Author: admini

The difference between the first and final outages reflect the fact that phishing attacks will sometimes fluctuate up & down on compromised hosts where the fraudster may still have access to the system and be able to replace his content after the site owner removes it.
Phishing attacks NetCraft dealt with in the UK & Ireland have a shorter median lifetime than those hosted in the US, whilst phishing attacks we have taken down in Iran have a median lifetime of just under 30 hours, around five times longer than Russia.

In addition to providing fast takedown of the fraudulent content, the countermeasures service is also linked to our phishing site feed, which is licensed by all of the main web browsers, together with many of the largest anti-virus and content filtering products, firewall and network appliance vendors, mail providers, registrars, hosting companies and ISPs.

Link: http://software.einnews.com/article/133794636/vTqnhs5_BDS4YwpM?n=2

Key features of RSA Archer Business Continuity Management and Operations include:

* Risk Register – Helps users identify, evaluate and mitigate risks that may impact their organization, locations, processes or partners.
* Business Impact Analysis (BIA) – Gives users the ability to evaluate the criticality of their processes and determine recovery objectives (RTO and RPO) that are coordinated across supporting infrastructure.
* Centrally managed business continuity and disaster recovery plans – Allows users to develop detailed recovery plans for business processes or IT assets, utilizing automated workflow for plan testing, activation and approval.
* Enhanced crisis management and response – Helps enable users to report and manage crisis events, send emergency notifications to communicate crisis information to appropriate personnel, and activate business continuity or disaster recovery plans to recover disrupted business operations, facilities or IT infrastructure.
* Tighter integration with other RSA Archer GRC components – Lets users relate business continuity management components to organizational units (e.g., divisions, business units) and infrastructure (e.g., processes, facilities, IT applications or vital records) for visibility, accountability and reporting.
Additionally, RSA has also introduced the availability of the RSA Archer BCM Mobile App. As a key component in a GRC mobile strategy, the app is designed to augment hard copy plans and enable rapid response during a crisis situation by offering visibility into business continuity or disaster recovery plans and associated strategies, tasks, calling trees and requirements from most locations. In the event that a data center is not available, the RSA Archer BCM Mobile App is engineered to provide high availability, allowing the end user offline access to resources from the time the app was last synced. Additional capabilities including a Mobile App Toolkit built to enable customers to create and design custom applications including questionnaires and assessments will also be supported in a future release.

Link: http://www.continuitycentral.com/news06623.html

Paunescu, a Romanian national based in Bucharest, operated a so-called “bullet-proof” hosting service using computers housed in Romania, the United States and other countries. The complaint says Paunescu provided Kuzmin and others with servers and IP addresses that allowed them to use and distribute Gozi and other banking Trojans such, as Zeus and SpyEye, with relative anonymity.

The court papers also allege Paunescu’s rented servers hosted the tools used to launch distributed denial of service attacks, including several that took advantage of the infamous Black Energy botnet. The server were often used as command and control servers for botnets and as proxy systems that let attackers to hide their identities, the complaint said.

Calovskis, a Latvian national, was indicted on charges of developing a web injection code that was used to alter how banking websites appeared on infected computers. The software fooled victims into providing key security information such as their mother’s social security number and mother’s maiden name when they attempted to log into their bank’s website.

http://www.computerworld.com/s/article/9236055/Three_indicted_for_making_spreading_Gozi_Trojan?source=CTWNLE_nlt_pm_2013-01-23

Paunescu, a Romanian national based in Bucharest, operated a so-called “bullet-proof” hosting service using computers housed in Romania, the United States and other countries. The complaint says Paunescu provided Kuzmin and others with servers and IP addresses that allowed them to use and distribute Gozi and other banking Trojans such, as Zeus and SpyEye, with relative anonymity.

The court papers also allege Paunescu’s rented servers hosted the tools used to launch distributed denial of service attacks, including several that took advantage of the infamous Black Energy botnet. The server were often used as command and control servers for botnets and as proxy systems that let attackers to hide their identities, the complaint said.

Calovskis, a Latvian national, was indicted on charges of developing a web injection code that was used to alter how banking websites appeared on infected computers. The software fooled victims into providing key security information such as their mother’s social security number and mother’s maiden name when they attempted to log into their bank’s website.

http://www.computerworld.com/s/article/9236055/Three_indicted_for_making_spreading_Gozi_Trojan?source=CTWNLE_nlt_pm_2013-01-23