National Cyber Security

Security Threats Archive

Two teen girls charged for online threats against Steubenville rape victim

Posted March 27, 2013 By National Cyber Security

A day after a juvenile court judge found two Steubenville High School football players guilty of raping a 16-year-old girl, Ohio’s attorney general announced two more teens have been arrested — for allegedly using social media to threaten the victim.

A 16-year-old girl will face a charge of aggravated menacing for threatening the life of the victim on Twitter, according to a statement from State Attorney Mike DeWine.

A 15-year-old girl is charged with menacing after being accused of “threatening bodily harm” to the victim on Facebook, DeWine said.

On Sunday, Trent Mays, 17, and Ma’lik Richmond, 16, were found guilty of raping the teenage girl during a night of heavy drinking and partying in a high-profile case that drew national attention to the small Ohio town.

Shortly after the trial concluded, DeWine announced a new, wide-ranging investigation that could yield more charges.

“Let me be clear. Threatening a teenage rape victim will not be tolerated. If anyone makes a threat verbally or via the internet, we will take it seriously, we will find you, and we will arrest you,” DeWine said in a statement.

Social media played a unique role throughout the investigation as investigators used photos, messages and videos posted online to piece together what happened the night of Aug. 11, 2012. A now infamous 12-minute video shocked many in the town of 18,000 for the callous and profane way they discussed raping the young female.

“You were your own accuser, through the social media that you chose to publish your criminal conduct on,” the mother of the victim told the boys after the verdict was read.

And more charges are likely to come down the line, perhaps for the football coaches and parents where the parties were held. Next month a grand jury will meet to consider evidence gathered during dozens of interviews, including the coaching staff of the Steubenville football team.

“I’ve reached the conclusion that this investigation cannot be completed, simply cannot be completed, that we cannot bring finality to this matter without the convening of a grand jury,” DeWine said on Sunday, barley an hour after the judge handed down the guilty verdicts.

The two teens charged Monday are being held in a local detention center. WTRF of Steubenville reports the two will appear in front of a judge on Tuesday.

Source: http://usnews.nbcnews.com/_news/2013/03/18/17363530-two-teen-girls-charged-for-online-threats-against-steubenville-rape-victim?lite

High Tech Crime Solutions

Filed in General, Security Threats, Social Media Threats

How to Avoid Android Malware and Other Android Security Threats

Posted March 26, 2013 By National Cyber Security

Antiviruses aren’t essential on Android, like they are on Windows. However, proper security practices like not downloading and installing suspicious programs also apply on Android.
Exercise Caution When Sideloading Apps

Unlike Apple’s iOS, Android allows you to install apps from outside Google Play. While Google may remove apps from Google Play, you still have the option of getting them from elsewhere. Installing apps from outside the device’s app store is referred to as “sideloading.”

Of course, with great power comes great responsibility. Sideloading is disabled by default for security reasons. Enabling it is just a matter of enabling the Unknown sources check box in your Settings screen. There are good reasons to enable sideloading – perhaps you want to use the Amazon App Store, install Android games purchased from the Humble Bundle, or just install apps that aren’t yet available in Google Play, like XBMC for Android.

However, there are also bad reasons to enable sideloading. If you’re installing pirated APK files to avoid having to pay for games and other types of Android apps, you’re taking a serious security risk. It’s possible to locate APK files claiming to be pirated apps on the web and install them, but this is a significant risk, just as downloading pirated applications can be on Windows.

As we mentioned in HTG Explains: Does Your Android Phone Need an Antivirus?, a study by McAfee found that over 60% of the Android malware samples they received were from a family known as “Fakeinstaller.” FakeInstaller malware disguises itself as a legitimate app and sends premium-rate SMS messages in the background once installed, costing you real money. This malware likely comes from pirated apps downloaded from suspicious websites or disreputable third-party app stores.

