EUVD-2010-4188

Malware in sbrugna...

CVE-2010-4214

The Wells Fargo Mobile application 1.1 for Android stores a username and password, along with account balances, in cleartext, which might allow physically proximate attackers to obtain sensitive information by reading application data...

Report: Big U.S. Banks Are Stiffing Account Takeover Victims

When U.S. consumers have their online bank accounts hijacked and plundered by hackers, U.S. financial institutions are legally obligated to reverse any unauthorized transactions as long as the victim reports the fraud in a timely manner. But new data released this week suggests that for some of t...

TikTok is being discouraged and the app may be banned

In recent news retail giant Amazon sent a memo to employees telling them to delete the popular social media app TikTok from their phones. In the memo it stated that the app would pose a security risk without going into details. Later the memo was withdrawn without an explanation except that it wa...

signup.wellsfargoinsurancelawsuit.com XSS vulnerability

Open Bug Bounty ID: OBB-586688 Description| Value ---|--- Affected Website:| signup.wellsfargoinsurancelawsuit.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score...

Compromised LinkedIn accounts used to send phishing links via private message and InMail

Phishing continues to be a criminals' favorite for harvesting user credentials with more or less sophisticated social engineering tricks. In this post, we take a look at a recent attack that uses existing LinkedIn user accounts to send phishing links to their contacts via private message but also...

Wells Fargo Mobile - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Wells Fargo Mobile published at the 'play' market has multiple vulnerabilities...

Ecuador Bank Hacked — $12 Million Stolen in 3rd Attack on SWIFT System

Bangladesh is not the only bank that had become victim to the cyber heist. In fact, it appears to be just a part of the widespread cyber attack on global banking and financial sector by hackers who target the backbone of the world financial system, SWIFT. Yes, the global banking messaging system...

onlineenroll.wellsfargo.com XSS vulnerability

Vulnerable URL: https://onlineenroll.wellsfargo.com/onlineenroll/eddenroll/contactInfo Details: Description| Value ---|--- Patched:| Yes, at 27.04.2016 Latest check for patch:| 27.04.2016 13:37 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Threat Outbreak Alert RuleID16775: Email Messages Distributing Malicious Software on July 18, 2015

Medium Alert ID: 40038 First Published: 2015 July 20 13:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16775 may contain the following files: Name | Siz...

Threat Outbreak Alert: Fake Bank Documents Email Messages on April 1, 2014

Medium Alert ID: 33610 First Published: 2014 April 1 20:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain bank documents for the recipient. The text in the email message attempts to convince the recipient to open the...

Threat Outbreak Alert: Fake Wells Fargo Advisors Email Messages on November 26, 2013

Medium Alert ID: 31917 First Published: 2013 November 26 19:59 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a message from Wells Fargo for the recipient. The text in the email message attempts to convince the recipien...

Threat Outbreak Alert: Fake Bank Documents Notification Email Messages on November 13, 2013

Medium Alert ID: 31756 First Published: 2013 November 13 20:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain important bank documents from Wells Fargo for the recipient. The text in the email message attempts to convin...

Threat Outbreak Alert: Fake Check Processing Notification Email Messages on October 29, 2013

Medium Alert ID: 31532 First Published: 2013 October 29 19:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a check processing notification from Wells Fargo Check Processing Services for the recipient. The text in the...

Threat Outbreak Alert: Fake Bank Document Delivery Email Messages on October 29, 2013

Medium Alert ID: 31525 First Published: 2013 October 29 14:23 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain important documents from Wells Fargo for the recipient. The text in the email message attempts to convince the...

Threat Outbreak Alert: Fake Document Attachment Email Messages on September 30, 2013

Medium Alert ID: 31033 First Published: 2013 September 30 18:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an important document from Wells Fargo. The text in the email message attempts to convince the recipient to...

Threat Outbreak Alert: Fake Wire Transfer Failure Notification Email Messages on September 24, 2013

Medium Alert ID: 30968 First Published: 2013 September 24 19:07 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claims to contain a failed wire transfer notification from Wells Fargo for the recipient. The message attempts to convince th...

Threat Outbreak Alert: Fake Important Documents Notification Email Messages on September 18, 2013

Medium Alert ID: 30875 First Published: 2013 September 19 16:37 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain important documents from Wells Fargo for the recipient. The email message attempts to convince the recipient...

Threat Outbreak Alert: Fake Wells Fargo Fax Message Notification Email Messages on September 16, 2013

Medium Alert ID: 30822 First Published: 2013 September 16 18:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a fax message notification from Wells Fargo for the recipient. The text in the email message attempts to...

Threat Outbreak Alert: Fake Important Documents Notification Email Messages on September 9, 2013

Medium Alert ID: 30694 First Published: 2013 September 9 18:09 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain important documents from Wells Fargo for the recipient. The email message attempts to convince the recipient ...