Kraken Botnet Re-emerges
According to SC Magazine, Kraken, a large and difficult-to-detect botnet that peaked in 2008 and was dismantled by early 2009, is back, and anti-virus solutions are struggling to detect it.
E-mail Claiming to Be From the FDIC
The Federal Deposit Insurance Corporation (FDIC) has received numerous reports of a fraudulent e-mail that has the appearance of being sent from the FDIC.
Hundreds Arrested in Mortgage Fraud Sweep
From industry insiders to straw buyers, nearly 500 people have been arrested in a nationwide mortgage fraud takedown that reflects the coordinated efforts of law enforcement to address the growing problem of crime in the housing industry.
Microsoft Updates for Multiple Vulnerabilities
Microsoft has released updates to address vulnerabilities in Microsoft Windows, Microsoft Internet Explorer, Microsoft Office, Microsoft SharePoint Services, and Microsoft .NET Framework.
FTC Extends Enforcement Deadline
At the request of several Members of Congress, the Federal Trade Commission is further delaying enforcement of the “Red Flags” Rule through December 31, 2010, while Congress considers legislation that would affect the scope of entities covered by the Rule. Today’s announcement and the release of an Enforcement Policy Statement do not affect other federal agencies’ enforcement of the original November 1, 2008 deadline for institutions subject to their oversight to be in compliance.
Mass Marketing Fraud: Old Scams, New Wineskins
A few decades ago, mass marketing fraud—the kind that exploits mass communication techniques like bulk mail or telemarketing—was relatively low-tech and mostly a regional crime problem targeting victims nearby.
Dan Hadaway Earns CRISC Designation
Dan Hadaway, Managing Partner of Infotex, Inc., recently received the Certified in Risk and Information Systems Control certification (CRISC) certification. He earned the designation by meeting qualifying criteria required by the Information Systems Audit and Control Association (ISACA). The CRISC certification recognizes professionals for their knowledge of enterprise risk and their ability to design, implement, monitor, and maintain controls to mitigate those risks.
Beware “Tabnapping” – A New Kind Of Phishing Scam
A leading developer of Firefox has warned of a sneaky potential new form of phishing attack: Tabnapping
The so-called tabnapping attack works by using JavaScript to switch the destination page in a tab after a few seconds of inactivity. This might be done using attack script planted in an otherwise legitimate website, for example.
New Threat For Wireless Networks: Typhoid Adware
Remember hearing about Typhoid Mary? There’s a potential threat lurking in your Internet cafe, say University of Calgary computer science researchers: Typhoid adware.
FFIEC Issues Revised BSA/AML Examination Manual
In trying to keep up with notifications of threats and vulnerabilities, patches, articles and other issues related to information security, I am a little late in getting this out. But, for those of you who are busy with your compliance duties and haven’t noticed….
The FFIEC issued a press release announcing the release of the revised Bank Secrecy Act/Anti-Money Laundering (BSA/AML) Examination Manual.