The FBI’s top anti-cyber crime official today said the
agency is planning a law enforcement action against so-called “money
mules,” individuals willingly or unwittingly roped into helping
organized computer crooks launder money stolen through online banking
fraud. Read the full article. [KrebsonSecurity]
The U.S. Senate has approved Lt. Gen. Keith Alexander, director of the
National Security Agency, to also head the military’s recently created
U.S. Cyber Command. Read the full article. [Computerworld]
Mozilla has expanded its Plugin Check utility to support multiple web browsers.According to Mozilla, a new cross-browser Plugin Check page now works with Firefox, Safari 4, Chrome 4, Opera 10.5 and Internet Explorer 7 and 8 for the most popular plugins (but since IE requires specific code to be written for each plugin, it will take a little longer to get to full coverage).
A now-closed Facebook exploit took advantage of cross site scripting to inject malicious code into Yelp. Normally such an attack wouldn’t have particularly broad implications for Facebook users, but Yelp is one of the three sites that have been deemed fit for Facebook’s highly controversial Instant Personalization feature. Read the full article. [TechCrunch]
A deceptive “help” message invites recipients to check their PCs’
compatibility with Windows 7 by downloading and running an altered
version of the Windows 7 Upgrade Advisor concealing a Trojan. Read the full article. [Help Net Security]
On the heels of a worm that
was installing backdoors on Windows systems via Yahoo Instant Messenger
comes a new worm that is even more sophisticated in its social
engineering and payload, researchers have discovered. Read the full article. [CNet]
In the past few days a number of websites created using WordPress have been hacked. While the attack initially appeared to be limited to web sites hosted by American ISP DreamHost, it has since become apparent that blogs hosted at GoDaddy, Bluehost and Media Temple have also been affected. Read the full article. [The H Security]
Visa is warning financial institutions that it has
received reliable intelligence that an organized criminal group plans to
attempt to move large amounts of fraudulent payments through a merchant
account. Read the full article. [KrebsonSecurity]
A zero-day vulnerability in Apple’s Safari browser could expose millions of Windows users to drive-by download malware attacks. The flaw is currently unpatched.
This week, the Electronic Privacy Information Center filed a 38-page complaint against Facebook with the Federal Trade Commission, demanding it cancel new features introduced in mid-April that compel users to share more information than before. Read the full article. [Computerworld]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
