Design 21: Social Design Network

90% of unknown malware is delivered via the web | reference code 85258083266, hass internet technology reviews

http://hassassociatescybersecurityemma.wordpress.com/2013/04/30/90-of-unknown-malware-is-delivered-via-the-web-reference-code-85258083266-hass-internet-technology-reviews/

A new study of malware takes an unusual approach – instead of analyzing known malware, it analyzes the unknown malware that traditional defenses miss; and finds that 90% is delivered from the web rather than via emails.

Read more related forums:

http://communities.ptc.com/thread/42688

http://forum.sofeminine.co.uk/forum/carriere1/_f570carriere1-90-of-unknown-malware-is-delivered-via-the-web-reference-code-85258083266-hass-internet-technolo.html

http://www.allvoices.com/contributed-news/14526527-hass-associates-internet-security-tips-and-reviews

Die Polizei hat Cyber Safe Kampagne 2013 um Bewusstseinsbildung bei Schulkindern gegen steigende Cyber-Verbrechen eingeleitet. Die Eröffnungssitzung der Kampagne wurde am Montag vom Polizeichef Alok Mittal am CCA Schule, Sector 4, Gurgaon eingeweiht. “Jugendliche sind heute technisch versierten aber besteht die Gefahr von ihnen fallen Beute zur Cyberkriminalität. Solche Kampagnen, die ihnen helfen werden”, sagte Mittal. Die Kampagne, die bis Mai 4 weiterhin stattfinden in 12 Privatschulen unter Gurgaon Progressive Schulen Rat (GPSC) Regenschirm von Nirmal Yadav, principal, CCASchule geleitet. Jede Schule Gastgeber zwei Sitzungen für junior und senior Studenten bzw.. Dieses Pilotprojekt wurde von Finanzunternehmen Encore Hauptstadt gesponsert. “Die Sitzung wurde von 400 Studenten besucht. Studenten wurden erklärt die Gesetzmäßigkeiten in Bezug auf locken, Phishing und strafrechtliche Aspekte der Cyber-Kriminalität, “sagte Col Pratap Singh, Präsident von Haryana progressive Schule Konferenz (HPSC) und Vorsitzende des CCA-Schule. Cyber Experte Rakshit Tandon während des Sprechens in CCA Schüler warf Licht auf Cyber-Verbrechen wie Mobbing, Erpressung, Hacker, Phishing, Bank oder Kreditkarte IDs und Cyber Porno u.a. zu stehlen.

Watch Video: http://www.youtube.com/watch?v=H9mOz8eUpQ8 Related Article: http://forums.ebay.com/db2/topic/Business-Industrial/Hass-And-...

https://www.quora.com/Justin-Blake-7/Hass-and-Associates-Cyber-Security/Tausende-von-Wordpress-Accounts-die-im-industriellen-Ma%C3%9Fstab-W%C3%B6rterbuch-Angriff-getroffen

Quelle: http://www.v3.co.uk/v3-uk/news/2261396/thousands-of-wordpress-accounts-hit-in-industrialscale-dictionary-attack

cyber news hass and associates latest, Tausende von Wordpress-Accounts, die im industriellen Maßstab 'Wörterbuch'-Angriff getroffen

Cyber-Kriminelle sind beliebten Wordpress Blogging-Plattformen mit Passwort knacken Angriffe gezielt.

Sicherheit Experte Brian Krebs berichtet Aufdeckung der Kampagne veröffentlichen eine Liste Beispiel WordPress Benutzernamen und Passwörter, die bei diesem Angriff am Samstag verwendet.

Sicherheit Firma Sophos berichtet, dass die Betrüger die Informationen mithilfe eines Botnets stehlen, um automatisierte Wörterbuchangriffe zu starten.

"Wort aus der Anti-DDoS-Welt ist, dass eine Botnet zuständig, mit Schätzungen von 'bis zu 90.000', 'mehr als zehntausend ist', und 'bis zu 100.000' infizierten Computern, die Orchestrierung der verbrecherischen Login-Versuche", schrieb Sophos Forscher Paul Ducklin.

Wörterbuch-Angriffe sollen Konten hacken durch die Benutzernamen und Passwörter erraten. Die Angriffe können je nach Komplexität, mit einigen auf harte Forschung unter Verwendung von Daten auf Facebook-Seite oder Twitter-Profil des Opfers, während andere einfach zufällige Vermutungen sein können.

"Die Idee ist einfach: das Erraten...

Nykyinen online elämäntavat nähneet yhä nopea levittää tietoa, mutta rikollista toimintaa Internetissä on lisääntynyt myös nopeasti.

Alam Maffian, 25, Yksityinen yritys Alam Sutera Tangerang, työntekijä sanoi, että hän menetti yli Rp 1,5 miljoonaa (US$ 154) kun hän surfed internetistä äskettäin hankkia katti.

