By Antone Gonsalves, CSO | August 22nd, 2014 University researchers have built an Android app that secretly snatches valuable personal data from other mobile apps, such as webmail, shopping and online banking. The app, demonstrated Friday at the USENIX Security Conference in San Diego, stole login credentials from Google Gmail, a social security number from…
By Martyn Williams, IDG News Service | August 22nd, 2014 Backoff malware is stealing credit card details, according to a cybersecurity alert. Over a thousand major enterprise networks and small and medium businesses in the U.S. have been compromised by a recently discovered malware package called “Backoff” and are probably unaware of it, the U.S.…
By Ellen Messmer, Network World | August 20th, 2014 SentinelOne wants to compete with full endpoint defense suites. Start-up SentinelOne is offering security software for behavior-based malware detection intended to augment, not replace, the type of full anti-virus endpoint protection suites that typically also have signature-based defense, a firewall and other features. However, the Mountain…
By Antone Gonsalves, CSO | August 19th, 2014 Nuclear Regulatory Commission employees were tricked into disclosing passwords and downloading malware in three phishing attacks that occurred over a three-year period. The incidents were described in an inspector general report obtained by the publication Nextgov through an open-records request. In one incident, the attackers sent email…
By Zach Miners, TechWorld | August 14th, 2014 More types of malicious software will be identified by Google’s safe browsing service. Google is expanding its safe browsing technology to notify Web users of downloads that appear benign, but actually make unwanted changes to their computers. Starting next week, the company’s safe browsing service will identify…
By Jaikumar Vijayan, Computerworld | July 31st, 2014 DHS warns retailers of threat to point-of-sale systems. Malicious hackers are taking advantage of commonly used enterprise remote access tools to break into retail point-of-sale (POS) systems and plant malware on them, the U.S. Department of Homeland Security warned Thursday. In an advisory prepared jointly with the…
By Antone Gonsalves, CSO | July 18th, 2014 Cybercriminals have inserted government-grade malware into run-of-the-mill ransomware and online banking Trojans to bolster their ability to avoid detection and block tampering. The variant of the Gyges malware bolted onto the other software was reported by Sentinal Labs, which has been researching for several years malware developed…
By Martyn Williams, IDG News Service | July 16th, 2014 Trend MIcro finds hundreds of thousands of fake Android apps in trawl of online stores, forums. Fake apps dressed up to look like official ones but actually designed to steal user data are increasingly targeting Android phone users, according to a study by Trend Micro.…
By Ellen Messmer, Network World | July 15th, 2014 Solutionary’s Top 10 list also includes Google and Akamai. In its quarterly report on global malware distribution and threats, security firm Solutionary Tuesday said that 56% of the malware it captured via sensors and other means was hosted in the U.S.– a 12% increase from six…
Norse IPViking – Proactively detect and prevent advanced cyber-threats and malware with intelligence-based security. Traditional signature- and policy-based network security systems are reactive and often rely on incomplete data that is not up to date. As the effectiveness of these solutions continues to decline, organizations are being exposed to increased risk of security breaches, data…