In short, only install apps from sources you trust. The official apps from Amazon, Humble Bundle, and XBMC shouldn’t be a problem, but a pirated game app from a third-party website may be stuffed with malware. If you’re using Android 4.2 or a newer version of Android, Android will offer to scan sideloaded apps for malware.

Avoid Suspicious Third-Party App Stores

Malware may also come from third-party app stores whose owners either don’t inspect the apps in their store for malware or don’t care that malware is being pushed through their store.

Studies have found that some third-party Android markets in countries like China host some types of malware not found elsewhere. Lookout Security found that third-party markets in China contained a Trojan named Gemini, which runs in the background, collecting a phone’s location information and other unique identifiers and sending it to remote servers.

To be infected with this Trojan, you’d have to be using a third-party market from China or install an app that came from there.
Watch the Apps You Install From Google Play

Some studies by antivirus companies – the same antivirus companies that want to sell you an Android antivirus solution – classify certain types of apps as malicious when they’re not. Some studies have scanned Google Play and concluded that certain apps are “high-risk” because they have access to permissions like viewing your phone’s device information. While this may be a privacy concern, such studies are overly sensational and lumping such apps in with malicious apps only serves to confuse the issue.

Still, when installing apps from Google Play you should exercise some caution. Don’t install suspicious-looking apps with bad reviews (or few reviews), apps that require too many permissions (like games with permission to send SMS messages), and other suspicious-looking apps. If an app needs a permission like the “Send SMS messages” permission, make sure it has a legitimate reason for requesting that permission. Most malware comes from outside Google Play, but exercising caution is always helpful.

Watch Out for Phishing

Malware isn’t the only security threat. Social-engineering techniques like phishing through email, SMS messages, or web browsers can be attempted against Android users, just as they can against desktop PC users. If you get a suspicious email claiming to be from your bank, open a link from it, and enter your online banking credentials into a fake website, it doesn’t matter whether you were using Windows or Android – either way, you gave away your sensitive information.

Update Your Phone or Tablet

Just like on another operating systems, security problems are occasionally found with the Android operating system and devices using it. Updates to the Android operating system often fix these problems, and device manufacturers can release patches to fix problems unique to their device.

Unfortunately, Google isn’t responsible for rolling out updates to all Android devices. Device manufacturers and carriers are responsible, and they often drag their feet and may never even get around to releasing operating system security updates – especially for older or less-popular devices.

For the same reasons your Android phone or tablet doesn’t get OS updates in general, it may not get important OS security updates, either. Google does directly update its Nexus devices, but security updates for devices like the Samsung Galaxy S III could potentially take months to trickle down through all carriers worldwide. Cheaper and less popular phones will be worse off.

Luckily, the sheer variety of different Android devices and operating system versions out there has meant that no significant attack against old, unpatched versions of Android has yet occurred. However, the lack of Android operating system security updates for many devices could result in wider-scale attacks in the future. This may just be another good reason to buy a Nexus device or use a custom ROM like Cyanogenmod until manufacturers and carriers get serious about updates.

While we’re harsh on the supposed necessity of all Android users paying for a battery-sucking antivirus app, these security apps do have some useful features. For example, they often include “Find My Android” features that allow you to locate your phone if you ever lose it. Android doesn’t come with this feature built-in, so this feature can be very nice to have.

Source: http://www.howtogeek.com/140900/how-to-avoid-android-malware-and-other-android-security-threats/

Hi Tech Crime Solutions

Filed in Anti-Virus, General, Security Threats, Virus/Malware/Worms

NotCompatible’ Android malware bounces back

Posted March 26, 2013 By National Cyber Security

The “NotCompatible” malware, designed to infect Android devices and turn them into unwitting Web proxies, is suddenly showing a sharp uptick in activity, according to mobile security vendor Lookout.

The malware is essentially a simple network proxy, which pretends to be a system update in order to get unwitting users to install it. The idea seems to be gaining access to protected networks through victims’ infected Android devices. It was named for its apparent command-and-control server, at notcompatibleapp.eu.

