• Search for:
    16 Mar, 2020
    The Web’s Bot Containment Unit Needs Your Help
    Cybersecurity , , ,

    Anyone who’s seen the 1984 hit movie Ghostbusters likely recalls the pivotal scene where a government bureaucrat orders the shutdown of the ghost containment unit, effectively unleashing a pent-up phantom menace on New York City. Now, something similar is in danger of happening in cyberspace: Shadowserver.org, an all-volunteer nonprofit organization that works to help Internet service providers (ISPs) identify and quarantine malware infections and botnets, has lost its longtime primary source of funding. …

    Read MoreThe Web’s Bot Containment Unit Needs Your Help

    12 Mar, 2020
    Live Coronavirus Map Used to Spread Malware
    Cybersecurity , , , , , ,

    Cybercriminals constantly latch on to news items that captivate the public’s attention, but usually they do so by sensationalizing the topic or spreading misinformation about it. Recently, however, cybercrooks have started disseminating real-time, accurate information about global infection rates tied to the Coronavirus/COVID-19 pandemic in a bid to infect computers with malicious software.  …

    Read MoreLive Coronavirus Map Used to Spread Malware

    12 Mar, 2020
    Crafty Web Skimming Domain Spoofs “https”
    Cybersecurity , , , , , , , , , , , , , ,

    Earlier today, KrebsOnSecurity alerted the 10th largest food distributor in the United States that one of its Web sites had been hacked and retrofitted with code that steals credit card and login data. While such Web site card skimming attacks are not new, this intrusion leveraged a sneaky new domain that hides quite easily in a hacked site’s source code: “http[.]ps” (the actual malicious domain does not include the brackets, which are there to keep readers from being able to click on it). …

    Read MoreCrafty Web Skimming Domain Spoofs “https”

    28 Feb, 2020
    FCC Proposes to Fine Wireless Carriers $200M for Selling Customer Location Data
    Cybersecurity , , , , , , , , , ,

    The U.S. Federal Communications Commission (FCC) today proposed fines of more than $200 million against the nation’s four largest wireless carriers for selling access to their customers’ location information without taking adequate precautions to prevent unauthorized access to that data. While the fines would be among the largest the FCC has ever levied, critics say the penalties don’t go far enough to deter wireless carriers from continuing to sell customer location data. …

    Read MoreFCC Proposes to Fine Wireless Carriers $200M for Selling Customer Location Data

    24 Feb, 2020
    Zyxel Fixes 0day in Network Storage Devices
    Cybersecurity , , , , , , , , , , , , , ,

    Networking hardware vendor Zyxel today released an update to fix a critical flaw in many of its network attached storage (NAS) devices that can be used to remotely commandeer them. The patch comes 12 days after KrebsOnSecurity alerted the company that precise instructions for exploiting the vulnerability were being sold for $20,000 in the cybercrime underground. Based in Taiwan, Zyxel Communications Corp. (a.k.a “ZyXEL”) is a maker of networking devices, including Wi-Fi routers, NAS products and hardware firewalls. The company has roughly 1,500 employees and boasts some 100 million devices deployed worldwide. While in many respects the class of vulnerability addressed in this story is depressingly common among Internet of Things (IoT) devices, the flaw is notable because it has attracted the interest of groups specializing in deploying ransomware at scale. …

    Read MoreZyxel Fixes 0day in Network Storage Devices

    18 Feb, 2020
    Encoding Stolen Credit Card Data on Barcodes
    Cybersecurity , ,

    Crooks are constantly dreaming up new ways to use and conceal stolen credit card data. According to the U.S. Secret Service, the latest scheme involves stolen card information embedded in barcodes affixed to phony money network rewards cards. The scammers then pay for merchandise by instructing a cashier to scan the barcode and enter the expiration date and card security code. …

    Read MoreEncoding Stolen Credit Card Data on Barcodes

    17 Feb, 2020
    Pay Up, Or We’ll Make Google Ban Your Ads
    Cybersecurity , , , ,

    A new email-based extortion scheme apparently is making the rounds, targeting Web site owners serving banner ads through Google’s AdSense program. In this scam, the fraudsters demand bitcoin in exchange for a promise not to flood the publisher’s ads with so much bot and junk traffic that Google’s automated anti-fraud systems suspend the user’s AdSense account for suspicious traffic. …

    Read MorePay Up, Or We’ll Make Google Ban Your Ads

    8 Feb, 2020
    Dangerous Domain Corp.com Goes Up for Sale
    Cybersecurity , , , , , , , , , , ,

    As an early domain name investor, Mike O’Connor had by 1994 snatched up several choice online destinations, including bar.com, cafes.com, grill.com, place.com, pub.com and television.com. Some he sold over the years, but for the past 26 years O’Connor refused to auction perhaps the most sensitive domain in his stable — corp.com. It is sensitive because years of testing shows whoever wields it would have access to an unending stream of passwords, email and other proprietary data belonging to hundreds of thousands of systems at major companies around the globe. …

    Read MoreDangerous Domain Corp.com Goes Up for Sale

    28 Jan, 2020
    Wawa Breach May Have Compromised More Than 30 Million Payment Cards
    Cybersecurity , , , , , , , , , , , , , ,

    In late December 2019, fuel and convenience store chain Wawa Inc. said a nine-month-long breach of its payment card processing systems may have led to the theft of card data from customers who visited any of its 850 locations nationwide. Now, fraud experts say the first batch of card data stolen from Wawa customers is being sold at one of the underground’s most popular crime shops, which claims to have 30 million records to peddle from a new nationwide breach. …

    Read MoreWawa Breach May Have Compromised More Than 30 Million Payment Cards

    24 Jan, 2020
    Does Your Domain Have a Registry Lock?
    Cybersecurity , , , , , , , , , , , , , , , ,

    If you’re running a business online, few things can be as disruptive or destructive to your brand as someone stealing your company’s domain name and doing whatever they wish with it. Even so, most major Web site owners aren’t taking full advantage of the security tools available to protect their domains from being hijacked. Here’s the story of one recent victim who was doing almost everything possible to avoid such a situation and still had a key domain stolen by scammers. …

    Read MoreDoes Your Domain Have a Registry Lock?