Gangs infect 10,000 websites to steal users' bank details

[Up2Late]

Source: The Guardian

Gangs infect 10,000 websites to steal users' bank details

· 'Italian Job' is next stage in cyber identity crime
· Viruses planted on charity and tourism pages

Ed Pilkington in New York
Wednesday June 20, 2007
The Guardian

Hackers have launched an assault on websites in Italy and around the world dubbed the Italian Job in a move seen by internet security experts as the next step in the escalating problem of cyber crime.

Gangs presumed to be based in eastern Europe have probably infected more than 10,000 web pages on popular websites including travel agents, hotels, charities and government departments. Most of the sites are in Italy, though the attack has also spread to Spain and the US.

Using an attack tool kit available for £350 on the internet from Russia, the attackers implanted codes that download a "keylogger" onto the computer of anyone opening up those sites. The keylogger allows the hackers to monitor any activity on the infected machine - in effect to control the computer. That gives them access to any bank details, credit card information or passwords that are entered.

It is not known how many computers have been infected by the attacks, which are believed to have begun in the middle of last week. Security experts put the numbers at tens of thousands.

Read more: http://technology.guardian.co.uk/news/story/0,,2106982,00.html?gusrc=rss&feed=12

---

This could be the start of something very bad!

Update your Anti-Spyware programs now! And if you don't have a good Anti-Spyware program, GET ONE NOW!

I've used Spy Sweeper from Webroot for close to 3 years and it's great, probably the best:

<http://www.webroot.com/>

[EV_Ares]

1. I for one appreciate your posting of this info. I think it is important for

all of us to know of the dangers that constantly lurk in cyber space. Also, a good reminder to check your security to protect yourself and those of your friends who you email to, etc. Also, a reminder as you said to update all your security programs.

I use Norton Internet Security which I have been quite satisfied with.
On the Spy Ware, I use three, Spy Doctor a paid subscription and Super Anti Spy & Spy bot which are both free and good. It is my understanding it is good to have more than one to run so as to catch everything possible.

Make sure about having a key logger with your protection also. Believe Web root and know Spy Doctor and most have them now.

[Up2Late]

3. Yes, back ups are good. I, for example am suddenly having "Cookie Trouble" in Firefox...

...when trying to sign onto DU. Thankfully, I have (and am currently using) SeaMonkey as a back up.

Speaking of Norton Internet Security (I use that too, not all that happy with it), have you had any problems with it over the last few days? I keep getting alerted to run Live Update, so I do, but nothing changes, it keeps telling me I need to update my protection files. O.K., I've seen it up-date some of it's parts, but I still have that damn little red alert on my "Protection Center" icon.

Has this happened to you (over the last few days)?

[smirkymonkey]

4. I have been having cookie trouble for months in Firefox...

does that mean I am in trouble?

[Up2Late]

5. Nah, just no Cookies for you!

But seriously, you should try deleting any Cookies you don't really need and clear your internet cache and Temporary internet files too.

I would say delete All your Cookies as a last resort, but with this caution:

If you do that, make sure you have all the passwords and log on names for all the website you go to that require them (like at newspapers, YaHoo mail, Google Maps, etc.), because deleting all your Cookies, you will most likely lose all those auto log-ons.

But definitely, log off of DU, then search for and delete any Cookies for DU, your Temporary Internet files and Clear your Internet Cache.

Then when you come back to DU, request a new password and hopefully it will be fixed.

Also, before you do this, check your version of Firefox and update it if needed, the current version is ver.2.0.0.4 <http://en-us.www.mozilla.com/en-US/products/>

and SeaMonkey (the replacement for Mozilla, I think) is ver.1.1.2 <http://www.mozilla.org/projects/seamonkey/>

[smirkymonkey]

8. Thank you!

:hi:

[firefox_fan]

10. I had trouble too. So I ate them all. Problem solved.

[RedEarth]

2. Thaks for posting..............KR

[Commie Pinko Dirtbag]

6. I'd like to see them install a keylogger in my Linux machine.

Yeah, I'm being smug. B-)

[Systematic Chaos]

7. Someone, somewhere, knows how to code one I'm sure.

Be careful what you wish for. :shrug:

Nothing against Linux, mind you, other than that I can't play my favorite game with it (EverQuest 2).

[JerseygirlCT]

9. I've been getting one phishing attempt after another via my e-mail

lately.

Luckily, I know enough not to bite, but it's been this sudden, and huge increase.

[FloridaJudy]

11. Me too

All the phishing I've encountered purports to come from Yahoo addresses. I think those folks might have a problem.

[Dragonbreathp9d]

12. Why cant we get these guys to steal money from "Kenny Boy" and the like

and then redistibute that wealth to the workers who were screwed?