In passing, I recalled talking to my neighbor where I mentioned working in the area of information security. His next question quickly came out- “Why do these scammers want my information?” The more I’m asked this question, the more apparent it becomes that user information is highly valuable.
Would it be surprising to know that it would merely cost $5 (USD) to buy all of your personal information on underground forums and sites? Some of you may also be surprised to ...
Ease is the main reason why users are going online for their purchases, especially during the holiday season. While convenient, online shopping poses risks to users' login credentials and personally identifiable information (PII), as cybercriminals can easily craft phishing attacks that lead to data theft.
Using Trend Micro Smart Protection Network™ and other proprietary tools, we identified the top created phishing sites for December 2012. Below is a graph of created spoofed sites limited to 50 popular brand names.
Based from the ...
Now that knowledge of targeted attacks, including APT activity, has become mainstream within the broader security community, I predict that 2013 will be a year in which our assumptions will be challenged. We have already seen how successful so-called “technically unsophisticated” attacks have been over the last few years, and I predict they will continue to be so as they are designed to exploit the human factor as much as, if not more, than technology.
In his 2013 predictions, our CTO ...
These days, cybercriminals and other bad guys on the Internet may no longer have to use infostealing Trojans to gather data from users. Users intentionally posting pictures of their IDs, credit cards on Twitter and Instagram are already doing the job for them.
I’ve been noticing several young people (and even adults) who post pictures of their credit and debit cards on Twitter. But lately, I've also seen tons of these images on the photo sharing site Instagram. Some users even ...
In the past year, we've noticed many changes in how toolkits and exploit kits are being used. For starters, the bad guys are spending more time securing their creations , as well as the servers where their malware will be installed. They do this to prevent leaks, as well as to make things harder for security researchers.
Here are some of the more well-known names, and what's happened to them recently.
ZeuS
ZeuS has technically always been purchased and installed in a relatively secure way. Many of ...
