Collaborate Disseminate
More banks have reportedly launched investigations into potential security breaches on their networks after hackers stole US$81 million from the Bangladesh central bank earlier this year through rogue SWIFT transfers.Security firm FireEye, which was… Continue reading Up to a dozen banks are reportedly investigating potential SWIFT breaches
Routers and other wireless devices made by Ubiquiti Networks have recently been infected by a worm that exploits a year-old remote unauthorized access vulnerability.The attack highlights one of the major issues with router security: the fact that th… Continue reading Worm infects unpatched Ubiquiti wireless devices
Cisco Systems has fixed four denial-of-service vulnerabilities that attackers could exploit to cause Web Security Appliance devices to stop processing traffic correctly.The Cisco Web Security Appliance (WSA) is a line of security devices that inspec… Continue reading Cisco patches high severity flaws in its Web Security Appliance
Victims of the widespread TeslaCrypt ransomware are in luck: Security researchers have created a tool that can decrypt files affected by recent versions of the malicious program.Surprisingly, the TeslaCrypt creators themselves helped the researchers… Continue reading TeslaCrypt victims can now decrypt their files for free
A hacker is trying to sell a database dump containing account records for 167 million LinkedIn users.The announcement was posted on a dark market website called TheRealDeal by a user who wants 5 bitcoins, or around $2,200, for the data set that supp… Continue reading A hacker is selling 167 million LinkedIn user records
Security researchers have found a new version of a malware program called Skimer that’s designed to infect Windows-based ATMs and can be used to steal money and payment card details.Skimer was initially discovered seven years ago, but it is still ac… Continue reading Stealthy malware Skimer helps hackers easily steal cash from ATMs
The antivirus engine used in multiple Symantec products has an easy-to-exploit vulnerability that could allow hackers to easily compromise computers.
The flaw was fixed by Symantec in Anti-Virus Engine (AVE) version 20151.1.1.4, released Monday via LiveUpdate. The flaw consists of a buffer overflow condition that could be triggered when parsing executable files with malformed headers.
According to Google security engineer Tavis Ormandy, who found the flaw, the vulnerability can be exploited remotely to execute malicious code on computers. All it takes is for the attacker to send an email with the exploit file as attachment or to convince the user to visit a malicious link.
To read this article in full or to leave a comment, please click here
Continue reading A critical flaw in Symantec antivirus engine puts computers at risk of easy hacking
Over the past two years, a group of cybercriminals has infected almost 1 million computers with malware that hijacks search results, even when they’re served over encrypted HTTPS connections.
The click-fraud botnet earns its creators money through Google’s AdSense for Search program, according to researchers from security firm Bitdefender. The affiliate program, intended for website owners, allows them to place a Google-powered custom search engine on their websites to generate revenue when users click on ads displayed in the search results.
Instead of doing that, this botnet’s operators intercept Google, Bing, and Yahoo searches performed by users on their own computers and replace the legitimate results with those generated by their custom search engine. They do this using a malware program that Bitdefender products detect as Redirector.Paco.
To read this article in full or to leave a comment, please click here
Continue reading An HTTPS hijacking click-fraud botnet infects almost 1 million computers
Over the past two years, a group of cybercriminals has infected almost 1 million computers with malware that hijacks search results, even when they’re served over encrypted HTTPS connections.
The click-fraud botnet earns its creators money through Google’s AdSense for Search program, according to researchers from security firm Bitdefender. The affiliate program, intended for website owners, allows them to place a Google-powered custom search engine on their websites to generate revenue when users click on ads displayed in the search results.
Instead of doing that, this botnet’s operators intercept Google, Bing, and Yahoo searches performed by users on their own computers and replace the legitimate results with those generated by their custom search engine. They do this using a malware program that Bitdefender products detect as Redirector.Paco.
To read this article in full or to leave a comment, please click here
Continue reading An HTTPS hijacking click-fraud botnet infects almost 1 million computers
Researchers from Kaspersky Lab have developed a method of decrypting files affected with the latest version of CryptXXX, a malware program that combines ransomware and information-stealing capabilities.CryptXXX was first discovered in April by secur… Continue reading Researchers crack new version of CryptXXX ransomware