Skip to main content

Welcome

News, Announcements, Tech Discussions

44713 Topics
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Security Industry News
Hackers hitting point of sale systems with BrutPOS botnet

by [url=http://www.v3.co.uk/author/profile/2325/alastair-stevenson]Alastair Stevenson [/url]09 Jul 2014 [img]http://www.v3.co.uk/IMG/229/206229/cyber-security-540x334.jpg?1332939999[/img]A new botnet, codenamed BrutPOS, has been uncovered targeting point of sale (POS) systems with advanced bank card stealing attacks. The BrutPOS botnet was discovered by researchers at FireEye and has already enslaved 5,622 machines, though only 179 are currently being used by the hackers. [url=http://www.fireeye.com/blog/technical/botnet-activities-research/2014/07/brutpos-rdp-bruteforcing-botnet-targeting-pos-systems.html]FireEye researchers Nart Villeneuve, Josh Homan and Kyle Wilhoit said the campaign[/url] aims to steal financial information from the POS systems by targeting Microsoft Remote Desktop Protocol (RDP) servers with poor passwords, in a blog post.   [url=http://www.v3.co.uk/v3-uk/news/2354449/hackers-hitting-point-of-sale-systems-with-brutpos-botnet]Full Article[/url]

3441
Jasper_The_Rasper
Moderator
10 years ago
K
New Voice
Kasie-92New Voice
asked in Community 101
my optimize scan area is blank since i renewed my subscription by calling the company

Hello, I'm a newbie...........Kasie92 I have used Webroot for several years and when I saw the price for a renewal I called the company and stated that as I only ever us 1 PC I wanted a reduced price. (a closed mouth is never fed) They ended up giving me a discount. I did ask if the content would be the same. they said yes it would be the same.I have tried to use the optimize scan. It doesn't work. At first I thought is it me???? I found how to change the settings on what I wanted to be optimized but when I go to the scan area it's blank even though the name optimize is there.  I know from reading these posts there are some talented people in here to help me. I await your phenomenal input.                             Kasie-92

19436
nic
10 years ago
R
Community Guide
retiredAntus67Community Guide
posted in Security Industry News
FireEye Fixes Security Vulnerabilities in FireEye Operating System (FEOS)

By [url=http://www.securityweek.com/authors/eduard-kovacs]Eduard Kovacs[/url] on July 09, 2014   [b]FireEye Operating System (FEOS) updates that address a series of security vulnerabilities have been released for several products, FireEye announced on Tuesday.[/b] The updates fix flaws in FEOS NX, EX, AX, FX and CM. The company advises customers to upgrade their installations to NX 7.1.1.222846, EX 7.1.1.222846, AX 7.1.0.223064, FX 7.1.0.224362 and CM 7.1.1.222846, versions that have been released on June 12, except for FX, which was made available on June 30. FireEye points out the fact that the 7.1.2 special version of CM does not contain all the fixes, which is why users should upgrade to version 7.2.0 or above. These new versions address a total of five OpenSSL vulnerabilities that were [url=http://www.securityweek.com/new-mitm-vulnerability-plagues-client-server-versions-openssl]disclosed[/url] by the OpenSSL Project on June 5. The most critical of these security holes (CVE-2

2390
R
Community Guide
10 years ago
R
Community Guide
retiredAntus67Community Guide
posted in Security Industry News
Android SMS bot sets new infection record

By [url=http://betanews.com/author/ianbarker/]Ian Barker[/url] Posted on July 9 2014   [img]https://d1qy7qyune0vt1.cloudfront.net/webroot-en/attachment/12400iD6827807421B94A6.jpg[/img] Earlier this week we covered the debate on whether [url=http://betanews.com/2014/07/07/do-android-users-really-need-malware-protection/]Android users need malware protection[/url]. If further fuel for the argument was needed it comes in the form of Russian security firm [url=http://drweb.com/?lng=en]Dr.Web[/url]'s monitoring of Android threats.  Until recently embedded advertising modules have topped Dr.Web's malicious program rankings, but statistics for recent months indicate that an Android SMS bot Trojan has been spreading at an alarming rate. In late May, the number of incidents involving this malware increased by 227 percent, and in June the total number exceeded 670,000, up from 235,516 earlier in the year. In the past month Android.SMSBot.120.origin has become the most common Andro

