Category Archives: credentials

XPCTRA financial malware leaves no stone unturned

Posted on by

A Trojan that has previously been only stealing users’ banking credentials has been modified to do much more than that. This new variant, dubbed XPCTRA, can also steal users credentials for bitcoin cryptocurrency wallet Blockchain.info, online e-payment service PerfectMoney, e-wallet provider Neteller, as well as email credentials. The XPCTRA financial malware threat The threat was discovered and analyzed by Morphus Labs CRO (and SANS ISC incident handler) Renato Marinho, who says that the sample he … More → Continue reading XPCTRA financial malware leaves no stone unturned→

Reasons to place a time limit on entering login credentials?

Posted on by

A service I use has a time limit (seemingly fairly short – 10-20 seconds maybe) on entering credentials at the login webpage. Attempting to login after this period gives the below message:
login error message

[For security reasons, users are required to enter their credentials within a given period. This period has been exceeded. We’d like to ask you to log in again.]

The page then refreshes and I can log in without issue.

What security concerns might this service be trying to address by requiring the login within a ‘given period’?

Continue reading Reasons to place a time limit on entering login credentials?→