Hentai Malware Criminals Arrested in Japan
Japanese police have arrested two men over suspected involvement in a
Hentai-themed malware scam campaign. Read the full article. [The Register]
Donald Sears
DoD Considers Protecting Private IT Systems
The Pentagon has raised the possibility of the Defense Department
becoming engaged in safeguarding nationally critical IT systems run by
business. Read the full article. [GovInfoSecurity]
Research: Frame-Busting Does Not Stop Clickjacking
New research from Stanford University and Carnegie Mellon
University’s Silicon Valley campus found that frame-busting, a popular
technique that basically stops a website from operating when it’s loaded
inside a “frame,” does not prevent clickjacking. Read the full article. [Dark Reading]
One of the most novel approaches for acquiring new botnet clients is a weird combination consisting of direct DDoS extortion,
followed by penalties for delayed response and the offering of 30% discount in case the victim wants to
DDoS the competition once the ransom is paid. Read the full article. [ZDNet]
Five people were indicted this week on wire fraud and other criminal charges stemming from a 2007 cybertheft in which nearly $450,000 was stolen from the bank accounts of the city of Carson, California using credential-stealing spyware. Read the full article. [Computerworld]
Cisco Systems has warned of serious vulnerabilities in a device that
connects a building’s ventilation, lighting, security, and energy supply
systems so they can be controlled by IT workers remotely. The networking giant urged users of the Cisco Network
Building Mediator products to patch the vulnerabilities, which among
other things allow adversaries to obtain administrative passwords. Read the full article. [The Register]
Media Temple, Web hosting provider for Adobe, ABC, Sony, NBC, Time,
Volkswagen, and Starbucks, was hit with a sophisticated distributed
denial-of-service (DDoS) attack. Read the full article. [CNET]
A researcher was able to gain unfettered access to
his iPhone 3GS from Ubuntu 10.04. If he connected the device whilst it
was turned off and then turned it on, Ubuntu auto-mounted the file
system and was able to access several folders despite never having
previously been connected to the iPhone. Read the full article. [The H Security]
Researchers from Microsoft have come up a sensor
widget concept that provides alerts and lets users control and monitor
exactly what other users see from their webcams, microphones, and other
live data streams. Read the full article. [Dark Reading]
A second US man has been jailed over controversial denial of service
attacks against the Church of Scientology two years ago. Read the full article. [The Register]