2570
R
Community Guide
10 years ago
R
Community Guide
retiredAntus67Community Guide
posted in Security Industry News
Cloud storage putting networks at risk

By  [url=mailto:mark.sutton@itp.com]Mark Sutton[/url] Published  July 9, 2014  [img]https://d1qy7qyune0vt1.cloudfront.net/webroot-en/attachment/12390i7FBD4DCB1A4CEF6F.jpg[/img] [b]Users may be putting corporate PC and networks at risk of hijack by cybercriminals through the use of cloud storage services, according to Kaspersky Lab.[/b]   The security company said that analysis of data from the Kaspersky Security Network, which voluntarily takes data from Kaspersky security users, 30% of malware found in cloud folders on home computers is planted via synchronization mechanisms. For corporate users, the figure reaches 50% [b]itp.net / Full read here/ [url=http://www.itp.net/598981-cloud-storage-putting-networks-at-risk]http://www.itp.net/598981-cloud-storage-putting-networks-at-risk[/url][/b]

1680
R
Community Guide
10 years ago
R
Community Guide
retiredAntus67Community Guide
posted in Security Industry News
Weaponised Flash flaw can pinch just about anything from anywhere

By [url=http://www.theregister.co.uk/Author/2242]Richard Chirgwin[/url], 9 Jul 2014   Get cracking with the latest Flash upgrade, because the vulnerability it patches is a peach, allowing a cross-site request forgery (CSRF) attack for stealing user credentials. According to the Switzerland-based Google engineer that turned up the vulnerability, Michele Spagnuolo, sites that are/were vulnerable to the attack included various Google domains, YouTube, Twitter, Instagram, Tumblr and eBay. [img]http://pubads.g.doubleclick.net/gampad/ad?iu=/6978/reg_security/front&sz=300x250%7C300x600&tile=3&c=33U704VKwQrMsAAFl88YYAAAEe&t=ct%3Dns%26unitnum%3D3%26unitname%3Dwww_top_mpu%26pos%3Dtop%26test%3D0[/img]“I present Rosetta Flash, a tool for converting any SWF file to one composed of only alphanumeric characters in order to abuse JSONP endpoints, making a victim perform arbitrary requests to the domain with the vulnerable endpoint and exfiltrate potentially sensitive data, not lim

1410
R
Community Guide
10 years ago
Petrovic
Gold VIP
PetrovicGold VIP
posted in Security Industry News
Fake Digital Certificates Found in the Wild While Observing Facebook SSL Connections

Visiting a website certified with an SSL certificate doesn’t mean that the website is not bogus. Secure Sockets Layer (SSL) protect the web users in two ways, it uses public key encryption to encrypt sensitive information between a user’s computer and a website, such as usernames, passwords, or credit card numbers and also verify the identity of websites. Today hackers and cyber criminals are using every tantrum to steal users’ credentials and other sensitive data by injecting fake SSL certificates to the bogus websites impersonating Social media, e-commerce, and financial websites as well. [b]DETECTING FAKE DIGITAL CERTIFICATES WIDELY[/b]A Group of researchers,[i] Lin-Shung Huang , Alex Ricey , Erling Ellingseny and Collin Jackson[/i], from the Carnegie Mellon University in collaboration with Facebook have analyzed [[url=https://www.linshunghuang.com/papers/mitm.pdf]PDF[/url]] more than 3 million SSL connections and found strong evidence that at least 6;845 (0:2%) of them were in

21
R
Community Guide
10 years ago
R
Community Guide
retiredAntus67Community Guide
posted in Security Industry News
Tunisian Hackers Target Governments, Banks in "TheWeekofHorror" Cyber Attacks