"Käytin Internet löytää kissat myytävänä. Kutsutaan numero, mainoksia ja toisessa päässä mies pyysi minua maksamaan käsiraha,"hän kertoi Jakarta Post maanantaina.

Rahansiirtoon pyynnön, hän sanoi, mies hylkäsi hänen edelleen vaatii. Alam sanoi, hän oli päättänyt ei ilmoita poliisille asiansa saatuaan, että tietoverkkorikollisuutta kertomukset olivat monimutkaisia ja merkitsisi sitä, että lähettämät yksi poliisiasemalle.

Depok yliopisto-opiskelija, Ratu Agnes Selvi, 26, sanoi, että hän oli menettänyt Rp 4 miljoonaa jälkeen yrittää ostaa kannettavan Internetistä kesäkuussa viime vuonna.

Hän sanoi, hän oli ilmoitti tapahtuneesta Keski Jakarta poliisi ja kerrottiin odottaa poliisi cyber crime unit puhelun. Mutta hän ei saanut puhelua ei sen jälkeen.

"Miksi kestää niin kauan löytää ja pidättää rikollisia Internetissä poliisin?", hän kysyi lisäämällä, että hän oli törmännyt useita samanlaisia valituksia Internetissä.

Jakarta poliisin tiedottaja SR Comr. Rikwanto sanoi poliisi tutkivat edelleen cyber rikollisliigan seuraamalla epäilyttävistä sivustoista.

Tietojen Indonesian...

http://www.3news.co.nz/Chinese-cyber-war-intensifies/tabid/417/articleID/293604/Default.aspx

Dans Shanghai externe, les conducteurs doivent directions à la recherche d'une base d'espionnage militaire chinois cachée quelque part dans un quartier à la recherche ordinaire. Il a appelé unité 61398 – censé pour abriter une unité secrète de piratage chinoise. Le public ne sont pas autorisé à proximité de l'immeuble de 12 étages ordinaire, et il y a une interdiction de tournage et de photographie. Le bâtiment est en fait le nerf centre d'et le quartier général de l'armée chinoise cyber responsable de cyber-attaques contre les Etats-Unis et peut-être d'autres pays, y compris la Nouvelle-Zélande. Unité 61398 a été découvert le mois dernier à quelle entreprise de sécurité américaine cyber Mandiant tracée 90 pour cent de ses interceptions identifiées au quartier – armée de libération populaire base. La Chine et son armée sont les suspects numéro un au monde pour cyber piratage, bien que l'armée chinoise a nié à la télévision nationale. Premier ministre John Key refuse de blâmer publiquement la Chine, mais une entreprise de sécurité de cyber Auckland affiche des attaques sur la Nouvelle-Zélande en temps réel et la plupart viennent de Chine. Et la tâche de protéger la Nouvelle-Zélande de cette nouvelle guerre incombe au n'est autre que d'espionner l'Agence GCSB.

La cyberguerre est réel. M. Key a révélé cette semaine la Nouvelle-Zélande en...

http://www.9news.com/news/article/327848/339/Phishing-scam-targets-Denver-metro-area?odyssey=tab%7Ctopnews%7Cbc%7Clarge

JEFFERSON COUNTY - Theførste Judicial District Attorney's Office er å få rapporter om oppringere utgaseg som politi og prøver å stjele folks identiteter og penger. Mannen på linjen erhøflig, lavmælte, og høres ut som han er oppriktig bekymret. Luciana, somspurte 9NEWS å endre navnet hennes, sier samtalen var så troverdig, hun nestenfalt for den. Arvada bosatt siernummeret ikke vises på hennes innringer-ID. Mannen på telefonen hadde envennlig stemme mens levere dårlige nyheter til henne."Jeg trodde det hansa. Jeg hadde vært røde flagget, sa Luciana.Oppringeren fortalte henne at hunvar under etterforskning for identitetstyveri og anklaget henne for å brukenoen andres navn for å få et kredittkort."Jeg var overveldet.Redd,"Luciana sa. Så redd, hun ikke engangtenke to ganger om å gi personopplysninger. Luciana sier de kalt fire ganger iløpet av helgen. Dette er rovdyr isamfunnet vårt,"sa Luciana.Statsadvokat Peter Weir av første JudicialDistrict, som inkluderer Jefferson og Gilpin fylker, sier svindlere er rettetmot de mest sårbare borgere, ofte eldre. "Ditt personnummerer som gull til dem," sa Weir.Han sier de er "phishing" for noesom vil hjelpe dem stjele identiteten din inkludert personnummer, fullt navn ogfødselsdato."Du kan kjøpe et hus; Du kan kjøpe biler, åpner andrekredittkort. Det ødelegger din kreditt,"...

An international hacker was recently found to have more than 10,000 stolen debit and credit card numbers. So, clearly, phishing – the practice of tricking someone into giving bank or credit card information – is rife and plenty of people are falling for it.

