Ransomware Hack Targeting 2 Million an Hour

New submitter Zorro writes: A ransomware attack sweeping the globe right now is launching about 8, 000 different versions of the virus script at Barracuda’s customers, Eugene Weiss, lead platform architect at Barracuda, told Axios, and it’s hitting at a steady rate of about 2 million attacks per hour. What to watch out for: An incoming email spoofing the destination host, with a subject about “Herbalife” or a “copier” file delivery. Two of the latest variants Barracuda has detected include a paragraph about legalese to make it seem official, or a line about how a “payment is attached, ” which tricks you to click since, as Weiss puts it, “everyone wants a payment.” Read more of this story at Slashdot.

View the original here:
Ransomware Hack Targeting 2 Million an Hour

Microsoft Will Soon Start Bundling Drivers With Windows Store Games

Microsoft will start bundling drivers with Windows Store games to improve the performance of the game once downloaded. A report on Thurrott adds: This will work by the game download trigging Windows Update to acquire the minimum driver requirements to make sure that application works as intended. This may perturb some users who like having complete control over the driver updates for their hardware as this auto-download mechanism will overwrite the existing installation of the driver. Of course, you can still roll-back the update but hopefully Microsoft gives us a way to stop the auto-download of the driver via the Windows Store when this feature arrives. Read more of this story at Slashdot.

Excerpt from:
Microsoft Will Soon Start Bundling Drivers With Windows Store Games

Hackers steal $12 million from an Ecuadorian bank via SWIFT

Earlier this week reports showed another round of SWIFT-related cyber heists , this time targeting banks in Ecuador. A new report in Reuters sheds light on what actually happened to the high-tech thieves’ $12-million loot. Apparently, they moved $9 million to 23 banks in Hong Kong and $3 million to Dubai and other parts of the world. Wells Fargo transfered sums with the total value of $9 million to the accounts of four companies at HSBC and Hang Seng Bank based on authenticated SWIFT transactions. The hackers then distributed the money to what are believed to be phoney business accounts. Similar to the recent Bangladesh and Vietnam bank attacks, the thieves’ scheme involved the use of the SWIFT messaging platform. Banks use SWIFT’s platform to make financial transfers between each other, and cyber thieves typically send out fraudulent SWIFT messages requesting for funds to be routed to dummy accounts. In Bangladesh Bank’s case, the thieves used the SWIFT credentials of the institution’s employees to request several transfers to accounts overseas. They got off with $80 million, which would have been much larger ($1 freaking billion) if they didn’t misspell the word “foundation.” The hackers could have easily accessed the employees’ credentials, because the bank lacked a proper firewall. It’s not clear if that’s also what happened in Ecuador, but the thieves obviously had the same MO. American banks are now looking more closely into SWIFT’s security after news of these cyber heists surfaced. SWIFT (which stands for Society for Worldwide Interbank Financial Telecommunication) itself is working on a five-point security plan to prevent similar events in the future. Source: Reuters

View the original here:
Hackers steal $12 million from an Ecuadorian bank via SWIFT

Hackers tried and failed to steal a billion dollars from bank

Hackers stole $80 million from a bank, but it could have been a lot worse if they had just Googled the name of a company, according to Reuters . Thieves got inside servers of the Bangladesh Bank, stealing the credentials used to make online transfers. They then bombarded the Federal Reserve Bank in New York with up to 13 money transfer requests to organizations in the Philippines and Sri Lanka. The Fed allowed four to go through totaling $81 million, but the next one was flagged by a routing bank in Germany because the hackers misspelled “foundation” as “fandation.” Once alerted, officials put a stop to the the remaining transfers, which amounted to nearly $850 million. The $81 million theft is still one of the largest ever, but if all the transfers had gone through, it would have been one of the biggest heists on record. Last year, Russian hackers reportedly got away with up to $1 billion from 100 banks using malware. Meanwhile, Bangladeshi officials are trying to lock down their systems and figure out how the attack happened, but say there’s little hope the hackers and money will be recovered. As with many large-scale attacks , experts told Reuters that the thieves likely targeted and spied on employees to gain access to servers. While the bank blames the US Federal Reserve Bank for not stopping the transfers, Fed officials say that it’s systems were not breached and that it has been cooperating in the investigation. Luckily, hackers are just as bad at spelling in large fraud attempts as they are in basic spear-phishing attacks. Source: Reuters

More:
Hackers tried and failed to steal a billion dollars from bank

Brooklyn Yogurt Shop Sting Snares Fake Reviewers For NY Attorney General

Hugh Pickens DOT Com writes “Reuters reports that nineteen companies caught writing fake reviews on websites such as Yelp, Google Local and CitySearch have been snared in a year-long sting operation by the New York Attorney General and will pay $350, 000 in penalties. The Attorney General’s office set up a fake yogurt shop in Brooklyn, New York, and sought help from firms that specialize in boosting online search results to combat negative reviews. Search optimization companies offered to post fake reviews of the yogurt shop, created online profiles, and paid as little as $1 per review to freelance writers in the Philippines, Bangladesh and Eastern Europe. To avoid detection the companies used ‘advanced IP spoofing techniques’ to hide their true identities. ‘This investigation into large-scale, intentional deceit across the Internet tells us that we should approach online reviews with caution, ‘ said Attorney General Eric Schneiderman. ‘More than 100 million visitors come to Yelp each month, making it critical that Yelp protect the integrity of its content, ‘ said Aaron Schur, Yelp’s Senior Litigation Counsel.” Read more of this story at Slashdot.

Visit site:
Brooklyn Yogurt Shop Sting Snares Fake Reviewers For NY Attorney General

Islamists In Bangladesh Demand Murder of More Bloggers

An anonymous reader writes “Days after the killing of leftist blogger Thaba Baba, mosques throughout Bangladesh called for a popular uprising to demand the killing of other bloggers who had held a rally calling for the death of Jama’at-e-Islami leaders convicted of war crimes. This happens in an atmosphere of ongoing tension between Left and Right, with the leftist government threatening to outlaw rightist parties while the right uses violence to quiet selected enemies.” Read more of this story at Slashdot.

More:
Islamists In Bangladesh Demand Murder of More Bloggers