Gang Stealing An Estimated $ 100 Million Of Accounts

A large group of more than 50 cyber criminals stole recent years to an estimated $ 100 million of bank accounts and between 20 and 30 terabytes of data captured. The FBI and security Crowd Strike and Fox-IT today announced at the Black Hat conference in Las Vegas announced.

The gang used the Game Over Zeus malware, a Trojan horse that was on the infamous Zeus Trojan based and was mainly used to steal data from online banking and other services. Game Over Zeus botnet was last June by the FBI, Europol, several companies and police forces from the extracted air . Early this year, the FBI put $ 3 million on the head of a Russian man suspected of developing Game Over Zeus.

Today published data show that the botnet from an average of about 200,000 systems existed. Besides also steal money from bank accounts, the gang held behind Game Over Zeus engaged in espionage in Eastern European countries. In total, there would be via the malware 20 to 30 terabytes of data have been stolen. It also appears from the investigation of the criminals that they are well organized. The gang calls itself the "business club" and consists of more than 50 people. The Russian man who is wanted by the FBI was always seen as a mastermind Game Over Zeus, but he would not be the sole leader of the group of criminals. According to the researchers, there is someone else with whom he leads the gang together.

Facebook 1.3 Million Paid Researchers For Bug Reports

Facebook last year, $ 1.3 million paid for bug reports were submitted by researchers. Since the "bug bounty" program began in 2011 is more than $ 3 million disbursed. In 2014, Facebook received 17,000 bug reports, an increase of 16% compared to 2013.

Eventually, 321 researchers rewarded for their entries, which equates to an average reward of 1788 dollars per bugmelding.The five most active researchers earned last year together $ 256,000. Furthermore, according to figures from Facebook that most bugs last year were sent by Indian researchers, namely 196. Average yielded investigators USD 1,343 per bugmelding on.

The number of bug reports from Great Britain is 28 much lower, but average paid Facebook British researchers dollar 2,768 per bugmelding. A total of researchers from 65 countries paid by the social networking site. For this year expects Facebook again the necessary bug reports. Since the new year were already more than 100 valid reports are received.

Microsoft Will Pay Researchers $ 125,000 For IE Attack

Microsoft has three researchers from HP with $ 125,000 reward for demonstrating an attack on Internet Explorer with two security features of the browser were bypassed. The two functions are precisely designed to protect the memory against attacks and were last June and July through security updates to IE added.

Microsoft has a reward program whereby it rewards researchers for developing attacks. It's not about specific vulnerabilities here, but methods to circumvent security features and technologies. The researchers reported the problem more than 120 days ago by Microsoft, which eventually confirmed the effect of the attack. The software giant awarded the researchers $ 100,000 for their reporting, plus $ 25,000 for the proposed solution.

However, HP has a deadline of 120 days after it has informed the supplier, where the details of discovered vulnerabilities are published after this period. In this case, however, decided to reveal the details yet, as Microsoft has not solved the problem.The money the researchers received they gave to charity, as did HP today announced .