Blog Posts Tagged with "Email"
Fallout from the Christmas Hack of Stratfor
January 03, 2012 Added by:Richard Stiennon
The most painful lesson the Stratfor hack is about to demonstrate is the importance of email security. Anonymous will be recruiting volunteers to analyze the 3.3 million emails they stole that have the potential for real harm equal to the infamous WikiLeaks State Department leak...
Comments (0)
Feast of the Seven Phishes 2011
December 30, 2011 Added by:Robert Siciliano
One of my holiday traditions is to expose the year’s phishing scams. The following examples come straight from my inbox or spam filter, and have been abbreviated to demonstrate the nature of the scam and specific hook being used...
Comments (0)
Following the Trail of Web-Based Malware
December 15, 2011 Added by:Mark Baldwin
The main.php script contained javascript that attempted to exploit several potential vulnerabilities. I downloaded the script and analyzed it. By inserting an “alert” statement into the script prior to the actual execution of the code, we can get a good idea of what the script does...
Comments (0)
Symantec: Anatomy of a Nitro Cyber Attack
December 13, 2011 Added by:Headlines
"They are sending targets a password-protected archive... which contains a malicious executable. The executable is a variant of Poison IVY and the email topic is some form of upgrade to popular software, or a security update. The most recent email brazenly claims to be from Symantec..."
Comments (0)
Federal Agencies Tap Online Trust Alliance for Training
November 17, 2011 Added by:Headlines
“Authentication is the front line defense... This program, supported by the White House, will help stem the tide of malicious and deceptive email. This is a great example of the public and private sector working together to increase end-to-end trust of our nation’s critical infrastructure..."
Comments (0)
Email Authentication Rates Rise in 2011
October 05, 2011 Added by:Headlines
“The increased incidents of spear phishing targeting consumers, business and government users have accelerated the business value of email authentication. Organizations who fail to adopt are putting their employees, data and consumers at an unacceptable level of risk..."
Comments (0)
Smarter Security Steps Part 3: Safe and Secure Technology
September 29, 2011 Added by:Brian McGinley
We have moved from being a computer-assisted society to one that is computer-dependent. Control is critical to maintaining a secure operation. That requires assistance from technical experts. But good control begins with a company’s employees, an area you can’t afford to ignore...
Comments (0)
Scammers Exploiting Bogus DigiNotar SSL Certificates
September 20, 2011 Added by:Headlines
Security provider Barracuda Networks has warned of a spamming campaign targeting Royal Bank of Canada customers. The spam messages falsely notify users that their SSL certificate has expired, and that in order to continue using online banking services they are required to update the certificate...
Comments (0)
The Simple Email Message That Brought Down RSA
August 26, 2011 Added by:Headlines
"The e-mail was crafted well enough to trick one of the employees to retrieve it from their Junk mail folder, and open the attached Excel file. It was a spreadsheet titled 2011 Recruitment plan.xls," said an April 1 blog posting by RSA's Head of New Technologies, Uri Rivner...
Comments (0)
DHS: Natural Disasters Fostering Social Engineering
August 25, 2011 Added by:Headlines
The DHS's National Cybersecurity and Communications Integration Center (NCCIC) is warning that malicious users may seek to exploit interest related to physical events such as earthquakes and hurricanes by generating phishing emails with subject lines related to the incidents...
Comments (0)
Vanguard Defense Industries Hit by AntiSec Hackers
August 16, 2011 Added by:Headlines
The AntiSec hacker collective has breached the email accounts of defense contractor Vanguard Defense Industries. The firm was targeted due to their relationships with law enforcement agencies, and the attackers plan to release several thousand emails and documents that were stolen in the operation...
Comments (1)
What To Do If Your Gmail Account Has Been Hacked
July 21, 2011 Added by:Robert Siciliano
Once Kate went through this process, she regained control of her account within minutes. But the criminal had deleted every single email, leaving her with nothing. He’s probably going through those messages now, searching for any useful personal information...
Comments (6)
Case Study: Advance Fee Scams
July 12, 2011 Added by:Mark Baldwin
I am sure you all have received an email purportedly from a wealthy person overseas who needs your help transferring money. The reasons vary, but they always promise a large sum in return for help. Recently I received the following email that was an attempt at advance fee fraud...
Comments (3)
UPDATE: Booz Allen Hamilton Issues Statement on Hack
July 12, 2011 Added by:Headlines
"Booz Allen Hamilton has confirmed today that the posting of certain data files on the Internet yesterday was the result of an illegal attack. We are conducting a full review of the nature and extent of the attack..."
Comments (5)
Connexion Hack Team Dumps Military and Gov Accounts
July 08, 2011 Added by:Headlines
A new ad-hoc group of hacktivists calling itself "Connexion Hack Team" has published a list of email addresses associated with the US government including account information from the military, the Department of Homeland Security, the National Security Agency, and several state agencies...
Comments (1)
When a "Phish" is Really Fishy
June 30, 2011 Added by:Christopher Burgess
Phishing is a way of attempting to acquire sensitive information such as usernames, passwords and credit card details by masquerading as a trustworthy entity. Recently, one slipped through my filters. I've taken the liberty to identify each item within this phish, which seems fishy...
Comments (0)
- Managing My Company’s Security is a Nightmare
- Bridging the Cybersecurity Divide, Why Security Innovation Must Lead the Way
- The Evolution of Industrial Control System Information Sharing
- ATM Security (And Really Learning from the Past)
- Complimentary IT Security Resources [May 13, 2013]
- Steps Toward Weaponizing the Android Platform
- Mobile Security Processes Could Be Applied to Medical Devices: Bluebox
- The Emperor Is Naked!
- Infographic: Keeping Web Applications Safe
- Do You Have a Vendor Security Check List? You Should!