Nigel Parkinson, president of Parkinson Construction who built the D.C Convention Center and Nationals baseball stadium, fell victim to phony SSN email site that stole passwords, including those to the company’s bank account where money mules were used to steal funds. Read the full article. [Washington Post]
Malicious hackers are using fake alerts around H1N1 (Swine Flu) vaccines to trick end users into installing malware on Windows computers, according to warnings issued by computer security firms.The latest malware campaign begins with e-mail messages offering information regarding the H1N1 vaccination. The e-mail messages contain a link to a bogus Centers for Disease Control and Prevention site with prompts to create a user profile. During this process, a malware file gets planted on the user’s machine.
The mysterious black screen of death problem that some Windows users have been experiencing in the last few days turns out not to be related to the latest round of Microsoft patches after all.
By Nick Selby (Managing Director,
Trident Risk Management)
Vulnerability assessment vendor Rapid7
has announced the first of a series of steps to integrate its
penetration testing and vulnerability assessment scanning products. The
first step is a module that allows users of the Metasploit Framework,
which Rapid7 acquired in October to natively import NeXpose scanner results and then take automated action against vulnerabilities MSF is capable of attacking.
Hackers
can use maliciously rigged PDF files to hack into corporate systems
hosting the BlackBerry Attachment Service, according to a warning from
the makers of the popular smartphone.
Research in Motion (RIM) issued an advisory with patches for
multiple flaws in the PDF distiller service and warned and an attacker
could exploit the issues by simply e-mailing a booby-trapped PDF file
to a BlackBerry user.
The Koobface botnet, one of the most efficient social engineering driven botnets, is entering the Xmas season with a newly introduced template spoofing a YouTube video page, in between enticing the visitor into installing a bogus Adobe Flash Player Update (New Koobface campaign spoofs Adobe’s Flash updater), which remains one of the most popular social engineering tactics used by the botnet masters. Read the full article. [ZDNet]
Seven restaurants in Louisiana and Mississippi, have filed a class-action suit
against Georgia-based Radiant Systems for producing a point-of-sale
(POS) system that they say was not compliant with payment card industry
security standards and resulted in an undetermined number of customers
having their debit and credit card numbers stolen by a Romanian hacker. Read the full article. [Wired]
Whether Hannaford Bros. customers may recover damages for the time and
trouble it took them to straighten out their bank or credit card
accounts after the Scarborough-based firm’s computer system was
breached in late 2007 and early 2008 now is up to the Maine Supreme
Judicial Court. Read the full article. [Bangor Daily News]
The free Picviz tool from the Honeynet Project takes data from various log analysis sources and converts them into a multidimensional visual map of events. Read the full article. [Dark Reading]
A U.S. district court judge has ordered the largest “spam gang” in the
world to pay nearly $15.2 million for sending unsolicited e-mail
messages marketing male-enhancement pills, prescription drugs, and
weight-loss supplements, according to the U.S. Federal Trade Commission. Read the full article. [InfoWorld]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
