Cybercrime

Pierluigi Paganini November 09, 2014
Amazon phishing campaign aim to infect Holiday shoppers

Security experts at AppRiver firm uncovered Malicious Amazon phishing emails that aim to infect Holiday Shoppers in the U.S. and U.K. Researchers at AppRiver firm reported that cyber criminals are targeting holiday shoppers at Amazon UK with large a scale phishing campaign, which is spreading malicious emails. The emails sent by crooks include malicious Microsoft Word documents […]

Pierluigi Paganini November 07, 2014
Operation Onymous, the joint attack against dark markets in Tor

Operation Onymous – Law enforcement and judicial agencies around the globe conducted a joint action against dark markets on Tor networks. This morning I have reported the news of the seizure for the underground black market Silk Road 2.0 and the arrest of its alleged manager, Defcon” Benthall. In reality, the shutdown of Silk Road 2.0 is […]

Pierluigi Paganini November 07, 2014
FBI arrested Blake “Defcon” Benthall and seized Silk Road 2.0

Silk Road 2.0 shut down by the FBI that arrested Blake “Defcon” Benthall, alleged operator of the underground black market specialized in the sale of drugs. The FBI announced the arrest of Blake Benthall, also known as “Defcon,” the alleged owner and operator of black market Silk Road 2.0, Ars that is following the case […]

Pierluigi Paganini November 06, 2014
Facebook scams – Top 5 categories identified by a 2-year study

A two-year study conducted by researchers at Bitdefender analyzed more than 850000 Facebook scams identifying the most popular frauds. Experts at Bitdefender antivirus software provider have conducted a two-year study on the way crime exploit the popular social network Facebook, the analysis examines nearly 850,000 Facebook scams. The study on Facebook scams analyzed data from different […]

Pierluigi Paganini November 06, 2014
Can cybercrime use the services of the regular companies?

The attacks from humans against the humans as the preliminary phase of a bigger cyber attack will become harder to mitigate, let’s see how the cybercrime works. Standard incident response requires finding out the real extend of the incident. This is why we have all the monitoring tools where we can find any matching patterns. […]

Pierluigi Paganini November 06, 2014
Operation Huyao, the scary evolution of phishing attacks

Security experts at TrendMicro have discovered a new Phishing technique dubbed Operation Huyao that it very hard to detect by site owners and end-users. Security experts have uncovered a new phishing technique, dubbed Operation Huyao, targeting online shopping websites and that is considered by researchers a significantly change to the threat landscape for phishing activities. In a classic […]

Pierluigi Paganini November 02, 2014
Google Drive once again exploited in a sophisticated phishing attack

Cybercriminals and states-sponsored hackers are leveraging Google Drive site and other cloud storage to operate in a stealthy way and avoid detection. Cybercriminals and attackers are exploiting once again Google Drive infrastructure to avoid detection. The exploitation of Google Drive cloud storage by cyber criminals is not a novelty, a few days ago experts at […]

Pierluigi Paganini November 01, 2014
Bad actors are using Gmail Drafts to control their bots

Security company Shape Security discovered a new strain of malware which is exploiting Gmail service as a communication channel with control server. Security experts at Shape Security announced to have found a new strain of malware that implements a smart technique to communicate with command and control servers, the commands are hidden in unassuming Gmail drafts that are never even […]

Pierluigi Paganini October 31, 2014
The number of Keyless cars thefts is rising

According to a UK motoring industry group and authorities keyless cars ‘increasingly targeted by thieves, which are using computers e dedicated equipment. According to a UK motoring industry group, criminal organizations are increasingly targeting high-end cars with keyless security systems.  The Society of Motor Manufacturers and Traders (SMMT) confirmed that car thieves are using dedicated equipment to access […]

Pierluigi Paganini October 30, 2014
Drupal community under attack due to a critical SQL injection flaw

A security advisory issued by Drupal assumes that every installation of the popular CMS based in the version 7.x was compromised unless patched. Earlier this month, Drupal patched a critical SQL injection vulnerability (CVE-2014-3704) that exists in all Drupal core 7.x versions up to the recently-released 7.32 version, which fixed the issue. There is an emergency in the […]