Last weekend saw the number of detections for NotCompatible rise to 20,000 per day, wrote researcher Tim Strazzere, who said that the malware had been largely dormant since it was discovered in May 2012.

But while the initial discovery saw the malware being installed by hacked websites, the latest wave of NotCompatible is being spread by email spam. The usual subject line is “hot news,” and the infected messages appear to contain links to fake weight-loss articles.

“Depending on the user’s Android OS Version and browser, they may be prompted about the download. Many stock browsers will transparently trigger a download to the device /Downloads folder whereas Chrome displays a confirmation dialog,” wrote Strazzere.

Lookout said there is little chance of direct harm to infected devices, and victims must allow NotCompatible to be installed for it to function, further minimizing the overall threat to the majority of Android users. The best advice for safety is simply to never allow any .apk whose provenance you’re even a little bit unsure of to be installed on your phone.

Source: http://www.computerworlduk.com/news/security/3435572/notcompatible-android-malware-bounces-back/

Hi Tech Crime Solutions

Filed in Cell Phone Security, General, Security Threats, Virus/Malware/Worms

ThreatTrack Security, Inc. Launches To Compete With FireEye In Advanced Malware Detection

Posted March 25, 2013 By National Cyber Security

Clearwater, Fla. – March 18, 2013 – ThreatTrack Security Inc. – formerly the Security Business Unit of GFI Software – today launched operations as an independent company dedicated to the analysis, detection and remediation of advanced malware threats. ThreatTrack Security enables organizations to identify and prevent Advanced Persistent Threats (APTs), targeted attacks and sophisticated malware designed to evade the traditional cyber-defenses deployed by enterprises, government agencies, and small and medium-sized businesses (SMBs) around the world.

“It’s time for a new approach to malware defense,” said Julian Waits, CEO of ThreatTrack Security. “APTs and other complex malware attacks have enterprises – especially those in globally competitive industries like finance, aerospace, healthcare, technology, and oil and gas exploration – struggling to ensure the integrity of their networks and intellectual property. Moreover, many enterprises lack the necessary tools to know with certainty if they are a victim of an APT or other advanced malware strike. ThreatTrack Security was established to help enterprises bolster their cybersecurity readiness right now.”

Experience That Counts

ThreatTrack Security is different from the string of recent start-ups proposing untried security solutions and strategies to combat advanced cyber-threats. The company has more than a decade of experience analyzing and remediating malware, developing proven solutions that defend against the escalating sophistication of cybercrime, and it has built a proven track record of satisfying demanding customers on a global scale.

“In the coming months, ThreatTrack Security will unveil a new product roadmap that will augment our existing security solutions and enable us to deliver on our promise of a stronger, more secure enterprise cyber-defense,” added Waits.

ThreatTrack Security solutions include:

ThreatAnalyzer&trade (formerly GFI SandBox) is an automated malware analysis sandbox that provides detailed malware behavioral reports to help enterprises defend against APTs, Zero-day threats and targeted attacks by analyzing files and URLs for malicious activity in a controlled, customizable environment. ThreatAnalyzer – increasingly deployed by enterprises nationwide – is used by government security, defense and intelligence agencies, making it an integral component of the U.S. cybersecurity infrastructure.

VIPRE® Business Premium is the company’s most robust business antivirus solution that combines antivirus, integrated patch management, Mobile Device Management (MDM) and more to centrally manage and defend PCs, Macs, iPhones, iPads and Android devices. VIPRE Internet Security is the company’s premier home antivirus software with anti-spyware and malware protection, automated updates for unpatched software, a firewall to stop malicious web traffic, an anti-spam filter and malicious website blocker. Millions of users worldwide trust VIPRE for their endpoint security.

ThreatIQ&trade provides the real-time malware intelligence that most enterprises lack. The service helps ensure that an enterprise’s perimeter security defenses – such as firewalls, IDS/IPS, web filters and anti-spam products – identify and stop threats as they emerge. Customers receive continuous streams of malicious URLs and IP address, suspected files, phishing links and other malware data as it’s discovered by ThreatTrack Security Labs.