By [url=http://www.securityweek.com/authors/fahmida-y-rashid]Fahmida Y. Rashid[/url] on July 09, 2014 [b]A group operating under the name Tunisian Hackers Team are targeting the websites of government agencies and large organizations with distributed denial of service (DDoS) attacks, according to a public-facing advisory issued by Solutionary.[/b] The operation named seven financial organizations, each of which will be attacked over a 24-hour period starting from July 5 and going all the way to July 11, according to Solutionary. [b]#TheWeekofHorror[/b] operation will target Whitney Bank, Union Bank, Zions Bank, New York Community Bank, TCF Bank, Prosperity Bank, and Banner Bank. Solutionary reported attacks occurred according to the published schedule, which would mean attacks against Whitney Bank on July 5, Union Bank on July 6, and Zions Bank on July 7.   [b]Full Article/ [url=http://www.securityweek.com/tunisian-hackers-target-governments-banks-theweekofhorror-cyber-attack

1690
R
Community Guide
10 years ago
R
Community Leader
Retired013118Community Leader
posted in Tech Talk
How Smart Are Your Tweets?

Dave Johnson[b]@davejohndc[/b] July 8, 2014   Justin Bieber may have celebrated his 20th birthday this spring but on Twitter, he isn’t smarter than a fifth grader. The rebellious Canadian pop star shouldn’t be embarrassed: Lady Gaga is also tweeting at fifth grade level, while President Barack Obama doesn’t score much higher: he tweets like a seventh grader.   According to TIME’s analysis of 1 million public tweets, 33 percent of tweets test at a fourth grade reading level. The test relied upon a commonly used reading comprehension survey known as SMOG, or Simple Measure of Gobbledygook (really), to assess the complexity of messages sent on the social network. “Gobbledygook” is defined as a word of three or more syllables.   Who uses the most gobbledygook? You guessed it: politicians. Search for lawmakers like[b]@NancyPelosi[/b] and[b]@SpeakerBoehner[/b] to see how they measure up, or use the tool to find the smartest and dumbest tweets of any public twitter account. &nb

880
R
Community Leader
10 years ago
R
Community Leader
Retired013118Community Leader
posted in Security Industry News
Hacking Any Facebook Accounts using REST API

by Sabari Selvan on Tuesday, July 08, 2014   Stephen Sclafani , a Security Researcher, has discovered a critical security vulnerability in the Social Networking giant Facebook that allowed him to hack any facebook accounts.   Stephen just need your user ID, he can hack into your account and read private messages, view email addresses, create or delete notes, on top of that he can update status and upload photos and tag you friends, on behalf you.   "A misconfigured endpoint allowed legacy REST API calls to be made on behalf of any Facebook user using only their user ID" Stephen explained in his blog.   [url=http://www.ehackingnews.com/2014/07/hacking-any-facebook-accounts-using.html]Full article[/url]

4320
R
Community Leader
10 years ago
Ssherjj
Moderator
SsherjjModerator
posted in Security Industry News
Teensy card skimmers found in gullets of ATMs

[b]Teensy card skimmers found in gullets of ATMs[/b] Hi-tech fraudsters treading more softly, but gas still yields=ing bang for buck By Darren Pauli, 9 Jul 2014   A series of tiny and sometimes transparent card-skimming devices have been detected in ATMs across Europe, researchers say. Boffins with the European ATM Security Team (EAST) have plucked out and displayed some clever thumb-sized skimmers that hide from victims' view by fitting in cash terminals' gullets.       [img]https://d1qy7qyune0vt1.cloudfront.net/webroot-en/attachment/12378i7BA640F3A05EE5A8.png[/img] The devices paraded in the EAST report European Fraud Update for 2014 (subscription required) were designed for NCR machines and contained pinhole spy cameras which together with the skimmer would provide felons with the magnetic stripe data and PINs required to replicate the cards. One of the internal skimmers ditched the typical green fascade opting for a translucent colour, making it more difficult

20
Ssherjj
Moderator
10 years ago
RyanBot
Popular Voice
RyanBotPopular Voice
posted in Water Cooler
I'm back after 2 months :)

I am so happy to be back here :)

88
RyanBot
Popular Voice
10 years ago
Jasper_The_Rasper
Moderator
Jasper_The_RasperModerator
posted in Tech Talk
Facebook Helps Cripple Greek Botnet

