A new MSN Messenger botnet is growing by hundreds of computers per hour.   This Trojan is another IRC bot variant that is spreading through MSN Messenger by sending itself in a zip file under two file names, both masquerading as digital camera images, one ending with .exe and the other with .pif.  These attachments may come through messages from a known contact on your “buddy list”.   This is the first Trojan found to date that scans for VNC connections (remote access) likely looking to increase the botnet’s number of connections.

Tags: CyberCrime, Emerging Threats, Malware

Author: Christopher

Top 5 attacks used by U.S. hackers

1. Internet Explorer 6 Buffer Overflow
2. Generic File Inclusion
3. Mambo register_globals Emulation Layer Overwrite
4. Microsoft Windows COM Object Handling Vulnerability
5. Internet Explorer HTML Help Remote Code Execution

Top 5 Attacks used by Foreign hackers

1. HTTP overflow attack
2. Generic File Inclusion
3. WebDAV Overflow Attempt
4. Mambo register_globals Emulation Layer Overwrite
5. phpBB Activity Module File Inclusion

Tags: CyberCrime, hackers, Information Security

Author: Christopher

US Hackers

1. Internet Explorer 6 Buffer Overflow
2. Internet Explorer HTML help Remote Code Execution
3. Internet Explorer redirect to local file
4. SomeFool.p
5. Zone Spoofing

Foreign Hackers

1. HTTP overflow attack
2. Generic File Inclusion
3. WebDAV Overflow Attempt
4. Mambo register_globals Emulation Layer Overwrite
5. phpBB Activity Module File Inclusion

Source: SecureWorks

Tags: CyberCrime, hackers

Author: Christopher

Yung-Hsun Lin recently plead guilty to writing and installing a logic bomb on the company network at Medco Health Solutions. Concerned he may be laid off, he planned on disrupting Medco Health Solutions ability to know if a customer’s new prescriptions would have adverse interactions with their existing prescriptions.

Fortunately another administrator found the threat before it had a chance to go off. Medco estimates the problem cost them between $70,000 – $120,000 to clean up.

If convicted, Lin could be facing 10 years in prison; although his plea deal is for 30 to 37 months.

Tags: CyberCrime, Events, Sabotage

Author: Christopher

5 billion dollars… That is the estimated value of the black market for identity theft if it was on the NY Stock Exchange. On top of that, the market for identity theft has managed to grow 60% year to year. Although only a few cases are disclosed, over 70 million cases of identity theft were reported under the California data-breach act SB1386 in 2007 so far.

The average price for a stolen identity has dropped from an average of $125 three years ago to about $16 per identity stolen according to multiple researchers. As the price goes down, the instances of identity theft will rise. Shredding all your trash and defending your identity is not necessarily enough to prevent this from happening to you, your family, and your employees. A majority of the identity theft cases are the result of corporate security breach and other events outside your control.

Looking for a way to guarantee your good name? Look no further, Lexan Systems has partnered with LifeLock to provide guaranteed protection against identity theft for you, your family, and your employees.

Tags: CyberCrime, Identity Theft, Security Breach

Author: Christopher