Showing posts with label Compromise Systems. Show all posts
Showing posts with label Compromise Systems. Show all posts

Friday, 5 June 2015

Starter Looking For Stolen Corporate Data On The 'Dark Web'


An American starter has developed a solution that can find stolen corporate data on the Dark Web. The Dark Web is the name for websites and services through anonymity networks like Tor and I2P are accessible. It regularly happens that compromised or stolen corporate data at market places and forums for cyber criminals appear on the Tor network.

Terbium Labs, founded by two researchers from the Johns Hopkins University, proposes that these data are very fast on both the accessible Internet as the Dark Web can find, so the compromised company can be alerted in question. In this way, a leak can be found within seconds or minutes rather than months, as claimed by the investigators.

To do this, first a "digital fingerprint" made the important business files and data. Then there is the Dark Web and Internet for these prints. According to him, would have the company in this way in just 30.000 seconds stolen credit cards and 6,000 compromised email addresses find you.

Monday, 18 May 2015

American College Gets Offline Network After Attack


An American university network was taken offline after it had advanced malware discovered that for years was active. On November 21 last year, the Penn State College of Engineering was warned by the FBI for an attack. There was a study conducted in silence, the attackers did not let them know they were discovered so, said in a university statement .

Also had a "deviant action" by an individual user can provide unwanted operations to aggravate the situation. During the investigation, it was discovered that two sophisticated attackers had gained access to the network. One of the attackers since September 2012 would have had access to the network. Because of the size it is now decided to disconnect the network from the Internet and check all systems.

Further measures will be taken to prevent future attacks. There will be tighter security rules for workers and students are implemented. In addition, the IT policy will be adjusted properly. In the attack, no personal information would be captured.However, the attackers were able to compromise multiple accounts and passwords. From all accounts, the password will be reset. According to the university, the operation will take several days.

Monday, 16 March 2015

US Gets Email System Offline To Remove Malware


The US State Department has an unclassified e-mail system was taken offline to remove malware that already four months on the network would operate. The malware was discovered in November, when the e-mail system was taken offline and measures were taken.

Last month, however, there appeared a report in the Wall Street Journal that the malware still was not completely removed.Now let government officials across ABC News that a last attempt is made ​​to clean up the system. In a statement on their own website says the ministry because of several security enhancements to the network shortly maintenance will find the system. There were certainly no classified systems or financial consular or HR systems are compromised.

"The recent increase in news stories about cyber incidents shows that the Department on a list of public institutions and companies are having to deal with an increasing number of sophisticated cyber threats," the statement said. In addition to a team of experts from other ministries and the private sector to protect the data of the Ministry, would be a strategy simultaneously performed to better secure the infrastructure of the Ministry. How the malware on the e-mail system was able to get was not disclosed.

Thursday, 12 March 2015

US Warns 4400 Hospital Patients After Email Hacking


An American hospital has 4,400 patients warned that their personal data may be stolen after attackers gained access to the email accounts of employees. According to the St. Mary's Medical Center in Evansville attackers were able to compromise the user names and passwords of employees. Opposite US media reports that the medical center " sophisticated "hackers through" fraudulent e-mail communication "had access to the accounts. This seems to indicate that the attackers have used phishing attacks.

In the e-mail accounts could be found personal information of patients, such as name, date of birth, sex, date handling, insurance information, limited health and in some cases social security numbers. After discovery of the attack the email accounts were immediately turned off. The hospital stresses that the attackers had no access to individual medical records.It is now working with the email service provider to see if the security can be further tightened. The hospital staff is also on "e-mail hacking attacks" lamps.