[url=http://www.darkreading.com/author-bio.asp?author_id=322]Kelly Jackson Higgins[/url]  7/8/2014   Arrests made in Lecpetex malware campaign that was spreading via Facebook, emails.  Facebook today revealed details of how it helped derail a little-known botnet operation out of Greece that was used to steal and mine digital currency and spread via Facebook and Lightcoin mining -- infecting some 250,000 machines worldwide. Two of the alleged masterminds behind the botnet were arrested in Greece last week for their role in the so-called Lecpetex botnet. The attackers included malware in messages they sent to social network users -- including Facebook users -- which then spread the malware to the infected user's contacts as well.  Aside from mining digital currency via the bots, the attackers also stole email and bank account passwords, including the email address of Greece's Ministry of Mercantile Marine, according to [url=http://greece.greekreporter.com/2014/07

1930
Jasper_The_Rasper
Moderator
10 years ago
nic
nicRetired Webrooter
posted in News & Announcements
Fun new ad campaign launched at Gartner Summit

We have a new ad campaign for Brightcloud that was launched at the Gartner Summit - is something missing from your security?   [img]https://d1qy7qyune0vt1.cloudfront.net/webroot-en/attachment/12258i125CFD630F82BDF9.png[/img]

8601
R
Community Leader
10 years ago
R
Community Guide
retiredAntus67Community Guide
posted in Security Industry News
DPAPI vulnerability allows intruders to decrypt personal data

By: HNS Staff/ Posted on 08 July 2014.   [img]https://d1qy7qyune0vt1.cloudfront.net/webroot-en/attachment/12322i0FCA127A5E3E8F2B.jpg[/img]   DPAPI, first introduced in Windows 2000, is a technology to protect user and application data on the computer. DPAPI on later operating systems including Windows 2003, Windows Server 2008, and Windows Server 2012 while modified is still compatible with that of Windows 2K. Normally, the API encrypts data using the Master Key derived from the user logon password. However, under certain conditions user data can be decrypted without knowing the corresponding logon password. In particular, the implementation of DPAPI algorithm in all systems after Windows 2000 implies that the Master Key is built using PBKDF2 function from SHA-1 password hash, but the classic algorithm introduced in Windows 2K uses MD4 hash instead.   [b]Full Articles/ [url=http://www.net-security.org/secworld.php?id=17094]http://www.net-security.org/secworld.php?id=170

1840
R
Community Guide
10 years ago
R
Community Guide
retiredAntus67Community Guide
posted in Security Industry News
Russian MP fears US Secret Service cuffed his son for Snowden swap

By [url=http://www.theregister.co.uk/Author/2395]Iain Thomson[/url], 8 Jul 2014   The US Secret Service has announced the arrest of a man accused of being "one of the world's most prolific traffickers in stolen financial information," touching off a diplomatic firestorm in the process. Roman Valerevich Seleznev, who goes by the online handle Track2, is accused of hacking into point-of-sale systems to steal credit card data, which he then allegedly sold online to fraudsters via servers he maintained.  He has been charged in Washington State with possessing more than 15 unauthorized access devices, bank fraud, aggravated identity theft, and unlawfully breaking into protected computer systems. He also faces similar charges in Nevada that could see him inside an American prison for the next 30 years     [b]Full article/ [url=http://www.theregister.co.uk/2014/07/08/us_secret_service_arrest_russian_mps_son_for_pointofsale_hacking/]http://www.theregister.co.uk/2014/07/08/u

2720
R
Community Guide
10 years ago
R
Community Guide
retiredAntus67Community Guide
posted in Tech Talk
OneNote introduces new clipping feature with me@OneNote.com

By [url=http://betanews.com/author/alanbuckingham/]Alan Buckingham[/url]  Posted on July 8 2014   [img]https://d1qy7qyune0vt1.cloudfront.net/webroot-en/attachment/12320iC71F25CDFB002D54.png[/img]   Keeping tabs of things across multiple platforms generally falls into two camps -- you are either an Evernote fan, or a OneNote user. One thing the former has excelled at is clipping content from the web and allowing the user to easily save it to a notebook. Now OneNote takes a step forward in this arena, adding new features to keep up with its rival.  The feature works a bit differently than WebClipper, but that isn't a bad thing. Users can send an email to me@OneNote.com and it will automatically clip the web content, as well as the contents of the email message.   [b]betanews/ full read here/ [url=http://betanews.com/2014/07/08/onenote-introduces-new-clipping-feature-with-meonenote-com/]http://betanews.com/2014/07/08/onenote-introduces-new-clip

