Lock Down Your Data

Saturday, December 20th, 2008

This is a great list of various things you can do to protect your data.  Here's a quick summary: 10. Wipe that iPhone (or BlackBerry) before trading in. 9. Use virtual credit cards for iffy online buys. 8. Hide data inside files with steganography. 7. Plan for the worst. 6. Get smarter on security questions. 5. ...

Trojan can grab extra personal banking data

Saturday, September 27th, 2008

A Trojan horse program now available to a growing number of fraudsters can add data entry fields to legitimate online banking sites and entice consumers to give up sensitive information such as bank card numbers and PINs (personal identification numbers). The Limbo malware integrates itself into a Web browser using a ...

Wells Fargo Passwords Are Not Case-Sensitive!

Friday, September 5th, 2008

I just heard on the Security Now podcast a listener mention that his Wells Fargo password was not case-sensitive.  I'm not a Wells Fargo user but several users who are that I asked this morning actually confirmed this.  You will be logged in no matter what case you enter into ...

Bogus FedEx Notifications: New Malware Courier of Choice

Friday, August 22nd, 2008

Remember the UPS spam runs that were popular last month (see previous blog posts here and here)? Spammers have chosen a different courier this time, but the message was basically the same.Posing as FedEx notifications, these email messages have the same format as their earlier UPS counterparts: tracking number (perhaps ...

Malicious Botnet Stole Bank, Credit Union Credentials

Wednesday, August 6th, 2008

The researcher who first discovered a motherlode of stolen enterprise user names and passwords in June has found that nearly 9,000 of them are bank and credit-card account credentials from around the world that were grabbed by an old but crafty botnet. And it turns out the initial 50 gigabytes' ...