Sunbelt blog is reporting on some of the countermeasures that some banks are starting to use to frustrate keyloggers. One trick is to request that your pin – number be entered in reverse or a specific order.
Category: Security
-
Disappointing trend for online banking sites
Given how easy it is for people to be fooled by phishing sites, you would think banks would try and keep as many “easy ways to identify a legitimate bank site” as possible wouldn’t you? I mean, user-friendliness is certainly a big selling point in things software and even web site related so you would think banks would make it easier for those that are visiting to identify if they can trust that the site they’re visiting REALLY is a bank site.
-
US-CERT talks spyware
US-CERT is addressing the issue of spyware. According to Spyware Confidential, they’ve released a document (pdf) on the matter, including techniques to guard against spyware. Education and awareness are two elements that are highly emphasized.
-
Good wireless security post
I found this one at The sunbelt blog, very good article referencing a talk on wireless network security by Xavier Ashe.
-
Zotob aftermath and analysis
The dust over the zotob worm infection has settled a bit at this point. (You can bet there are still infected machines out there though so if you haven’t patched yet – DO IT and check for signs of infection.) Among other things, The Security Fix is analyzing the impact.
-
Zeroday Internet Explorer vulnerability update
The infocon level at incidents.org has been lowered back to green although there is still no patch for this issue from Microsoft and the threat still exists. They like to use the higher level to get attention to an issue, but not leave it on higher alert level for extended periods. They also have noted that Microsoft has updated their advisory.
-
Zotob update
There was an update at Incidents.org on the Zotob worm and specifically an advisory related to Cisco products.
-
Another Massive ID theft ring
It looks like Sunbelt has found ANOTHER massive Identity theft ring. They suspect it’s a trojan from the Dumaru family that is contentedly logging the infromation and promise more details.