Security News

New Phishing Campaign Targets Google Credentials (Threatpost)
2015-07-28 14:49

Researchers have found a new phishing campaign leveraging Google Drive in order to steal credentials.

Cloned, booby-trapped Dark Web sites steal bitcoins, login credentials (Help Net Security)
2015-07-02 11:54

Someone is cloning .onion sites, and using the clones to intercept user traffic and offer modified content. "I noticed a while ago that there is a clone onion site for Ahmia," Juha Nurmi, founder o...

Why a Dyre infection leads to more than just stolen banking credentials (Help Net Security)
2015-06-25 07:07

The Dyre/Dyreza information-stealer has without a doubt filled the vacuum generated by the 2014 and 2015 law enforcement takedowns of botnet infrastructure of several prominent financial Trojan groups...

Many popular Android apps fail to encrypt login credentials (Help Net Security)
2015-06-22 08:23

Using encryption to protect mobile traffic and especially the exchange of credentials between the user and company servers should be a must in this day and age. Unfortunately, there are companies that...

Plaintext Credentials Threaten RLE Wind Turbine HMI (Threatpost)
2015-06-17 14:01

A week after disclosing a cross-site request forgery vulnerability in small wind turbines manufactured by a company called XZERES, a security researcher has discovered a serious bug in the...

Employee credentials of half of European top 500 firms exposed online (Help Net Security)
2015-06-02 12:15

Cyber attacks and data breaches very often start with phishing or spear-phishing. Access to good credentials is key - whether it's for straight emailing or direct access to target email systems, etc. ...