SEARCH RESULTS
 
Showing 1-10 of 36 records
 
Expand article

News from the Rock Phish Gang

2008-09-10 07:47:38 by schneier in Schneier on Security
 
...Rock Phish group is a criminal collective that has been targeting banks and other financial institutions since 2004. According to RSA, they are responsible for half of the worldwide phishing attacks and have siphoned tens of millions of dollars from individuals' bank accounts. The group got its name from a now discontinued quirk in which the...
 
Tags: rock, rock phish, phishers, rock phishers, attacks, asprox attacks, asprox, rsa researchers, rsa
 
 
 
 
Expand article

What's Going on Between Asprox and Rock Phish?

2008-09-04 00:00:00 by RSA FraudAction Research Lab in Speaking of Security, the RSA Blog and Podcast
 
...Rock Phish group decides to abandon its old methods and upgrade its botnet infrastructure? It is done slowly, smoothly but most importantly -- professionally. The RSA FraudAction Research Labs recently gathered information that indicates major changes in the tactics employed by the Rock Phish gang. We have reason to believe that the gang is...
 
Tags: rock phish, gang, gang decides, rock phish gang, infrastructure, botnet infrastructure, infrastructure belongs, infamous asprox botnet, decides
 
 
 
 
Expand article

Is Rock Phish cybergang set for a comeback?

2008-09-05 00:00:00 by Ellen Messmer in Network World on Security
 
RSA warns that the Rock Phish cybergang is upgrading its botnet for nefarious purposes
 
Tags: rock phish cybergang, rsa warns, nefarious purposes, botnet
 
 
 
 
Expand article

Is Rock Phish cybergang set for a comeback?

2008-09-05 13:00:00 by Editor in Computerworld Security News
 
East European cybercrime gang Rock Phish is linking its Command & Control server to the Asprox botnet in an apparent effort to boost its ability to propogate phishing attacks
 
Tags: apparent effort, control server, asprox botnet, attacks, boost, ability, command
 
 
 
 
Expand article

Employee fraud hits Baptist Health in Arkansas

The Article has images
2008-07-11 00:00:20 by Evan Francen in The Breach Blog
...ROCK (AP) - A North Little Rock woman has been arrested for using financial information from patients at Baptist Health to illegally obtain Wal-Mart gift cards for her own use. The hospital has notified about 1,800 patrons of the ID theft Reference URL Associated Press via WXVT Channel 15 News KARK Channel 4 News Arkansas Democrat-Gazette ...
 
Tags: confidential personal information, personal information, baptist health system, health system, fraud, victims personal information, employee fraud, baptist health, employee
 
 
 
 
Expand article

209.1 Host Locked

The Article has images
2007-12-18 17:56:28 by HASH0x8713b3c in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...Rock Phish kit for a while now, in between tracking down the New Media Malware Gang and several other related malware campaigns. The Rock Phishers seem to keep track of this, and periodically change the default error message returned on a Rock Phish domain. First it was " 209 Host Locked ", than it became " 66.1 Host Locked ", and how they've...
 
Tags: rock phish kit, rock phish, aspx, malware campaigns, malware, rock phish domain, banker malware, campaigns, host
 
 
 
 
Expand article

Stolen laptops affect 337,000 Davidson County voters

The Article has images
2007-12-29 11:30:26 by Evan Francen in The Breach Blog
...rock to break their way in Evan] A rock is all it took. There is no mention of any alarm system and it appears that nobody noticed until they came back to the office taken were two Dell Latitude laptops containing information of 337,000 registered Davidson County voters As we look deeper into determining the extent of loss that occurred...
 
Tags: voters, davidson county voters, davidson county, tennessee voters, information technology department, information, voters monitor, sensitive personal information, confidential information
 
 
 
 
Expand article

66.1 Host Locked

The Article has images
2007-11-28 16:13:28 by HASH0x89e99bc in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...Rock Phish domain a couple of months ago in the form of the bogus " 209 Host Locked " message, the Rock Phishers seems to have picked up the finding and changed the default domain message to "66.1 Host Locked" as of recently. Here are the very latest Rock Phish domains using this business-eb.bbt.com.4rrt.es ntu3ot1.com nikogonet.com...
 
Tags: email, email service provider, email service, provider, responsibility, brand, internet service provider, default domain message, senders isp
 
 
 
 
Expand article

Crimeware in the Middle - Zeus

The Article has images
2008-04-24 04:37:46 by HASH0x8ae4648 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...Rock Phish emails with Zeus , a crimeware kit used to deliver banking trojans The Trojan that was used in this attack belonged to the "Zeus" family of malware. Zeus is a nefarious type of Trojan for multiple reasons 1. The Zeus Trojan is a kit for sale: Anyone in the criminal community can purchase it for roughly $700. This means that the...
 
Tags: zeus, file, remote file, zeus trojan, binary file, file system32 drivers, kit, metaphisher kit, configuration file
 
 
 
 
Expand article

How effective is the wisdom of crowds as a security mechanism?

2007-12-21 15:26:10 by Tyler Moore in Light Blue Touchpaper
 
...rock-phish domains, a savvy attacker could build reputation by voting for these sites without contributing to PhishTank otherwise So crowd-sourcing your security decisions can leave you exposed to manipulation. But how does PhishTank compare to the feeds maintained by specialist website take-down companies hired by the banks? Well, we...