- 1
- 2
- 3
- 4
- < previous
- next >
- +
The 2007 security hall of shame 27 December, 2007 07:47:46
Bad breaches, ghastly gaffes and five people we'd like to forgetHow bad was 2007 for breaches, vulnerabilities and similar mayhem? On the bright side, it was better than 2008 is forecast to be. With more of every sort of meltdown predicted -- more criminalization of the hacker community, more Web-application attacks, more phishing, more spamming, more zero-day attacks and more virtualization-related threats -- we're happy to tell you that you are likely to look back on 2007 as the peaceful old days. - +
Second helping of FBI's Bot Roast serves eight 03 December, 2007 07:30:41
Initiative against zombie herders seeing success in the US and abroadThe FBI on Thursday announced that eight individuals have been indicted, pled guilty or have been sentenced to prison over the last few months for crimes related to botnet activity. - +
Amazon wins battle to protect customer records 30 November, 2007 11:15:41
But victory narrowed, since prosecutor obtained data through other meansAmazon.com has successfully fought an attempt by US federal prosecutors to gain access to information about thousands of customers who purchased books online. But the victory was offset by the prosecutor's ability to obtain the data from a suspect's computer. - +
Ex-security pro admits running huge botnet 13 November, 2007 10:32:06
A former security researcher admitted to hijacking a quarter of a million PCsA former security researcher admitted to hijacking a quarter of a million PCs, using spyware to steal bank and PayPal account information, and making money by installing adware on the massive botnet. - +
Mozilla to fix 9-month-old Firefox bug as concerns grow 20 November, 2007 05:06:52
Flaw found in February, but ignored until it was deployed in Gmail hackMozilla will patch Firefox against a nine-month-old protocol handler bug, its chief security executive announced Friday, after researchers demonstrated that the vulnerability was more serious than first thought.
Click here for case studies, whitepapers and other useful vendor content Newsletter Subscription
The site, well known in the security community as a resource to track malware trends, was virtually shut down while the site's operators dealt with an attack that, at its peak, flooded its ISP with 969 megabits per second of traffic, an insanely massive volume that all but shut down not only the site, but Castlecops' entire ISP, ApplicationX, during the highest point of the attack.
As for KillaNet, King caused thousands of dollars in losses of time and content due to multiple attacks on the site's Web server, according to a KillaNet press release announcing King's indictment.
If convicted, King faces four counts of "transmission of code to cause damage to a protected computer," with a maximum penalty of ten years in prison and US$250,000 in fines for each count.
The Perp: Azizbek Mamadjanov Convicted of: Wire fraud, enabled by phishing, Sentenced: June, 2007, to two years in prison
Mamadjanov's crimes fall about as far to the fringe of what's considered a cybercrime as you can get -- in this case, it was clearly a fraud that was simply enabled by the use of stolen online banking information. The 21-year-old resident of Florida. registered a fake landscaping business with the state, created business bank accounts using the social security numbers of people who had died, and then used fraudulently obtained banking information stolen from Internet users to transfer money from the victims' accounts to his own.
In July, 2006, he tricked a victim into divulging his account details using a phishing attack, then transferred US$40,000 into his own account. Within about 24 hours of the transfer, Mamadjanov made four US$10,000 withdrawals, each from a different branch of the bank where his business account was set up, Capital City Bank.
A few days later, Mamadjinov repeated the crime using a different victim's stolen credentials and a different business account he'd earlier established at AmSouth Bank. This time, he transferred US$39,823 from the victim's account to his own, and made another quartet of US$10,000 withdrawals from four different AmSouth Bank branches. Apparently, that much cash moving around finally caught someone's attention.
The Perp: Aleksandr Paskalov Convicted of: Wire fraud, enabled by phishingSentenced: Oct. 12, 2007 to 42 months in prison
Azizbek Mamadjanov's friend Aleksandr was his partner in crime. He was sentenced four months after Mamadjanov to prison for engaging in what was, essentially, a copycat fraud using phished credentials to transfer money from the bank accounts of victims into fake business banking accounts Paskalov set up. But where Mamadjanov only managed to get around US$80,000 using the scheme, Paskalov more than doubled his partner's success, netting about US$170,000 in proceeds.
Paskalov duplicated virtually the entire Mamadjanov operation, including the use of social security numbers of dead people to set up business bank accounts at five different Florida banks. Within a short period of performing a wire transfer from the victims' bank accounts to his own, he would then travel to several branches, withdrawing a portion of the transferred money at each one.
In an apparent attempt at cleverness, Paskalov withdrew money from the accounts in odd quantities. For example, on April 3, 2006, he went to five separate branches of Colonial Bank and had cashier's checks drawn in the amounts of US$3983.99, US$2992.88, US$3303.68, US$4992.03, and US$4406.68.
The subterfuge didn't work. Paskalov was caught and can reminisce with his friend in federal prison for the next two years.
The Perp: Jason Downey Convicted of: operating an IRC-based botnet that caused numerous distributed denial-of-service attacksSentenced: on Oct. 23, 2007 to 1 year in prison, followed by probation, restitution, and community service
Downey, the 24-year-old so-called Kentucky Botmaster, operated two IRC networks -- Rizon.net and Yotta-byte.net -- used by himself and other bot-herders as a command-and-control system for a network of bots used to engage in DDoS attacks against other IRC networks. Using the online pseudonym Nessun, he was accused of complicity in a series of attacks dating back to May 2004.
- 1
- 2
- 3
- 4
- < previous
- next >
ARN Member Login
When an IT disaster occurs, how handy it would be to push a button and start again as if nothing had happened.
Discover and learn more about CA XOSoft today.
F-Secure achieves excellent results in Internet security suite comparison 10 October, 2008 14:37:00
Lock It Up With Maxtor BlackArmour, Hardware Encrypted Storage Provides Government Grade Security For Consumers 10 October, 2008 09:04:00
M2M Connectivity announces the new Sierra Wireless MC8792V embedded module for 900 MHz 3G/HSPA networks 10 October, 2008 08:51:00
IOGEAR Gears Up in Australia 09 October, 2008 20:18:00
Symantec to Extend Online Services with Acquisition of MessageLabs 09 October, 2008 11:48:00
Understanding Email Marketing: A Guide for SMBs
Email marketing is often viewed as a marketers silver bullet. If used effectively, email campaigns will provide strong results for a limited spend each and every time. Download this white paper to discover how email marketing can work for you and your business.









