Fake Facebook Profile For NATO Senior Commander Used To Phish Senior Brass

A fake Facebook profile for NATO Senior Commander James Stavridis, a US Navy Admiral, was used to trick senior officers in both the U.S. and British military to becoming friends. The spear phishing attack is of unknown origin and is believed to have divulged a wide range of personal information o...

Chinese spied on NATO officials using Facebook Friends

Chinese spied on NATO officials using Facebook Friends An online scam has been exposed in which senior British military and government officials were tricked into becoming Facebook friends with someone masquerading as U.S. Admiral James Stavridis, NATO's Supreme Allied Commander and lead officer ...

HITB2011KUL - Attacking Privacy of Social Network Users

Document Title: =============== HITB2011KUL - Attacking Privacy of Social Network Users References: =========== Download: http://www.vulnerability-lab.com/resources/videos/425.wmv View: http://www.youtube.com/watch?v=xGuV0Om67n8 Release Date: ============= 2012-02-05 Vulnerability Laboratory ID...

Researchers Find Sykipot Trojan Variant For Hijacking DoD Smart Cards

A report from Alien Vault says that variants of the Sykipot Trojan have been found that can steal DOD smartcard credentials. The research, published in a blog post Thursday, is the latest by Alien Vault to look at Sykipot, a Trojan horse program known to be used in targeted attacks against defens...

APEC Host Committee Spear-Phished by China

An Analysis published earlier this month by Kahu Security raises the possibility that the hack of systems used by the Asia Pacific Economic Cooperation host committee was the result of a spear phishing attack with links back to the Chinese mainland. As Threatpost reported yesterday, computers...

Security Woes Deepen: Japanese Embassies Targeted With Malware

There are new reports that dozens of diplomatic computers Japanese embassies abroad were infected with malware this Summer. The news comes on the heels of recent news about malicious software attacks on Japanese defense contractors and the Japanese Parliament. A report in a local Japanese...

Obama-Favored Think Tank Used as Bait in Spear Phishing Attacks

Spear phishing attacks against U.S. government officials, politicians and public policy wonks are using a D.C. think tank favored by the Obama Administration as bait, according to a report from researcher Mila Parkour. A new report out from virus researcher Mila Parkour on the blog Contagio says...

Malicious PDF Attack Baiting Defense Industry Victims

There has been a spate of spear-phishing attacks against a number of high-profile targets in the last few months, including RSA and others, and that trend is continuing unabated. Researchers have come across a fresh attack using the familiar malicious PDF attachment that appears to be targeting...

Byzantine Hades

Byzantine Hades is a code name given to a wide ranging and persistent group of network intrusions into U.S. military, government, and corporate systems. The operations can be broken down into three sub-categories: Byzantine Candor, Byzantine Anchor and Byzantine Foothold. Information on the hacks...

Verizon: RSA Hackers Using Trojans, Keyloggers In Second Wave Attacks

Customers of EMC’s RSA Security division that are worried about being the victim of an attack following the theft of sensitive data relating to that company’s SECURID tokens may not need to rush out and replace those tokens, according to security consulting firm Verizon Business. Efforts to stop...

SecurID Attack Was the Work of 'Very Experienced' Attackers

MALAGA, SPAIN–An RSA official on Friday offered more details of the attack the company suffered earlier this year in which thieves made off with key data related to the RSA SecurID two-factor authentication system. The attack, he said, targeted just four employees and was executed by a group he...

Report: Gmail Not Alone; Yahoo! And Hotmail Users Phished Also

In addition to widely publicized attacks targeting the Gmail accounts of government officials and activists, Trend Micro reported yesterday that Yahoo! Mail and Hotmail are being targeted with similar but separate attacks as well. The report, on Trend Micro’s Malware Blog on Thursday, was the fir...

China-Based Attacks Targeted Gmail of U.S. Officials, Activists

Search giant Google has again sounded the alarm about sophisticated attacks emanating from mainland China and targeting officials within the U.S. and Asian governments, as well as human rights activists and journalists. Samples of some of the messages posted on an independent researcher’s blog...

Researcher Creates Database of 35 Million Identifiable Google Profiles

A Dutch researcher has discovered that he could convert most of the data within Google Profiles into a single SQL statement and expose, among other data, the usernames and Gmail addresses of some 35,000,000 people. The researcher, Matthijs R. Koot explained in a blogpost that there is an xml file...

The Oak Ridge National Laboratory Hacked !

A top United States federal lab was the victim of a "silent" cyberattack earlier this month, news outlets are reporting The Oak Ridge National Laboratory in Tennessee was the victim, according to Nextgov.com. The lab is an energy department laboratory that studies nuclear fusion, supercomputing,...

Insecure Mail Server Offers Chinese Government Accounts To The Masses

A security researcher who identified holes in SCADA software used by utilities in China has issued a new warning to that country’s CERT about insecure Web infrastructure, including an e-mail server that allows any Web user to create their own Chinese government mail account. Dillon Beresford, a...

Report Describes Far-Flung Chinese Cyber Espionage Against U.S. Government

The massive campaign of cyber intrusions of U.S. government Web sites by China’s People’s Liberation Army PLA now has a name: “Byzantine Hades,” according to a report Thursday by Reuters. The report says that China has gained the upper hand over the U.S. in the arena of cyberwarfare, developing a...

How Phishers Will Use Epsilon Data Against You

By B.K. DeLong There has been a lot of online venting and hand-wringing in the week since customers of email services provider Epsilon began informing millions of individuals in North America and Europe that their name and e-mail address had been stolen in a massive data breach. In the week since...

Phisher Hooks Condé Nast, Reels in $8 Million

Condé Nast was baited in a phishing scam that netted a Texas man nearly $8 million in company funds, according to published reports. According to a complaint filed in Manhattan District Court by the U.S. Attorney’s Office last week, the publishing giant was fooled by a single phishing e-mail sent...

Security Threats Increasing in Sophistication and Precision

IBM’s X-Force 2010 Trend and Risk report showed that as vulnerability disclosures hit their highest level ever in 2010, security threats continued to increase in sophistication and precision. Like the term or not, 2010 may well have been the year of the APT, the term has become familiar to nearly...