Product web page: www.totvs.com.br Author: vesp3r Email: [email protected] Published: 13/02/2016 Vendor Product Description TOTVS pronounced Totus is a Brazilian software company, with headquarters in Sao Paulo. TOTVS w...

hyatt.com XSS vulnerability

Vulnerable URL: http://www.hyatt.com/ws/typeahead-json-latin?citylimit=2=501=3=515=3=508==496"=jQuery172093841264693383391446414273511=P=full=12=2+x&=1446414354203 Details: Description| Value ---|--- Patched:| Yes, at 31.08.2016 Latest check for patch:| 31.08.2016 09:48 GMT Vulnerability type:| X...

latin-dictionary.org XSS vulnerability

Open Bug Bounty ID: OBB-57888 Description| Value ---|--- Affected Website:| latin-dictionary.org Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...

CVE-2014-6664

The CVE-2014-6664 entry concerns the Android app Latin Angels Music HD (com.applizards.lafreetj) v2.0, where SSL/TLS connections do not verify X.509 certificates. This missing certificate validation can enable man-in-the-middle attackers to spoof servers and access sensitive information via a cra...

YACS CMS <= 6.6.1 context[path_to_root] Remote File Include Vuln

No description provided by source. matasanos YACS CMS last version and maybe all File Inclusion Vulnerability affected software: YACS Yet Another Community System vendor: yacs . you can donwload it from http://www.yetanothercommunitysystem.com level: Highly Critical muy critico...

WhatsApp Spam Campaing Leads to Banking Trojan

Spam emails promoting a non-existent PC version of the popular WhatsApp messaging service could be leading unsuspecting users to a malicious banking Trojan. The emails, written in Portuguese, trick the recipient into thinking they already have 11 pending friend invitations, according to Kaspersky...

Yahoo Removes Ads Redirecting to Magnitude Exploit Kit

The race to replace the Blackhole Exploit Kit as the web exploit pack of choice for cybercriminals seems to have an early leader in Magnitude. Researchers at Dutch security firm Fox-IT reported over the weekend that European visitors to Yahoo were falling victim to malicious ads hosted on the sit...

Edward Snowden made public appearance at Moscow's Sheremetyevo Airport

Whistleblower Edward Snowden made a public appearance yesterday at a Moscow airport, beside a staff member of the Wikileaks organization, met with representatives of a half-dozen or so human rights groups. Snowden has not been seen in public and was stuck in the transit area of Moscow’s...