Archives for 

Security Breach

More than 360 million newly stolen credentials sold on black market

Researchers from Hold Security LLC,have identified more than 360 million credentials in the underground market. The details of the data is not yet publicized nor any company name is identified as per the reports. Alex Holden, CISO of Hold Security LLC, said in an interview that the data was obtained over the past three weeks. […]
Share Button
Continue reading →

EC-Council, Security Certification Group website hacked and defaced

“Although EC-Council has been respected by corporations and governments, many in the in the security community don’t agree the way they certify and considered it as useless certification ”  Analysts predict that Passports of more than 60,000 US military and government IT professionals at risk Hacker went by the name of Eugene Belford, claims to […]
Share Button
Continue reading →

Youtube serving Malwar- Caphaw Banking Trojan

Monetizing by  serving ads has been the business model lately by most know sites like facebook, twitter, google, msn.com and various other websites. However there is a dark ecosystem in which these ads are either hijacked or compromise user accounts to server malware.  A similar issue was seen by  Bromium Labs  and has been reported […]
Share Button
Continue reading →

OSX/CoinThief a New Apple Mac Bitcoin stealing Trojan Discovered -SecureMac

CoinThief, a Bitcoin-stealing Trojan targeting Mac users, was discovered offering on several download websites such as CNET’s Download.com and MacUpdate.com. It was also available masquerading as pre compiled binaries in multiple GitHub projects. The malware variant installs a browser extensions for Safari and Google Chrome to monitor all web browsing traffic, specifically looking for login […]
Share Button
Continue reading →

Kickstarter hacked – gained access to customers’ data

On Febrauary 15th, Kickstarter sent an email to its customers and published a news on its blog about a data breach on kickstarter. The accessed information includes usernames, email addresses, mailing addresses, phone numbers and encrypted passwords.  The sophistication on the hacker is not known yet but its possible that passwords can be extracted by […]
Share Button
Continue reading →

US Veterans of Foreign Wars website compromised by IE Zero day Exploit (CVE-2014-0322)

Recently  a zero day vulnerability in Internet Explorer was discovered(CVE-2014-0322)). Researchers from Fireeye has identified that hackers are using this vulnerability in targeting US military personals. Furthermore they also suspect that this may be a very strategic campaign (Operation Snowman) during the President’s day weekend. FireEye researchers observed  drive-by-download attack which  alters HTML code of the […]
Share Button
Continue reading →

27000 Files containing Barclays Bank Customer Information Leaked

One of the biggest security breaches happened at Barclays when 27000 files containing valuable customer information was reported stolen and sold to rogue traders. These files contained highly sensitive customer information such as passport, insurance numbers, earnings, health issues, insurance policies and more. The leak was reported by mail which had a memory stick containing […]
Share Button
Continue reading →

Bank of the West candidate information might have been leaked from a retired internet application

Bank of the west  confirmed that the login credentials of candidates applied for jobs was compromised during the month of December 2013. Although it was unclear, what other information was compromised, but Bank of the West promptly sent an email to all its candidates informing the incident and that necessary measures were taken to secure […]
Share Button
Continue reading →

Syrian Electronic Army hacks Facebook’s domain wishing ‘Happy Birthday Mark!’

The Syrian Electronic Army – a hacker group supportive of Syrian President Bashar Assad – managed to hack into Facebook, on the week of 10th Anniversary. The hackers first claimed to obtain Facebook.com as published on twitter at approximately 6:30 Eastern Standard Time. WHOIS search on domain registrar indicated that the email address was tied […]
Share Button
Continue reading →

800,000 customers’ data stolen at French Orange Telecom

The world’s largest mobile operator Orange was compromised by a massive data breach on January and stole  800,000 customer records. The attack  appears to have affected 3% of the population.  Orange has since reported  PCInpact that  “My Account” portal on the website was hacked and added that three percent of customers (that’s approximately 800,000) were compromised.” […]
Share Button
Continue reading →