Security Experts:

Cybercrime
long dotted

NEWS & INDUSTRY UPDATES

Italian police on Friday arrested four alleged hackers believed to belong to the activist group Anonymous for attacking websites, including those of the Vatican and the parliament in Rome.
The website of Britain's Financial Times appeared to have been hacked on Friday by the Syrian Electronic Army.
Researchers at Zscaler have discovered a fake YouTube page that is hosting malicious Chrome extensions. Such pages, as seen in the past, prey on the uninformed users with poorly patched systems to spread malware.
Four members of the LulzSec international hacking group were sentenced to prison terms in Britain on Thursday for masterminding cyber attacks on major global institutions, including Sony Pictures and the CIA.
The Internet Crime Complaint Center says consumers had to pay a hefty price last year due to a mix of malware attacks and fraud schemes committed via the Web.
The New Yorker magazine on Wednesday unveiled a new online system for anonymous whistleblower tips, based on technology developed by the late Internet activist Aaron Swartz and a former hacker.
Despite four takedowns in five years, PushDo is back, complete with new features designed to make the botnet more resilient and elusive, researchers said.
During the Reuters Cybersecurity Summit this week, FBI Executive Assistant Director Richard McFeely said that the agency is pushing a broader effort to communicate more with victims of cybercrime.
Cyber-criminals are actively updating the Travnet malware and improving the botnet's infrastructure to boost its document-stealing capabilities.
Symantec researchers called attention to a social engineering scheme that has a decidedly low-tech beginning.

FEATURES, INSIGHTS // Cybercrime

rss icon

Tal Be'ery's picture
We can assume Bitcoin will be followed by Bitcoin 2.0 that will solve Bitcoin 1.0 problems while maintaining the parts that were crucial to its success. But what exactly are these crucial elements?
Wade Williamson's picture
Passwords are the ultimate goal for many hacking operations regardless of their sophistication. But, it’s important that we address the reality that strong passwords can’t be the only answer.
John Vecchi's picture
Understanding the various types of malicious actors targeting your networks, including their motivations and modus operandi, is key to identifying, expelling and expunging them.
Ryan Naraine's picture
In this podcast, Greg Hoglund talks to Ryan Naraine about the inner workings of APT attack campaigns, the legal issues around hacking-back against adversaries and why the industry needs to be more aggressive to thwart the theft of intellectual property.
Gant Redmon's picture
When it comes to cybercrime, the police really can’t and aren’t going to protect residents of your town. The same goes for all towns and cities. Unless you’re talking a high six-figure theft, it's unlikely an officer will be assigned to your case.
John Vecchi's picture
Botnets are frequently found on today’s corporate networks. A growing number of the infections caused by botnets are in fact symptoms of an advanced targeted attack.
Wade Williamson's picture
Security evasion and customized malware has become mainstream for attackers of all skill levels, and we will always lose if we attempt to fight an automated threat with a manual response.
Oliver Rochford's picture
When the Chinese government states that it is not behind most of these attacks – it is possibly telling the truth. That the Chinese government has offensive cyber capabilities are not disputed. What is not a given is that all of this activity has been officially prompted or sanctioned.
Marc Solomon's picture
One of the challenges with deploying a sandbox-only solution to deal with malware is that attackers are making it their job to understand security technologies, how they work, where they are deployed and how to exploit their weaknesses.
Ram Mohan's picture
Is the main purpose of WHOIS data to enhance the overall stability and security of the Internet by providing contact points for network operators and administrators? Or is it to help combat infringements on intellectual property, fraud and other forms of abuse? Both? Neither?