Computer Security Articles
RSS Reader for Computer Security Articles
Spanish police nab suspect behind Neverquest banking malware
Spanish police have arrested a Russian programmer suspected of developing the Neverquest banking Trojan, a malware targeting financial institutions across the world.
The 32-year-old Russian citizen known as Lisov SV was arrested at the Barcelona airport, Spain’s law enforcement agency Guardia Civil said on Friday.
The FBI had been working with Spanish authorities to track down the suspect through an international arrest warrant, according to a statement from the agency. The FBI, however, declined to comment on the man’s arrest.
Neverquest is designed to steal username and password information from banking customers. Once it infects a PC, the malware can do this by injecting fake online forms into legitimate banking websites to log any information typed in. It can also take screenshots and video from the PC’s desktop and steal any passwords stored locally.
To read this article in full or to leave a comment, please click here
Trump nominee suggests IRS cybersecurity and staffing boosts
Cybersecurity and staffing upgrades at the Internal Revenue Service appear to be in store, assuming Steven Mnuchin is confirmed as Treasury Secretary in the new Trump Administration.
Mnuchin, a former CIO and executive vice president for Goldman Sachs, told senators in a five-hour confirmation hearing on Thursday that he is “very concerned about the lack of first-rate technology at the IRS” as well as staff cuts in recent years. Mnuchin is expected to be confirmed, and would likely work with Trump to pick the next IRS director.
To read this article in full or to leave a comment, please click here
Google pushed developers to fix security flaws in 275K Android apps
Over the past two years, Google has pressured developers to patch security issues in more than 275,000 Android apps hosted on its official app store. In many cases this was done under the threat of blocking future updates to the insecure apps.
Since 2014, Google has been scanning apps published on Google Play for known vulnerabilities as part of its App Security Improvement (ASI) program. Whenever a known security issue is found in an application, the developer receives an alert via email and through the Google Play Developer Console.
[To comment on this story, visit Computerworld’s Facebook page.]
To read this article in full or to leave a comment, please click here
Microsoft’s standing to sue over secret U.S. data requests in doubt
Microsoft’s lawsuit objecting to the indiscriminate use by U.S. law enforcement of orders that demand user data without the opportunity to inform the customer may run into questions about the software giant’s standing to raise the issue on behalf of its customers.
A government motion to dismiss Microsoft’s complaint comes up for oral arguments Monday and significantly the judge said on Thursday that the issue of whether Fourth Amendment rights are personal or can be “vicariously” asserted by third-parties on behalf of their customers would have to be addressed by both sides. The Fourth Amendment to the U.S. Constitution prohibits unreasonable searches and seizure of property.
To read this article in full or to leave a comment, please click here
The Analysis of ISC BIND NSEC Record Handling DoS (CVE-2016-9147)
The latest patch for BIND from the Internet Systems Consortium (ISC) fixes a NESC record-related bug. Remote BIND recursive servers may crash when attempting to handle the specifically-crafted query response with NESC record sent by attackers, thereby causing a denial of service (DoS). This potential DoS vulnerability is caused by a RUNTIME CHECK error in Resolver.c when caching the DNS response with NSEC Record. In this post we will examine the BIND source codes and expose the root cause of this vulnerability. The NSEC record (record type…
Read MoreIntroducing Sophos Phish Threat: the world’s easiest-to-use attack simulator
Our mission at Sophos is to provide the best security solutions on the market and to make them easier to understand, deploy and manage than any of our competitors’ offerings. From our continuous assessment of the threat landscape, two things are abundantly clear: first, that email is one of the most problematic sources of infection; […]
Avoid these “Free Minecraft / Garry’s Mod” adverts
 | |
| If you see ads claiming to offer up free games like Garry’s Mod or Minecraft, you may wish to think twice – you’ll definitely get an extension, you may receive an executable, but free Minecraft? Keep searching, intrepid gamer… Categories: Tags: childrenchromeextensionsgamesgaminggarrys modminecraft |