Most attention goes to keeping hackers out. But once they’re inside, how do they extract data? Research of 200 data breaches in 24 countries examines the ways data is leaving. Read the full article. [CSO]
A bogus application that lures Facebook users by falsely offering to
show who has been viewing their profile has been exposed as a scam. A researcher warns he
has already identified 25 different copies of the same rogue app but
using different monikers such as peeppeep-pro, profile-check-online and
stalk-my-profile. Read the full article. [The Register]
The latest version of the Zeus do-it-yourself crimeware kit goes to
great lengths to thwart would-be pirates by introducing a
hardware-based product activation scheme similar to what’s found in
Microsoft Windows. Read the full article. [The Register]
Reported losses from online fraud more than doubled last year, from $265 million in 2008 to nearly $560 million in 2009, according to figures released Friday by the FBI. Read the full article. [KrebsonSecurity]
Microsoft has released a one-click “fix-it” workaround to help Internet Explorer users block malware attacks against an unpatched browser vulnerability.The Fix-It workaround, available here, effectively disables peer factory in the iepeers.dll binary in affected versions of Internet Explorer.
A lot of people in the security industry are paid to think like attackers: pen testers, security consultants, software security experts. But some of these people have never met an actual black hat, so much of their work is necessarily based on what they think attackers might do in a given situation.
The Public Interest Registry will add an extra layer of security known
as DNS Security Extensions (DNSSEC) to the .org domain
in June — a move that will protect millions of non-profit
organizations and their donors from hacking attacks known as cache
poisoning. Read the full article. [Network World]
Dennis Fisher talks with Marc Maiffret of FireEye at RSA Conference 2010 about the lack of sophistication in the Aurora attack and the state of malware attacks on the Web.
Humza Zaman, a co-conspirator in the hack of TJX and other companies,
was sentenced Thursday in Boston to 46 months in prison and fined
$75,000 for his role in the conspiracy. The sentence matches what
prosecutors were seeking. Read the full article. [Wired]
The takedown of 100 servers used to control Zeus-related botnets may
be a short-lived victory, security researchers said after discovering
that about a third of the orphaned channels were able to regain
connectivity in less than 48 hours. The resurrection of at least 30 command and control channels came
after their ISP found a new upstream provider to
provide connectivity to the outside world, autonomous system records
showed. Read the full article. [The Register]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
