FTC shuts down notorious botnet ISP

The Federal Trade Commission (FTC) has shut down a U.S.-based Internet Service Provider for recruiting, hosting and actively participating in the distribution of spam, child pornography, and other harmful electronic content. Pricewert LLC (also known as 3FN and APS Telecom) was shut down by a district court judge at the FTC’s. The ISP’s upstream [...]

StrongWebmail CEO’s mail account hacked via XSS

A Webmail service that touts itself as hack-proof and offered $10,000 to anyone who could break into the CEO’s e-mail has lost the challenge. A trio of hackers successfully compromised the e-mail using persistent cross-site scripting (XSS) vulnerability and are now claiming the bounty.

[ SEE: Email service provider: 'Hack into our CEO's email, [...]

Patch Tuesday heads-up: Critical Windows, IE fixes coming

Microsoft plans to ship 10 security bulletins next Tuesday (June 9, 2009) with fixes for a wide range of code execution vulnerabilities affecting Windows, Microsoft Office and Internet Explorer. Six of the ten bulletins will be rated “critical,” Microsoft’s highest severity rating.

[ SEE: Dangerous Microsoft DirectX vulnerability under attack ]

This month’s batch [...]

Typo’d Google domains in Top 10 malware exploit sites

Misspelled versions of two popular Google services are among the Top 10 sites hosting exploits for use in drive-by malware download attacks. On the heels of two massive drive-by attacks — ten of thousands of hijacked sites launching attacks via the browser — Google released a list showing that malicious hackers are typo-squatting on its [...]

Social Engineering Watch: Summer

Invariably, summer is when people troop to online shops, book flights to go on much-awaited vacations, and schedule recreational activities or hobby-type classes. Trend Micro identifies some of the biggest threats that take advantage of summer, an “important season for the social agenda of individuals.”

Shopping invoices for ghost transactions: Users, even those who [...]