Read more of this story at Slashdot.
Archive for the ‘security’ Category
Hackers Find Home In Amazon EC2 Cloud
Thursday, December 10th, 2009
snydeq writes "Security researchers have spotted the Zeus botnet running an unauthorized command and control center on Amazon's EC2 cloud computing infrastructure. This marks the first time Amazon Web Services' cloud infrastructure has been used for this type of illegal activity, according to threat researcher Don DeBolt. The hackers got onto Amazon's infrastructure by hacking into a Web site hosted on Amazon's servers and then secretly installing their command and control infrastructure."
Malware Found Hidden In Screensaver On Gnome-Look
Wednesday, December 9th, 2009
AndGodSed writes "OMG! UBUNTU! Reports the following: 'Malware has been found hidden inside an innocuous 'waterfall' screensaver .deb file made available on popular artwork sharing site Gnome-Look.org. The .deb file installs a script with elevated privileges designed to perform a DDoS attack as well as keep itself updated via downloads. The dodgy screensaver in question has since been removed from gnome-look, and this incident was a very basic, if potentially successful, attempt.'" A similar report at Digitizor.com says that similar malware was also found in a theme called Ninja Black. For those affected, both sites also provide instruction on cleansing your system.
Read more of this story at Slashdot.
TSA’s Sloppy Redacting Reveals All
Monday, December 7th, 2009
A travel blog breaks the story of a poor job of redacting by the TSA: they posted a PDF of airport screening policies, with certain sections blacked out — not realizing that simply laying a black rectangle over the text is hardly sufficient. Cryptome has posted a copy with the redaction removed (ZIP).
Read more of this story at Slashdot.
Hackers vs. Phishers
Monday, December 7th, 2009
An anonymous reader writes "'Some hackers out there don't like to do all the hard work of running a successful phishing campaign. Instead, they developed a simple online service to "steal" account details from the hard-working phishers. Named AutoWhaler, the service allows anyone to scan a phishing server for log files that contain juicy information such as usernames and passwords.'"
Read more of this story at Slashdot.