SEARCH RESULTS
 
Showing 1-10 of 15 records
 
Expand article

The RSA Conference

2008-04-22 06:35:59 by schneier in Schneier on Security
 
...sellers can't explain what they're selling to the buyers, and the buyers don't buy because they don't understand what the sellers are selling. There's a mismatch between the two; they're so far apart that they're barely speaking the same language This is a bad thing in the near term -- some good companies will go bankrupt and some good...
 
Tags: non-security companies, companies, end-user security industry, security industry, information security conference, information security, automobile companies, security companies, security
 
 
 
 
Expand article

The RSA Conference

2008-04-22 06:35:59 by schneier in Schneier on Security
 
...sellers can't explain what they're selling to the buyers, and the buyers don't buy because they don't understand what the sellers are selling. There's a mismatch between the two; they're so far apart that they're barely speaking the same language This is a bad thing in the near term -- some good companies will go bankrupt and some good...
 
Tags: non-security companies, companies, end-user security industry, security industry, information security conference, information security, automobile companies, security companies, security
 
 
 
 
Expand article

Crimeware in the Middle - Zeus

The Article has images
2008-04-24 04:37:46 by HASH0x8ae4648 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...sellers to lower or increase the price depending on which modules you'd like included, and which ones you'd like excluded, where a module means a preconfigured fakes, TANs, and phishing pages for all the banks in a country of choice. Moreover, despite that both, Zeus and Metaphisher are open source, and therefore malicious parties visionary...
 
Tags: zeus, file, remote file, zeus trojan, binary file, file system32 drivers, kit, metaphisher kit, configuration file
 
 
 
 
Expand article

Price Discrimination in the Market for Stolen Credit Cards

The Article has images
2008-06-03 07:23:29 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...sellers come up with the price range? Depends on who you're buying the goods from. Continuing the discussion on the Underground Economy's Supply of Goods , the service I'll comment on in this post is among the countless number of others offering stolen credit card numbers, however, in this one we have a great example of price discrimination...
 
Tags: price, price discrimination, volume basis, basis, market, average price, bank basis, volume basis propositions, credit card
 
 
 
 
Expand article

How to buy and sell on eBay scam-free

2008-02-01 00:00:00 by HASH0x8b3faf8 in Network World on Security
 
Ask eBay users about auction fraud and payment scams, and you'll hear different stories with the same theme: While eBay can be a great marketplace, both buyers and sellers need tobeware Protecting the Enterprise Network Through Web Security Advertisement New focus is being placed on securing Web-based threats
 
Tags: ebay, ebay users, payment scams, auction fraud, enterprise network, web security, advertisement, tobeware, sellers
 
 
 
 
Expand article

The FirePack Web Malware Exploitation Kit

The Article has images
2008-02-20 08:38:26 by HASH0x8b2b43c in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...sellers, or subconsiously ignore the existence of the kit until it leaks out, and turns into a commodity just like MPack and IcePack are nowadays Related posts The WebAttacker in Action Nuclear Malware Kit The Random JS Malware Exploitation Kit Metaphisher Malware Kit Spotted in the Wild The Black Sun Bot The Cyber Bot
 
Tags: nuclear malware kit, malware kit, kit, metaphisher malware kit, malware exploitation kit, malware kits permanently, javascript obfuscation technique, source malware kits, major differentiation factors
 
 
 
 
Expand article

The FirePack Exploitation Kit - Part Two

The Article has images
2008-04-27 04:27:00 by HASH0x8ae4cf0 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...sellers of these could actually be making more money from the services that they offer with the kit, than from volume based selling of the kits. What's to come? Hybrid web malware exploitation kits with all-in-one exploits set on a per OS, and software, not just browser basis, putting the emphasis on client side vulnerabilities even better ...
 
Tags: nuclear malware kit, malware kit, kit, metaphisher malware kit, icepack malware kit, original firepack kit, malware exploitation kit, php, scanners result
 
 
 
 
Expand article

Segmenting and Localizing Spam Campaigns

The Article has images
2008-05-02 07:01:43 by HASH0x8af6990 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...sellers start differentiating their propositions, taking spam in general a step beyond
 
Tags: spam, market, fashion spammers, market participants, spammers, spam message, emails, email databases, localization process
 
 
 
 
Expand article

How to Sell Security

2008-05-26 05:57:29 by schneier in Schneier on Security
 
...sellers know this, even if they don't understand why, and are continually trying to frame their products in positive results. That's why you see slogans with the basic message, "We take care of security so you can focus on your business," or carefully crafted ROI models that demonstrate how profitable a security purchase can be. But these...
 
Tags: security, loss, risky loss, risky larger loss, gain, risky larger gain, security purchase, directly, security directly