Many businesses issue staff with credit cards to pay for work expenses. But don’t assume everyone who works in your small business is too smart to be taken in by the corrupt come-on of some creep who slips past your email filters. Phishing messages can be slyly convincing.

The website that a phisher’s email links to will have an address (URL) that is similar to but not the same as a real bank's or financial institution’s site. For instance, if the real site is at 'www.yourbank.com.au', the scammer may use an address like 'www.yourbank.com.au.log107.biz'. The fake site may be stamped with logos indistinguishable from those on the real site.

Here are seven tips to help counter the slippery threat of phishing with protection, detection and correction.

1. Use anti-phishing staff training programs

One way to prevent the potential financial harm that can be inflicted by phishing attacks is to train your staff to understand phishers’ manipulative ‘head hacking’ antics. Software training programs include PhishGuru and PhishMe, which is a phishing simulator that boosts awareness of the sophisticated tactics used by hackers looking to compromise your firm’s data and systems.

1. Take a cross-platform stance

You...

http://hassassociates-online.com/articles/2013/03/07/five-ways-to-manage-your-digital-reputation/

Reputation is the key word. In fact, online digital reputation has never been more important. While a few years ago much of our personal information was still considered private, today cyber security expose more information about our lives than ever before. While many people don’t think much about having a “digital reputation,” especially in purchasing products online, information about almost all adult worldwide can be found online.

Based from the survey conducted by ORC International, results have shown more than 89% of consumers research articles online before making a buying decision, while, 87% of them agree that a favorable review has confirmed their decision to purchase.

And while our real life reputation is largely defined by us through our interactions with others, our online digital reputation defines how people perceive us – without ever having a single conversation. The fact is, a digital reputation can be incorrect, it may present only partial information and it might even allow for slander and online attacks to define us for others. Translating your brand’s personality onto the web can be tricky, so here is our list of five simple steps that can help you get started.

1: Match your offline and online personas: When you’re creating a Facebook page or a Twitter account, it should match your brand’s personality in the real world. Choose a design language (...

http://www.houstonianonline.com/news/hacking-social-media-sites-become-easier-by-exploiting-cookies-1.2819362#.UVOKURenoXu

Internet users may want to keep an eye on their cookie jar, because a new discovery has linked cookies with hacked social media accounts. Internet researcher Rishi Narang discovered a flaw in the way cookies are used by Twitter, LinkedIn, Microsoft Outlook/Live, and Yahoo. According to Australia’s SC Magazine, Narang found that cookies can be “stolen and used” in a “session fixation” attack. A session fixation is a method of hacking that tricks a victim into using a session identifier chosen by the attacker. If successful, it represents the simplest method with which a valid session identifier can be obtained. One student at SHSU however didn’t find the exploit a big deal. “If I got hacked like that, I wouldn’t really care,” senior student Christopher Valva said. “It’s just a Twitter account. It’s not my entire life.”

If an attacker can intercept cookies while the user is logged in, the attacker could effectively convince the website that their browser is the original user’s browser, gaining “unfettered access” to your account. Not even a password change could keep the attacker out. It goes without saying that this form of hacking only works if the user is logged in, because the cookie is deleted when the user logs out. LinkedIn is an exception however, because sometimes it retains a user’s cookie for three months. Rishi Narang...

http://www.pcworld.com/article/2031041/cyber-crime-punishment-questioned-by-internet-advocacy-group.html

Digitale rettigheter aktivister bruker et sikkerhetsbrudd som involverer hemmelighetsfull gruppen Anonym som en mulighet til bane mot en føderal anti-hacking lov kalt datamaskin svindel og misbruk Act.

Electronic Frontier Foundation er ikke forsvare de påståtte handlingene til Matthew nøkler, en tidligere Tribune Company ansatt som kunne møte så mye som 25 års fengselsstraff over føderale avgifter beskylder ham for å konspirere med medlemmer av anonym å banalisere i en Tribune nettside.

Men San Francisco-basert advocacy gruppe sier gjeldende lov betyr cyber forbrytelser er ofte forfulgt mye mer alvorlig enn forbrytelser av vold. EFF sammenligner Keys' tilfelle til justisdepartementets rettsforfølgelse av politisk aktivist og Internett innovatør Aaron Swartz, der han møtte en maximumsentence av 35 år i fengsel og en bot på $1 million. Swartz begikk selvmord i januar. Familien utgitt senere en uttalelse som erklærte at hans død ikke var bare en personlig tragedie, men "går ut produktet av en strafferettssystemet florerer med trusler og prosecutorial over."Denne uken, annonserte DOJ Keys' tiltale for brudd CFAA ved å gi medlemmer av anonym det logikk credentials for Tribune selskapets content management system. Som et resultat, systemet var brutt og en endret nyhetsartikkelen dukket opp på Los Angeles Times nettsiden for omtrent en halvtime.Betyr Keys' ...