In addition to a wide array of end-user customers – including large enterprises, government agencies, educational institutions, SMBs and consumers – dozens of OEMs and ISVs partner with ThreatTrack Security to harden their products with integrated malware defenses.

To learn more about ThreatTrack Security, visit www.ThreatTrackSecurity.com, call +1 888-243-4329 or send email to Sales@ThreatTrack.com.

About ThreatTrack Security Inc.

ThreatTrack Security specializes in helping organizations identify and stop Advanced Persistent Threats (APTs), targeted attacks and other sophisticated malware that are designed to evade the traditional cyber-defenses deployed by enterprises, and small and medium-sized businesses (SMBs) around the world. The company develops advanced cybersecurity solutions that analyze, detect and remediate the latest malicious threats, including its ThreatAnalyzer malware behavioral analysis sandbox, VIPRE business and consumer antivirus software, and ThreatIQ real-time threat awareness service. Visit www.ThreatTrackSecurity.com to learn more.

Source: http://www.darkreading.com/advanced-threats/167901091/security/news/240151026/threattrack-security-inc-launches-to-compete-with-fireeye-in-advanced-malware-detection

High Tech Crime Solutions

http://TheCyberWars.com, http://www.hackerforhireusa.com, http://computer-security-expert.com, http://HackerForHireinternational.com

Filed in General, Security Threats, Virus/Malware/Worms

Beware Infrared X-Ray: Latest Android Malware Spams Victim’s Contacts

Posted March 25, 2013 By National Cyber Security

The latest malware targeting users of Android devices is trying to lure victims into downloading an app called Infrared X-Ray, and is spreading quickly by tapping into victims’ contacts and spamming them with SMS messages.

The new SMS Trojan was analyzed by Symantec (NSDQ:SYMC) researchers in Japan. The cybercriminals behind the campaign are using a malicious application to tap into the victim’s contacts rather than sending out text messages themselves, wrote Joji Hamada, a Symantec threat researcher in the company blog.

“This allows the recipients of the spam to be tricked easier because the invitation to download the app is coming from someone they know rather than from an unknown sender,” Hamada said.

The app steals all details in the device’s contact list. “Not surprisingly, the app does not work as per advertised and a picture of man holding up his middle finger stating that the victim is a pervert is displayed,” Hamada wrote.

Several variants of the malware exist and some versions attempt one-click fraud, Hamada said. Victims are given details about pornographic websites while their contact information is uploaded to a remote server. The app attempts to charge a registration fee and threatens the victim that it will send a message to every person in the contact list if the fee isn’t paid promptly.

“In order to make it difficult for the victim to uninstall the app, it removes itself from the launcher after it is initially executed, although it can be removed in Applications under Settings,” Hamada wrote.

SMS Trojans are among the most virulent threats on Android devices, according to studies provided by security firms. A recent mobile threat report issued by antivirus vendor F-Secure found that nearly 80 percent of all mobile malware targeted Android devices in 2012, primarily driven by malicious apps in third-party app stores.

F-Secure warned that malware authors are developing more sophisticated attack techniques for mobile devices, using encryption and randomization or hiding malicious code in image files. Malware also was discovered on bootleg copies of the Angry Bird game, the firm said.

“Over the year, Android threats have continued to improve their techniques in evading detection and their methods of infection, yet nothing much has changed in their operation in collecting profit,” F-Secure said. “The majority of malware discovered in Android markets are SMS-sending malware that reap profit from sending messages to premium numbers.”

Symantec’s Hamada said all device owners should refrain from clicking links in emails and SMS messages that aren’t expected. Only download apps from trustworthy sources, he said.

Source: http://www.crn.com/news/security/240150979/beware-infrared-x-ray-latest-android-malware-spams-victims-contacts.htm

High Tech Crime Solutions

Filed in Cell Phone Security, General, Security Threats, Spyware and Malware, Virus/Malware/Worms

FinSpy Software Used To Surveil Activists Around The World, Report Says

Posted March 25, 2013 By National Cyber Security

FinSpy surveillance software, marketed worldwide to law enforcement agencies as a way to monitor criminals, is widely used by repressive governments to spy on human rights groups and dissidents, according to a report released Wednesday.

