Gawker Media Hacked, Warns Users to Change Passwords

Monday, December 13th, 2010

E-mail addresses and password details for 200,000 registered users of Gawker Media websites are now circulating on peer-to-peer networks after a weekend hack attack. The company warned users to change their passwords -- including on other sites, if they use the same passwords elsewhere. The websites affected include Lifehacker, Gizmodo, Gawker, ...

Ransomware Attack Resurfaces to Hold Files Hostage

Tuesday, November 30th, 2010

Malware is all about money. Spyware stealthily captures keystrokes and sensitive data to compromise accounts. Phishing attacks lure users into unwittingly surrendering account credentials and other crucial information. Ransomware uses a much less subtle tactic of demanding the money directly in exchange for the safe return of your own data. The ...

Gmail Security Checklist

Monday, October 18th, 2010

Whether you just regained access to Gmail, or you want to make sure your account is secure, take a minute to complete our Gmail security checklist to make sure your mail security measures are up to date.Source:https://mail.google.com/support/bin/static.py?page=checklist.cs&tab=29488

Using Metasploit’s Incognito To Impersonate User Tokens

Saturday, January 30th, 2010

I just wanted to show a quick example of using Incognito to impersonate user tokens on a compromised system.  You can think of tokens as a web "cookie" which is just an object that holds your security information for the entire login process so that you don't have to re-authenticate ...

Phishing campaign targets cPanel users

Monday, December 7th, 2009

Trusteer warned the customers of website hosting companies, including yahoo.com, against a new phishing attack aimed at stealing their content management system log-in credentials. The e-mails appear to be from a website hosting firm and ask website owners to confirm their cPanel/FTP account information. Using this information, criminals are uploading ...