Cyber Attacks

China behind majority of cyber attacks, NSA says

December 12, 2011

The National Security Agency claims a dozen groups connected to China's People's Liberation Army and six nonmilitary groups connected to universities are largely behind cyber spying campaigns.
 

Recent attacks cost Energy Department at least $2M

October 25, 2011

The attacks, which occurred at four department locations, were not described in detail, but were deemed "successful" for adversaries, according to the annual audit.
 

Breaking the next case

September 01, 2011

Today's flurry of cybercrimes rely on an array of motivations, techniques and technologies, making the job of an investigator to track down the offender that much more difficult.
 

Canadian intelligence warns of growing cyber-threat

July 12, 2011

The Canadian intelligence service has singled out cyber attacks as one of the biggest threats facing Canada in its latest annual report.
 

More public-private partnerships needed to fight terrorism

March 29, 2011

Canada's telecommunications networks are vulnerable to homegrown terrorists, concluded the Special Senate Committee on Anti-terrorism.
 

Cybercrime: Narrowing the gap

February 01, 2011

The $1 trillion cybercrime industry is expertly - and competitively - run. Take a peek into the inner workings of these syndicates and how the good guys are closing in.
 

Hired Guns: What's in the name CyberPMC or CyberPSC?

Charles Jeter, ESET cybercrime investigator January 10, 2011

In 2011 and the new age of cyberwarfare, what differentiates a military corporation from a security corporation? Are you now working in a cyberwarfare capacity? If so, what restrictions on global trade should CIOs be concerned with?
 

Users should be wary of holiday malware, phishing

December 21, 2010

As the holiday season continues, users should be on high alert for scams such as malware-laden electronic greeting cards and screensavers, US-CERT has warned. In addition, phishing attacks may be disguised as requests for charitable donations, credit card applications and online shopping advertisements. US-CERT recommends that users avoid opening unexpected email attachments or following untrusted links. When donating to charities, individuals should verify the organization's authenticity with the Better Business Bureau. — AM
 

Exposed McDonald's data may be linked to third-party

December 15, 2010

Thefts of information belonging to customers of two major American chains may be traceable back to a breach at an email marketing services firm.
 

WikiLeaks attacks fail to meet definition of cyberwar

December 14, 2010

Though some have labeled the website attacks surrounding the WikiLeaks controversy to be the first-ever global cyberwar, security experts say the truth is much less sensational.
 

FBI warns of SMS and phone-based phishing scams

November 24, 2010

The FBI issued a warning on Wednesday about so-called "smishing" and "vishing" scams, which are likely to be prevalent this holiday season.
 

Scammers ready to pounce on Cyber Monday deal-hunters

November 23, 2010

Social networking sites and search engines are expected to be hit hard as cybercriminals try to wrangle in unsuspecting holiday shoppers.
 

Google quickly shores up Gmail spam flaw

November 22, 2010

Google has fixed what is being described as a serious security flaw that allowed a hacker to harvest Gmail addresses and send spam from the search giant's servers.
 

Senate debates DHS, reporting responsibility post Stuxnet

November 19, 2010

The Stuxnet worm has prompted lawmakers to consider imparting additional cyber-oversight on the Department of Homeland Security.
 

Lawmaker says attack against power grid will happen

November 11, 2010

The likelihood of a crippling cyberattack against the U.S. electric gird is 100 percent, a congresswoman said Wednesday at SC World Congress in New York.
 

Targeted, smarter attacks dominate 2010 threat landscape

November 10, 2010

According to an SC World Congress speaker, cybercriminals have over the past year grown more innovative and relied heavily on opportunistic, targeted and blended attacks.
 

Hacker accesses Louisiana EMT licensing database

November 09, 2010

An unauthorized individual recently gained access to a Louisiana state licensing database that contained the personal information of tens of thousands of emergency medical technicians (EMTs).
 

Stuxnet: Lessons not yet learned?

Charles Jeter, ESET cybercrime investigator November 03, 2010

According to Iran, Stuxnet is no longer a threat - however use of a new zero-day exploit has extended its life cycle.
 

National security expert to address threat of cyberwar

October 20, 2010

The cyberwar battlefield exists in every part of society in which we live and work, according to a national security expert who will be speaking at the third annual SC World Congress.
 

Stuxnet: Cyber warfare's game-changer, Part Two

Charles Jeter, ESET cybercrime investigator October 14, 2010

Is Stuxnet cyber warfare's Trinity Test?
 

Stuxnet: Cyber warfare's game-changer, Part One

Charles Jeter, ESET cybercrime investigator October 14, 2010

Is Stuxnet cyber warfare's Trinity Test?
 

More than half of critical infrastructure targeted

October 07, 2010

In the wake of the Stuxnet worm, a new survey found that 53 percent of critical infrastructure providers said their networks have experienced politically motivated attacks.
 

Microsoft exec proposes new internet "health" model

October 06, 2010

Governments, the IT industry and internet access providers should evaluate and ensure the health of consumer devices before allowing them full access to the internet, according to a Microsoft executive.
 

From sci-fi to Stuxnet: Exploding gas pipelines and the Farewell Dossier

Charles Jeter, ESET cybercrime investigator September 30, 2010

Becoming part of a supply chain failure for nation-states willing to bypass embargo could lead to life-changing consequences.
 

Stuxnet should serve as wake-up call, say experts

September 28, 2010

The Stuxnet worm should serve as a wake-up call that cyberwarfare is a reality, experts said.
 

Cyber Storm III exercise set to begin Tuesday

September 28, 2010

Thousands of cybersecurity experts from across the country and abroad will converge this week for Cyber Storm III, a three-day-long exercise designed to evaluate America's ability to respond to a cyberattack. The exercise will offer the first test of the recently devised National Cyber Incident Response Plan by simulating a large-scale assault on the nation's critical infrastructure, according to a news release. Participants are expected to include representatives from federal agencies, 11 states, 60 private companies and 12 countries. Cyber Storm exercises previously were held in 2006 and 2008. — DK
 

Prison sentence for RBS hacker suspended in Russia

September 09, 2010

One of the leaders of a cybercriminal gang that hacked into payment services provider RBS WorldPay and stole $9 million has received a six-year suspended sentence in Russia, according to reports.
 

Pentagon official reveals "most significant" military breach

August 26, 2010

Observers believe a Pentagon official's recount of a major breach can help others from making the same mistake, while some think the incident calls into question the U.S. military's IT security preparedness.
 

Comcast hijacker gets four months in prison

August 11, 2010

A member of the Kryogeniks gang that took down Comcast's home page for several hours in 2008 was sentenced Monday to four months in prison, according to the U.S. attorney's office. James Robert Black Jr., 21, of Tumwater, Wash. and two other individuals accessed Comcast's account in May 2008 to change the site's DNS records so that users who intended to visit comcast.net were redirected to a site under the hackers' control. Comcast lost $128,578 as a result of the prank, which prevented customers from retrieving their email, voicemail and other services. — AM
 

Experts encourage investment in attribution technologies

July 16, 2010

A number of experts testified before U.S. House members Thursday that research and development is needed to improve ways to determine the identity and location of cyberattackers. Such technologies could could limit the impact of a major attack, witnesses said at a meeting of the U.S. House Subcommittee on Technology. During the hearing, members and witnesses said that increasing coordination between government and industry to develop new attack attribution technologies would help prevent redundant efforts and take advantage of all available resources. — AM