The report by researchers at the Citizen Lab of the Munk School of Global Affairs at the University of Toronto found the software is “regularly sold to countries where dissenting political activity and speech is criminalized.”

FinSpy, named after a line of code in its software, is a surveillance tool that infects computers to capture screenshots, log keystrokes, record Skype conversations and activate cameras and microphones. Gamma Group, a British company, makes the software and markets it to law enforcement agencies as a lawful way to monitor criminals.

Gamma Group could not immediately be reached for comment. Last year, Martin J. Muench, a Gamma Group managing director, told The New York Times that FinSpy was used mostly “against pedophiles, terrorists, organized crime, kidnapping and human trafficking.” He declined to disclose which countries had bought the software.

But security researchers say FinSpy is used by governments around the world for broader purposes. Last year, Citizen Lab researchers found that the government in Bahrain had used FinSpy to target activists in that country.

The researchers said in their report Wednesday they found FinSpy in 25 countries, including the U.S. and several countries “with troubling human rights records.”

“Our findings highlight the increasing dissonance between Gamma’s public claims that FinSpy is used exclusively to track ‘bad guys’ and the growing body of evidence suggesting that the tool has and continues to be used against opposition groups and human rights activists,” the researchers wrote.

For example, the researchers found FinSpy on cell phones in Vietnam stealing text messages, snooping on phone calls and tracking users locations via GPS. Last year, a Vietnamese court convicted 14 bloggers, writers and activists of attempting to overthrow the government and sentenced them to up to 13 years in prison.

The researchers also found a version of FinSpy in Ethiopia that tricked users into downloading the spyware with photos of an Ethiopian political group, suggesting the government used the surveillance for political purposes, the report said.

The report comes a day after Reporters Without Borders compiled a list of what it called five “Corporate Enemies of the Internet” because those companies allegedly sell products used by authoritarian governments to conduct Internet surveillance. The five companies are Gamma, Trovicor, Hacking Team, Amesys and Blue Coat, according to the organization, which defends media freedom worldwide.

Governments around the world have used spyware designed by Hacking Team and Gamma to capture the passwords of journalists, the group said.

The report also comes a day after the top U.S. intelligence official, James R. Clapper Jr., warned Congress about the national security threats posed by companies that “develop and sell professional-quality technologies to support cyber operations — often branding these tools as lawful-intercept or defensive security research products.”

“Foreign governments already use some of these tools to target U.S. systems,” Clapper told a Senate panel. He did not name specific companies.

Source: http://www.huffingtonpost.com/2013/03/13/finspy-spyware-activists_n_2864579.html?utm_source=twitterfeed&utm_medium=twitter

High Tech Crime Solutions

Filed in General, Internet Cyber Law, Security News, Security Threats

Cyber Wars — Just How Great is the Threat?

Posted March 25, 2013 By National Cyber Security

While the country is busy reevaluating its missile defense systems in the face of threats from North Korea, other areas of the United States Security Forces are dealing with the threat of a potential cyber war.

The Huffington Post reported last week that testimony before the House Armed Services Committee from a top U.S. general appeared to indicate the U.S. is not prepared to play defense on this issue. Gen. Keith Alexander, head of the Pentagon’s Cyber Command, testified last week to the establishment of 13 teams capable of carrying out cyber attacks against foreign countries that might consider hacking into U.S. computer systems. He did, however, appear to say that it would be used as a defensive mechanism against countries that may target the U.S.

The Chinese government is one that has already been accused of sponsoring cyber espionage against companies in the U.S. It was suggested that much like the arms treaties, a cyber arms treaty should be sought between these countries. And, much like with the nuclear arms treaties, cyber weaponry would need to be disclosed by the parties to the treaty.

