Category Archives: Security News

PayPal-mimicking phishing sites taken offline

PayPal-mimicking phishing

PayPal has worked to shut down a handful of phishing websites that sought to steal people’s login credentials by appearing to be the company’s real website, according to a security company.

Many of the sites, which are offline or have been redirected, were nearly identical copies of PayPal’s website, which could have fooled some victims into divulging their details, according to OpenDNS, a security company that in part monitors for suspicious domain name registrations.

Ransomware authors streamline attacks, infections rise

Ransomware

Ransomware authors continue improving file-encrypting programs and infection methods for Windows and Android, making these nightmarish attacks harder to avoid.

The biggest ransomware threat for Windows users is CryptoWall, a sophisticated malware program that encrypts a wide range of files and demands that victims pay a ransom in Bitcoin cryptocurrency to recover them.

Researcher releases 10 million usernames, passwords from data breaches

WordPress vulnerable plugin

A researcher has released 10 million usernames and passwords collected from data breaches over the last decade, a step he worries could be a legally murky but one that will help security research.

The data comes from major data breaches at companies including Adobe Systems and Stratfor, all of which have already been publicly released and can be found through Web searches, said Mark Burnett, a Utah-based security consultant who has written several networking and security books.

Watch out! Macro-based malware is making a comeback

malware primary

 

For the past several months, different groups of attackers have distributed malware through Microsoft Office documents that contain malicious macros, reviving a technique that has been out of style for over a decade.

Utterly crazy hack uses long-distance lasers to send malware commands via all-in-one printers

hp officejet pro x585 front

IMAGE: MICHAEL HOMNICK

Isolating computers from the Internet, called “air gapping,” is considered one of the best ways to defend critical systems and their sensitive data from cyberattacks, but researchers have found that can be undermined using an all-in-one printer.