POS Trojans, Android Spear Phishing, and Record DDoS
Extra, Extra, the Internet almost broke (no it didn’t). Read… View all about it!
Too much security news, and too little time? Let me summarize the highlights for you in my weekly InfoSec recap video. This week I cover two trojans targeting point-of-sale (POS) computers, a few software updates, a targeted spear phishing campaign spreading Android malware, and the record-breaking SpamHaus DDoS attack, which didn’t really break the Internet despite some reports. Click play for the details
There were also a ton of other interesting Infosec tidbits this week, beyond what’s in the video. If you’re interested, check out the Reference section below. Stay frosty out there, and have a Happy Easter weekend.
(Episode Runtime: 9:47)
Direct YouTube Link: http://www.youtube.com/watch?v=sC1zLvbjzI4
Episode References:
- vSkimmer point-of-sale (POS) trojan – SC Magazine
- BlackPOS point-of-sale (POS) trojan – PCWorld
- Authorities bust a big credit card and POS cyber fraud ring – Computer World
- Cisco IOS DoS Vulnerabilities Alerts – WGSC
- Chrome 26 fixes 11 security flaws – Threat Post
- Tibetian activist spear phishing campaign spreads Android malware – Forbes
- SpamHaus DDoS attacks break record (300Gbps) – NYT
- CloudFlare post details SpamHaus DDoS – Cloudflare blog
- TIP: Check your network for open DNS resolvers – openresolverproject.org
- Extras:
- “Skript Kiddie” journalist shows how easy password cracking is – Ars Technica
- Teenager charges with smart phone hacking – IB Times
- Adware malware plagues OS X machines – Digital Trends
- Vulnerability found in Battlefield video game – Tech News Daily
- Pirated software often carries malware (no duh!) – Tech World
- Employees ignore security rules – Computer Weekly
- Cool, yet scary, DSLR camera hacks – Network World
- Did Stuxnet break international laws? – Help Net Security
- New cyber legislation proposes harsher penalties – SC Magazine
- Wisconsin man charges with Anonymous-related LOIC DoS – The Register
- Microsoft Metro App security updates will not follow Patch Day – Microsoft
- Linkedin fixes some web application flaws on their site – Tech News Daily