How great do you think is the potential for cyber warfare and just how damaging could it be to the country? Do you think going on the offensive is the way to get other countries, such as China, to back down?

Source: http://cumming.patch.com/articles/cyberwars-just-how-great-is-the-threat

High Tech Crime Solutions

Filed in Cyber Wars, General, Security Threats

Reuters journalist who allegedly conspired with Anonymous hackers is suspended

Posted March 18, 2013 By National Cyber Security

A Reuters journalist has been indicted by a US federal grand jury for allegedly handing over the login credentials of his former employer, Los Angeles Times parent company Tribune Co., to people claiming allegiance to the hacker movement Anonymous.

Reuters.com, which currently employs 26-year-old Matthew Keys as a deputy social media editor, suspended him with pay on Friday.

An employee at the company’s New York office said that Keys’s workstation was being dismantled and that his security pass had been deactivated, according to subsequent reporting from Reuters.

The US Department of Justice announced the indictment [PDF] on Thursday.

Keys was indicted on three criminal counts:

Conspiracy to transmit information to damage a protected computer,
Transmitting information to damage a protected computer, and
Attempted transmission of information to damage a protected computer.

Prosecutors claim that Keys promised to give hackers access to Tribune Co. websites, and that one went on to deface a story on the company’s Los Angeles Times website.

From a Department of Justice statement:

“Keys identified himself on an Internet chat forum as a former Tribune Company employee and provided members of Anonymous with a login and password to the Tribune Company server… After providing log-in credentials, Keys allegedly encouraged the Anonymous members to disrupt the website.”

The exact wording of said encouragement, according to the indictment, being Keys telling the hackers to “go f**k some s**t up.”

On Thursday, Keys tweeted that he had found out about the indictment the same way most of us did: via Twitter.

The story told by court filings is of a disgruntled former employee who acted as a double agent with Anonymous hackers, working both with them and against them.

The case began in December 2010, when Keys allegedly provided the login credentials for a computer server belonging to KTXL FOX 40′s corporate parent, the Tribune Company.

The indictment maintains that Keys identified himself on an Internet chat forum as a former Tribune Company employee and that he handed over a login and password for the server.

According to the indictment, the hacker ultimately defaced a Los Angles Time news story, changing its headline, byline and sub-headline to include the name “CHIPPY 1337″.

Also, a line in the article was changed to read:

“House Democratic leader Steny Hoyer sees ‘very good things’ in the deal cut which will see uber skid Chippy 1337 take his rightful place, as head of the Senate, reluctant House Democrats told to SUCK IT UP.”

The indictment further claims that Keys chatted with the hacker who claimed credit for the defacement, offering to try to regain access for him after system administrators fended off the hacker and locked him out.

When he learned of the hacker’s ultimate success in defacing the Los Angeles Times page, Keys allegedly responded, “nice.”

It’s a long and twisty story, involving famed (and subsequently busted) former Anonymous top dog Sabu having outed Keys back in March 2011.

Buzzfeed has done a great job of pulling together all the intricacies of Keys’s story, including an image of the defaced Los Angeles Times new story, a blog post from Keys about losing his job at the local FOX Affiliate in Sacramento, California, and more, including this statement from Keys’s current employer, Thomson Reuters:

“We are aware of the charges brought by the Department of Justice against Matthew Keys, an employee of our news organization… Thomson Reuters is committed to obeying the rules and regulations in every jurisdiction in which it operates. Any legal violations, or failures to comply with the company’s own strict set of principles and standards, can result in disciplinary action. We would also observe the indictment alleges the conduct occurred in December 2010; Mr. Keys joined Reuters in 2012, and while investigations continue we will have no further comment.”

Will Keys get fired from Reuters? Should he?

Reuters logoBuzzfeed checked in with a Reuters employee who said that yes, if Keys is found guilty of divulging login credentials while at Reuters, he will have violated the company’s Trust Principles, which is grounds for immediate dismissal.

