Facebook Clickjacking Attack Spreading
A new clickjacking attack has targeted Facebook users with photos and images posted in the comments section. Read the full article. [Help Net Security]
Malware
P2P, Mobile Malware to Rise in 2010
Cybercriminals have already begun shifting their focus from websites to
file-sharing networks when it comes to dispensing malware, and will
continue with this trend throughout 2010 with more mobile malware to come. Read the full article. [Ars Technica]
Black Energy Tool Used in Citigroup Hack
The Federal Bureau of Investigation is probing a computer-security
breach targeting Citigroup Inc. that resulted in a theft of tens of
millions of dollars by computer hackers who appear linked to a Russian
cyber gang, according to government officials. Read the full article. [Wall Street Journal]
Intel has released a patch for its series of silicon-based security
protections after researchers from Poland identified flaws that allowed
them to completely bypass the extensions. Read the full article. [The Register]
The malware writers and criminals who run botnets for years have been using shared hosting platforms and so-called bulletproof hosting providers as bases of operations for their online crimes. But, as law enforcement agencies and security experts have moved to take these providers offline, the criminals have taken the next step and begun setting up their own virtual data centers.
Attackers got their hands on a valid set of Twitter credentials and used them to compromise the DNS records. Read the full article. [eWEEK]
It didn’t take long before cybercriminals seized the opportunity to use
the death of actress Brittany Murphy to peddle malware in search engine optimization poisoning. Read the full article. [Help Net Security]
The iKee worm that was infecting jailbroken iPhones last month was a simple, yet effective, piece of software that shows how easy it might be for an attacker to create a fairly large, functioning botnet comprising mobile devices, an analysis of the worm shows.
Heartland Payment Systems will pay American Express $3.6 million to
settle charges relating to the 2008 hacking of its payment system
network. Read the full article. [Computerworld]
The PHP developers have released version 5.2.12 of their popular programming language, fixing over 60 bugs mainly to increase stability, but also closing some security holes. Read the full article. [The H Security]