40
R
Community Guide
10 years ago
R
Community Guide
retiredAntus67Community Guide
posted in Security Industry News
DHS Mistakenly Releases 840-pages of Critical Infrastructure Documents Via Mishandled FOIA Request

By [url=http://www.securityweek.com/authors/brian-prince]Brian Prince[/url] on July 08, 2014   [img]https://d1qy7qyune0vt1.cloudfront.net/webroot-en/attachment/12318i4AEFAB76A7906808.jpg[/img]   [i]DHS Releases Trove of Documents Related to Wrong “Aurora” in Response to Freedom of Information Act (FOIA) Request[/i] The U.S. Department of Homeland Security (DHS) has released hundreds of documents, some of which contain sensitive information and potentially vulnerable critical infrastructure points across the United States, in response to a recent Freedom of Information Act (FOIA) request about a cyber-security attack. The Operation Aurora attack was publicized in 2010 and impacted Google and a number of other high-profile companies. However, DHS responded to the request by releasing more than 800 pages of documents related to the 'Aurora' experiment conducted several years ago at the Idaho National Laboratory, where researchers demonstrated a way to [url=https://www.

5870
R
Community Guide
10 years ago
R
Community Guide
retiredAntus67Community Guide
posted in Water Cooler
Joke of the Week!!

A child asked his father, "How were people born?" So his father said, "Adam and Eve made babies, then their babies became adults and made babies, and so on." The child then went to his mother, asked her the same question and she told him, "We were monkeys then we evolved to become like we are now." The child ran back to his father and said, "You lied to me!" His father replied, "No, your mom was talking about her side of the family."

1371
Baldrick
Gold VIP
10 years ago
R
Community Guide
retiredAntus67Community Guide
posted in Security Industry News
'Chinese spy' behind Putter Panda hacking crew exposed by web pic snail trail

"Quote" 'Chinese spy' behind Putter Panda hacking crew exposed by web pic snail trail   By [url=http://www.theregister.co.uk/Author/2684]Jasper Hamill[/url], 10 Jun 2014 [i] [/i] [i]Summary/[/i] American security bods have unmasked a shady state-sponsored Chinese hacking group dubbed Putter Panda. Analysts at Crowdstrike [url=http://resources.crowdstrike.com/putterpanda/]traced the shadowy group[/url] to an address in Shanghai, and even outed its alleged leader.  The research firm claimed a 35-year-old bloke known online as "cpyy" registered domain names to which Putter Panda's activities have been linked. Crowdstrike also suggested he had links to the People's Liberation Army, whose Unit 61486, of the 12th Bureau, is known to engage in online espionage. The security firm also said this was "widely accepted to be China’s primary SIGINT collection and analysis agency, supporting China’s space surveillance network".   The Register/ Full Read Here/ [url=http://www.ther

2441
R
Community Guide
10 years ago
R
Community Leader
Retired013118Community Leader
posted in Tech Talk
Israel to test world's first hover cars

By Himanshu Arora on June 25, 2014, 2:45 PM   With the aim to revolutionize public transport, Israel is all set to build a network of elevated hover cars. SkyTran, a NASA Space Act company, will first build a 500m pilot loop on the campus of Israel Aerospace Industries (IAI) in central Israel, followed by a commercial network in the city of Tel Aviv.   The rapid transit system will consist of lightweight two-person vehicles, suspended from elevated magnetic tracks. The vehicles will be fitted with a technology that would allow commuters to order the car via their smartphones. These cars would pick up passengers at specific locations and then transport them directly to their destination. The test cars will have a maximum speed of 70 km/h (43 mph), but according to SkyTran, the commercial rollout is expected to offer much faster vehicles, potentially reaching speeds of up to 240 km/h.   The first components of the network will be pre-assembled at SkyTran's headquarters at

30
R
Community Leader
10 years ago
R
Community Guide
retiredAntus67Community Guide
posted in Security Industry News
Adware Company Linked to Development and Distribution of Mevade Malware