What if Keys is found guilty of working with Anonymous only before Reuters hired him?

It’s hard to imagine any reputable news venue countenancing the type of betrayal alleged in these charges.

If I were a Reuters editor or lawyer, I’d be finding ways to ensure Keys didn’t come back from his suspension in the eventuality of a guilty verdict.

This case may look a little muddy given that journalists working undercover can act as double agents, but the fact is, Keys wasn’t working for the news outlet at the time of the breach he allegedly helped to bring about.

As far as what non-journalists can take away from this, the lesson is this: priority No. 1 should be to shut down accounts for terminated employees.

Shuttering accounts should be a priority, but it often isn’t.

You can’t assume that a disgruntled former employee won’t open up your systems to spammers, plant malware, or replace the CEO’s presentation with porn.

If found guilty, Keys is looking at a maximum of 10 years in prison and a fine of up to $250,000.

Source: http://nakedsecurity.sophos.com/2013/03/18/reuters-journalist-anonymous-hackers-suspended/

Hi Tech Crime Solutions

http://www.Locatepc.net, http://stolencomputeralert.com, http://TheCyberWars.com, http://computer-security-expert.com

Filed in Featured Stories, General, Hacking, Security Threats

Surviving cyberwar: Preparing for APTs, Stuxnet malware-style attacks

Posted August 1, 2012 By

Surviving cyberwar is now a priority for enterprises, with more Stuxnet malware-style attacks sure to come. Expert Nick Lewis has a defensive primer.

View full post on SearchSecurity: Threat Monitor
http://www.GregoryDEvans.com, http://www.Locatepc.net, http://stolencomputeralert.com, http://computersecurityexpert.net, http://www.hackerforhireusa.com, http://www.GregoryDEvans.net, AmIHackerProof.com, http://ParentSecurityOnline.com, http://TheCyberWars.com, http://hiphopsecurity.com, http://HackerForHireinternational.com, http://www.computersecurityguru.com, http://computer-security-expert.com

Filed in Security Threats | Tagged: APTs, attacks, cyberwar, malwarestyle, Preparing, stuxnet, surviving

Crisis Trojan, new Mac OSX Trojan, considered a low risk for now

Posted July 25, 2012 By

Mac security vendor Intego identified the Crisis Trojan, a new Mac OSX Trojan, as a likely future weapon for targeted attacks against Apple endpoints.

Filed in Security Threats | Tagged: Considered, crisis, risk, trojan

Reassessing Mac enterprise security in face of Flashback malware

Posted July 3, 2012 By

Expert Nick Lewis discusses how Mac enterprise security must evolve to combat the rising Mac malware tide, spearheaded by the Flashback malware.

Filed in Security Threats | Tagged: enterprise, face, Flashback, Malware, Reassessing, security

Diagram outside firm role early in security incident response process

Posted June 20, 2012 By

Expert Nick Lewis provides criteria for selecting outside incident response firms and how to define security incident response process needs early on.

View full post on SearchSecurity: Threat Monitor

Filed in Security Threats | Tagged: Diagram, Early, Firm, incident, outside, process, response, role, security

Analysis: Vast IPv6 address space actually enables IPv6 attacks

Posted June 13, 2012 By

For World IPv6 Launch Day 2012, Fernando Gont covers why common ways of generating IPv6 addresses actually make an attacker?s job easier.

View full post on SearchSecurity: Threat Monitor

Filed in Security Threats | Tagged: actually, address, analysis, attacks, Enables, IPv6, space, vast

6scan maybe your only protection for your WordPress Website!

Posted May 26, 2012 By hitech

#wrap {display:table;height:100%}

Over the years National Cyber Security has come under attack by several hacker organizations for various reasons unknown. By Joomla and WordPress being the most used content management software in the world, they would also have more vulnerabilities and exploits than any other content

management software in the world.

