I will be speaking at the Atlanta Infragard A-List security training conference on August 25th. I will talk about the evolving cyber-crime threat landscape that is targeting users of online banking systems. I’ll also review various ways that banks can deploy solutions to help protect their users. I’ll look at various protection types for consumer [...]
11 alleged Russian spies have been arrested and charged with conspiracy to commit an offense against the United States by not registering with the attorney general. 9 of these individuals have also been charged with money laundering. Details on the people arrested are here. One couple is based in Cambridge, MA. The FBI says that [...]
White house cybersecurity coordinator Howard Schmidt has announced the NSTIC, the National Strategy for Trusted Identities in Cyberspace. The initiative is a blend of federated identities combined with government (or trusted third party)- issued digital identities (primarily in the form of digital certificates). I do think that a national federated identity scheme requires strong authentication, [...]
According to a research report by security firm SMobile Systems, about 20 percent of the 48,000 Android apps in the Android marketplace allow a third party to access the user’s data. This is typically apps sending SMS messages to premium phone numbers, or making phone calls on behalf of users. Many of those applications are [...]
At the 2010 Consumer Privacy Consultation conference, held in Calgary Alberta Canada this week, FTC officials met with their counterparts at the Office of the Privacy Commissioner of Canada (OPC) to discuss privacy issues related to cloud computing practices and their implications for individuals, organizations, and businesses. Kathryn Ratte, a senior attorney in the FTC’s [...]
It seems that it’s not only the customers of US, UK and Brazilian banks that are under attack from crimeware such as the Zeus trojan, that logs into online bank accounts and allows criminals to transfer funds from victims’ accounts. Now customers of Eastern European banks are also under attack, according to security researcher Joe [...]
Police in Europe and the United States have arrested 178 people in 14 countries on charges of credit card fraud. Apparently the investigation has found 120,000 stolen credit card numbers, and 5,000 cloned credit cards. Six card cloning labs have been seized. Brian Krebs (krebsonsecurity.com) has posted an excellent blog post today. He’s even posted [...]
Bank Info Security magazine today published an interview with Doug Johnson of the American Bankers Association (ABA) on the topic of corporate banking account takeovers by cyber criminals. Cyber criminals are increasingly using malware to steal online access to the bank accounts of small and medium sized companies and government agencies, and fraudulently transfer hundreds [...]
Patco, a Sanford, Maine-based construction company, had its corporate bank account taken over by cyber criminals last May, resulting in unauthorized funds transfers of over $588,000. The funds were sent to dozens of money mules throughout the country, who then forwarded the funds overseas. Patco has sued their bank, Ocean bank of Portsmouth, NH, for [...]
The United Kingdom’s Information Commissioner’s Office has warned organisations that they need to minimise the risk of mistakes, as the number of reported data breaches exceeds 1,000. An ICO report revealed that 254 breaches were as a result of information being disclosed in error, 307 were as a result of stolen data or hardware and [...]