By [url=http://www.securityweek.com/authors/eduard-kovacs]Eduard Kovacs[/url] on July 08, 2014   [b]An Israeli company with ties to Ukraine is believed to be involved in the creation of a piece of malware, which it has distributed with the aid of adware, Trend Micro said in a new research paper published Monday. [/b] The firm in question is iBario Ltd., which is responsible for creating InstallBrain, an installer that bundles legitimate applications with potentially unwanted third-party programs. According to Trend Micro, the adware has been used to deliver Mevade/Sefnit malware, which is used for click-fraud and Bitcoin mining, onto the computers on which it's installed. The Mevade malware has been around for years, but managed to go unnoticed until August 2013 when its creators made some changes to bot communications, resulting in a considerable [url=http://www.securityweek.com/adware-spreads-mevade-malware-linked-tor-surge]increase[/url] in the number of Tor users. Experts beli

1570
R
Community Guide
10 years ago
R
Community Leader
Retired013118Community Leader
posted in Tech Talk
Robot caregiver offers company and security to 94-year-old grandmother

Reuters July 8, 2014   A robot that monitors the health of elderly people living alone and allows them to have face-to-face conversations with relatives or doctors is being tested in Rome by 94-year-old Grandma Lea. The makers of the GiraffPlus system say their robot can cut medical costs and let its elderly users maintain their independence. Matthew Stock reports.   94-year-old great-grandmother Lea Mina Ralli chats to the personal robot carer she's dubbed 'Mr Robin'. Her android assistant lets Grandma Lea, as she's affectionately known, connect remotely with relatives and carers face-to-face, using a system similar to Skype. Mr Robin uses a network of sensors and an internet connection to navigate around Grandma Lea's Rome apartment. It continually monitors her movement, and collects and analyses data, such as blood pressure and heart rate, to keep track of her health. She says it's already become a reassuring presence in her life. (SOUNDBITE) (Italian) LEA MINA RALLI, ALSO

130
R
Community Leader
10 years ago
R
Community Guide
retiredAntus67Community Guide
posted in Security Industry News
Zuckerberg says basic Internet should be as universal as 911 service

By Zach MinersJuly 7, 2014 07:58 PM ET  IDG News Service - Mark Zuckerberg sees the Internet as a vital service that should be made available to everyone across the world -- a service that can be as vital as, say, the ability to call for emergency help on a telephone. In an [url=http://online.wsj.com/articles/mark-zuckerberg-on-a-future-where-the-internet-is-available-to-all-1404762276]editorial[/url] published Monday in The Wall Street Journal, the Facebook chief outlined his vision for a future of universal Internet access, and the steps he sees to get there. Currently only one-third of the world is connected, he said, with the rest lacking access due to issues like high costs or a lack of infrastructure. Facebook has been looking to grow beyond its founding as a pure-play social networking site to become an ambitious Internet services provider, using tools that to some might seem like science fiction. [url=http://www.pcworld.com/article/2137640/why-zuckerberg-prefers-drones-to-

3385
R
Community Leader
10 years ago
Petrovic
Gold VIP
PetrovicGold VIP
posted in Security Industry News
The NSA's spying has in fact hurt U.S. cloud providers

When [url=http://www.infoworld.com/d/consumerization-of-it/edward-snowden-has-stripped-us-of-all-illusion-about-our-digital-world-232749]Edward Snowden ripped open the curtain[/url]and began revealing details of the NSA's data vacuuming, IT analysts warned that an unintended consequence of the program was a [url=http://www.infoworld.com/d/cloud-computing/thanks-nsa-youre-killing-the-cloud-220434]huge blow to the credibility of U.S. cloud providers[/url]. After all, they asked, why would anyone who cares about the security of their data put it someplace where government snoops could access it?   At the time, the ITIF (Information Technology & Innovation Foundation) [url=http://www2.itif.org/2013-cloud-computing-costs.pdf]published a prediction[/url] that the U.S. cloud computing industry stood to lose as much as $35 billion by 2016. James Staten, a veteran Forrester Research analyst, [url=http://blogs.forrester.com/james_staten/13-08-14-the_cost_of_pris

12884
R
Community Leader
10 years ago

Badges

Show all badges

Join the Conversation

Terms & Conditions