A vulnerability on Facebook forced hundreds of thousands of users to
endorse a series of webpages over the holiday weekend, making the social
networking site the latest venue for an attack known as clickjacking. Read the full article. [The Register]
Malware authors are increasingly willing — if not eager — to talk
about what they’re working on in a public forum like Twitter. Read the full article. [InfoWorld]
Organized cyber thieves stole more than $100,000 from a small credit
union who serves U.S. Treasury employees in Salt Lake City last week, in a brazen online robbery that
involved dozens of co-conspirators. Read the full article. [KrebsonSecurity]
Researchers at TippingPoint’s Digital Vaccine Laboratories have reported a new batch of unpatched security holes in Adobe software products.
Oil giant BP suffered further embarrassment after its
official Twitter account was hacked. Pranksters purloined the @BP_America Twitter account to write “Terry
is now in charge of operation Top Kill, work will recommence after we
find a XXL wetsuit. #bpcares #oilspill”. Read the full article. [The Register]
Federal authorities say they have cracked open a cybercrime gang that
allegedly duped tens of thousands of consumers into paying more than
$100 million for worthless antivirus protection, priced from $30 to $70.
A Chicago grand jury returned an indictment against Bjorn Daniel Sundin, 31, a U.S. citizen believed
to be living in the Ukraine; Shaileshkumar P. Jain, 40, a Swedish
citizen believed to be living in Sweden; and James Reno, 26, of Amelia,
Ohio. Read the full article. [The Last Watchdog]
Japanese police have arrested two men over suspected involvement in a
Hentai-themed malware scam campaign. Read the full article. [The Register]
The Pentagon has raised the possibility of the Defense Department
becoming engaged in safeguarding nationally critical IT systems run by
business. Read the full article. [GovInfoSecurity]
New research from Stanford University and Carnegie Mellon
University’s Silicon Valley campus found that frame-busting, a popular
technique that basically stops a website from operating when it’s loaded
inside a “frame,” does not prevent clickjacking. Read the full article. [Dark Reading]
One of the most novel approaches for acquiring new botnet clients is a weird combination consisting of direct DDoS extortion,
followed by penalties for delayed response and the offering of 30% discount in case the victim wants to
DDoS the competition once the ransom is paid. Read the full article. [ZDNet]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
