Phishers Target New Victims on LinkedIn

Sunday, June 1st, 2008

Users of the professional-oriented social networking site LinkedIn are being warned that scam artists are using the site to nab lucrative bank account information from naive victims, say security experts. Advanced fee fraud -- also known as "419 scams" after the relevant section of the Nigerian penal code -- have become ...

Symantec Launches Online Fraud Protection

Monday, May 19th, 2008

Symantec Corp. today announced the availability of Symantec Online Fraud Protection, a comprehensive program that includes Symantec services, education and ongoing monitoring and management capabilities designed to protect businesses that conduct large volumes of financial transactions and their customers from losses due to online fraud. This offering helps businesses shield their ...

PayPal XSS vulnerability affects EV SSL

Friday, May 16th, 2008

A new attack on PayPal could have allowed users who thought they were on a trusted page to access a fraudulent page and possibly expose personal information. On Friday, Finnish researcher Harry Sintonen reported the vulnerability on an IRC chat room. In an interview with Netcraft, Sintonen said the issue was ...

DIY Identity-Theft Protection: A 12-Step Program

Thursday, May 15th, 2008

You don't have to spend $100 to $200 a year to defend yourself from identity theft at the level of protection that a paid service offers. You can do almost everything the services do, for free. But following these steps will require time and effort. Get a free copy of your ...

Two Factor Authentication is Dead

Thursday, May 1st, 2008

The fundamental problem with two factor (2FA) session authentication is that the approach is vulnerable to Man in the Middle and Man in the Browser attacks. 2FA requires that customers present not only a password (something they know) when they log into online banking, but also demonstrate that they possess ...