Malware


Fake Amazon Shipping Notice Hides Trojan

The image of an open Amazon delivery box has a prominent place in the
latest spam campaign that aims to trick users into downloading an
alleged order update coming from the dot com giant. Read the full article. [Help Net Security]

Large DDoS Attacks Still a Serious Problem

In the world of botnets and denial-of-service attacks, 2009 was a very interesting year. While a handful of large, noisy botnets got most of the attention, there were thousands of serious, prolonged DDoS attacks that not only chewed up huge amounts of bandwidth but likely caused major problems for the targeted organizations.


A false rumor suggesting that Facebook is to start charging is being used to bait malware traps.Thousands of disgruntled users, angry at the false claims that a $4.99 a month charge
for using the social networking site that will supposedly kick in have been induced to
visit “protest group” sites in response to spam emails. Read the full article. [The Register]

A phisher hoping to harvest bank login details managed to smuggle his app onto the Android app store. Malicious apps posted by Droid09 were quickly identified, prompting a warning to legitimate users and a ban for the VXer. Read the full article. [The Register]

Malware Open Season on Taxpayers

by

By Dmitry Bestuzhev   As any reader of this site knows, cybercriminals can steal your money not just by putting malware on your machine, but by phishing attacks too. Phishing attacks don’t just target online banking and e-payment systems, but almost any site which asks the user to input sensitive data.

by

Heartland Payment Systems on Jan. 8 announced that it has agreed to pay up to $60 million to Visa to cover losses to credit and debit cardholders affected by the massive data breach Heartland suffered in 2008. Read the full article. [eWEEK]

A financial services industry group is
planning to simulate a series of cyber attacks to test how well banks,
payment processors and retailers deal with online threats.  Participants will be expected to activate their incident response
procedures in accordance with the scenario presented and to complete an
anonymous survey to evaluate their organization’s response. Read the full story [Dark Reading]