No matter how many times you scan your website for vulnerabilities, up pops another one. It would literally take a full time WordPress Security Manager to fight all the dangers your website fights on a daily basis. Our CEO called a meeting a few months ago, with the entire programming department of Hi-Tech Crime Solutions (the parent company of National Cyber Security), to come up with a WordPress real time IDS that can email or send text messages when it comes under an attack. It would also have a real time firewall that can detect SQL injections, malicious scripts, and can automatically patch vulnerabilities without interaction from someone in the IT department.

We have a brilliant CEO who thinks outside of the box, but apparently there are other brilliant CEOs in the world who think outside of the box as well. One of these CEOs runs a company called Six Scan, Ltd out of Israel. After tens of thousands of man hours and thousands of dollars spent on research and development, Six Scan has demolished our entire project, like a wrecking ball to a cardboard house. Every feature we had in our version they have in their version, and then some. Back to the drawing board as my boss said. Six Scan, Great Job!

FEATURES

Patrol™ Scanner

6Scan’s Patrol™ scanner imitates the actions of a hacker trying to hack into your website: each page,
form and script on your site is scoured for weak points that could potentially become security holes.
Patrol™ utilizes a patent-pending combination of heuristic scanning with information gathered by 6Scan’s
security response team and the latest online sources. Patrol™ works seamlessly in the background; it will never harm your site or interfere with legitimate traffic.

Bodyguard™ Protection

As soon as the Patrol™ scanner detects a vulnerability, it is communicated to the Bodyguard™ agent, which acts
to quickly patch it up. A hacker attempting to exploit the vulnerability won’t even know that Bodyguard™ is there – he’ll be left to wonder why none of his attacks are working.

One-Click Installation

6Scan’s protection is prepackaged for common web frameworks, allowing you to quickly and easily install it using the plugin installation procedure you are already familiar with. If your site is hosted with one of our select hosting partners, 6Scan’s protection is already preinstalled on your site, and only needs to be activated.

Zero-day Research

6Scan’s research team of ex-military hackers works around the clock to find undocumented vulnerabilities.
We monitor new as well as old versions of common web frameworks and plugins, looking for vulnerabilities.
The moment a vulnerability is discovered, it is transferred to our Patrol™ scanner, which acts to discover the sites
vulnerable to it and patch them up immediately. While we work actively with the platform and plugin developers to release a patch for each problem, only 6Scan’s customers are protected immediately.

Fast Acting

6Scan’s Patrol™ responds to new vulnerabilities discovered by our research team, as well as those learned from security response teams and directly from developers, by immediately finding sites that may be vulnerable and working with their Bodyguard™ to fix the problem. 6Scan’s unique cloud-scanning technology allows us to perform this process quickly – usually in under 15 seconds – for a virtually unlimited number of sites.

Maintenance-free

While 6Scan’s dashboard shows you vulnerabilities detected on your site and provides detailed explanations and patch instructions, this information is purely to satisfy your curiosity: from the moment you enable 6Scan’s protection, no further action is required to maintain a high level of security for your site.

Filed in Application Security, Business Security, Ethical Hacking, Featured Stories, Hacking Tools, Security News, Security Threats, Security Tips, Vulnerabilities/Exploits

National Cyber Security

Check Out NCS Super Spy Store On Menu

Security Threats Archive

How to Avoid Android Malware and Other Android Security Threats

NotCompatible’ Android malware bounces back

ThreatTrack Security, Inc. Launches To Compete With FireEye In Advanced Malware Detection

Beware Infrared X-Ray: Latest Android Malware Spams Victim’s Contacts

FinSpy Software Used To Surveil Activists Around The World, Report Says

Cyber Wars — Just How Great is the Threat?

Reuters journalist who allegedly conspired with Anonymous hackers is suspended

Surviving cyberwar: Preparing for APTs, Stuxnet malware-style attacks

Crisis Trojan, new Mac OSX Trojan, considered a low risk for now

Reassessing Mac enterprise security in face of Flashback malware

Diagram outside firm role early in security incident response process

Analysis: Vast IPv6 address space actually enables IPv6 attacks