July 6th, 2011 by lhaas                              

Reduce, reuse, recycle — just not your password

Sony Pictures, news site Gawker, and social networking site RockYou — following each high-profile breach, hackers released the password file and lit off a round of analysis of users’ password choices. The most common conclusion from researchers: Users select poor passwords.

Yet, in the real world, choosing weak passwords is much less dangerous [...]

June 27th, 2011 by lhaas                               1 comment', ' % comments', ''.7 million">

Citi hackers made $2.7 million

Citigroup suffered about US$2.7 million in losses after hackers found a way to steal credit card numbers from its website and post fraudulent charges.

Citi acknowledged the breach earlier this month, saying hackers had accessed more than 360,000 Citi credit card accounts of U.S. customers. The hackers didn’t get into Citi’s main credit [...]

June 22nd, 2011 by lhaas                              

How Citigroup hackers broke in ‘through the front door’ using bank’s website

Secrets of the sophisticated cyber criminals behind the Citigroup hack revealed:

They simply logged on to the part of the group’s site reserved for credit card customers – and substituted their account numbers which appeared in the browser’s address bar with other numbers.

It allowed them to leapfrog into the accounts of [...]

June 20th, 2011 by lhaas                              

Want to stop cybercrime? Follow the money

“Your role as a defender is: When a new attack comes out, you need to come out with a new defense,” says researcher Stefan Savage. “Attackers, on the other hand, can attack proactively whenever they feel like it.” Can a “follow the money” approach be the key to eliminating cybercrime?

Five dollars for [...]

June 15th, 2011 by lhaas                              

Survey: Breaches Cost Firms $7.2 Million Per Incident -WSJ.com

Andrew Hoog comments in the WSJ on the Citigroup hack:

The hacking incident at Citigroup Inc. could cost the company millions of dollars for customer notifications, card replacements and defections by jittery account holders.

The attack, which affected 1% of Citi’s North American bank card customers, is one of a string of breaches [...]

June 15th, 2011 by lhaas                              

Hacking Senate.gov

Here’s a great way to make friends in high places: Hack their server.

LulzSec — which has been making inroads into Anonymous’ griefer market share with aggressively promoted attacks on Sony, PBS, affiliates of the FBI, porn sites, and Bethesda Softworks and Brink (sites they like) – just posted data that looks like [...]

June 13th, 2011 by lhaas                              

Codemasters’ Website Hacked

Posted on slashdot.org: skybon writes: “After similar attacks on Sony and Square Enix, Codemasters’ website has now been hacked as well. The intrusion took place on 3 June, and is believed to have compromised members’ names, usernames, screen names, email addresses, date of birth, encrypted passwords, newsletter preferences, any biographies entered by users, [...]

June 2nd, 2011 by teull                              

Hackers Broaden Their Attacks – WSJ

This article looks at the significance of growing attacks targeted at a broad range of targets. Although it can be difficult to quantify, it is impossible to deny that malicious network attacks are an increasing risk for corporations and other organizations.

The takeway: If a company is not leveraging top-notch security expertise for [...]

May 31st, 2011 by lhaas                              

Spammers establish their own fake URL-shortening services

For the first time ever, spammers are establishing their own their own fake URL-shortening services to perform URL redirection, according to Symantec.

This new spamming activity has contributed to this month’s increase in spam by 2.9 percentage points, a rise that was also expected following the Rustock botnet takedown in March.

Under this [...]

May 31st, 2011 by lhaas                              

PlayStation Network hack will cost Sony $170M

An update to this article says that, even a month later, the network is still not fully restored.

Sony expects the hack of the PlayStation Network and will cost it ¥14 billion US$170 million this financial year, it said Monday.

Unknown hackers hit the network gaming service for PlayStation 3 consoles in April, [...]