Spyware, Viruses, & Security forum


NEWS - December 26, 2012

by Carol~ Forum moderator / December 26, 2012 12:36 AM PST
Exploring the Market for Stolen Passwords

Not long ago, PCs compromised by malware were put to a limited number of fraudulent uses, including spam, click fraud and denial-of-service attacks. These days, computer crooks are extracting and selling a much broader array of data stolen from hacked systems, including passwords and associated email credentials tied to a variety of online retailers.

At the forefront of this trend are the botnet creation kits like Citadel, ZeuS and SpyEye, which make it simple for miscreants to assemble collections of compromised machines. By default, most bot malware will extract any passwords stored in the victim PC's browser, and will intercept and record any credentials submitted in Web forms, such as when a user enters his credit card number, address, etc. at an online retail shop.

Some of the most valuable data extracted from hacked PCs is bank login information. But non-financial logins also have value, particularly for shady online shops that collect and resell this information. [Screenshot]

Logins for everything from Amazon.com to Walmart.com often are resold — either in bulk, or separately by retailer name — on underground crime forums. A miscreant who operates a Citadel botnet of respectable size (a few thousand bots, e.g.) can expect to quickly accumulate huge volumes of "logs," records of user credentials and browsing history from victim PCs. Without even looking that hard, I found several individuals on Underweb forums selling bulk access to their botnet logs; for example, one Andromeda bot user was selling access to 6 gigabytes of bot logs for a flat rate of $150.

Continued : http://krebsonsecurity.com/2012/12/exploring-the-market-for-stolen-passwords/
Post a reply
Discussion is locked
You are posting a reply to: NEWS - December 26, 2012
The posting of advertisements, profanity, or personal attacks is prohibited. Please refer to our CNET Forums policies for details. All submitted content is subject to our Terms of Use.
Track this discussion and email me when there are updates

If you're asking for technical help, please be sure to include all your system info, including operating system, model number, and any other specifics related to the problem. Also please exercise your best judgment when posting in the forums--revealing personal information such as your e-mail address, telephone number, and address is not recommended.

You are reporting the following post: NEWS - December 26, 2012
This post has been flagged and will be reviewed by our staff. Thank you for helping us maintain CNET's great community.
Sorry, there was a problem flagging this post. Please try again now or at a later time.
If you believe this post is offensive or violates the CNET Forums' Usage policies, you can report it below (this will not automatically remove the post). Once reported, our moderators will be notified and the post will be reviewed.
Collapse -
Instagram's woes continue, now subject of a class-action..
by Carol~ Forum moderator / December 26, 2012 1:15 AM PST
.. lawsuit over ToS mess

Isn't this supposed to be the season of goodwill? An Instagram user from California has filed a class-action lawsuit against the photo-sharing service in response to proposed changes to its terms of service.

If Instagram was granted a single Christmas wish this year, it might be for the furor surrounding last week's proposed changes to its terms of service to shrivel up and die. But it seems the situation still has some legs in it.

According to a Reuters report on Monday, the photo-sharing site is now the target of a class-action lawsuit filed in San Francisco federal court late last week in connection with its changed terms.

Brought by California resident and Instagram user Lucy Funes together with "other California customers", the lawsuit claims breach of contract - along with several other claims - and has been filed despite Instagram CEO Kevin Systrom last week clarifying the situation regarding the new terms, which are set to come into effect next month.

Continued : http://www.digitaltrends.com/photography/instagram-subject-of-a-class-action-lawsuit-over-tos-mess/
Collapse -
[INFOGRAPHIC] Windows 8 Steps Up with Security Features
by Carol~ Forum moderator / December 26, 2012 1:16 AM PST

From the TrendLabs Security Intelligence Blog:

Deviating from its usual window-style interface, Microsoft's Windows 8 operating system (OS) has excited customers with its tiled design and its promise of built-in security. The company released its new OS before November started, just in time to generate buzz before Black Friday and Cyber Monday. As a result, we saw Windows 8 devices making it to best deal offers from Sony, Costco, and Best Buy.

Now that Windows 8 is out in the market, the discourse turns from what's new to why bother. What's new is that Windows 8 offers a sleek computing experience while it answers longtime security problems, syncs to the well-loved cloud, and allows for easy sharing, among others. Some critics however find that many customers might not see the worth in shifting to the new OS, especially after they've grown to love Windows 7.

Still, security features in Windows 8 may just change the mind of many. We saw the platform offer several key security improvements, which, though mostly unseen by users, can be very effective in warding off threats. Our CTO Raimund Genes also mentioned this in his 2013 predictions, although he also noted that the improved security will be enjoyed mostly by consumers, since adopting to a new operating system is something that enterprises are known to have difficulty handling.

Continued : http://blog.trendmicro.com/trendlabs-security-intelligence/infographic-windows-8-steps-up-with-security-features/

Popular Forums
Computer Help 49,613 discussions
Computer Newbies 10,349 discussions
Laptops 19,436 discussions
Security 30,426 discussions
TVs & Home Theaters 20,308 discussions
Windows 10 360 discussions
Phones 15,802 discussions
Windows 7 7,351 discussions
Networking & Wireless 14,641 discussions


Free trip to the Grand Prix

Don't miss your chance to win a trip to the Formula 1 Grand Prix in Monaco for you and a plus-one.