Vandalism and hacking
Published by Evil Bee Saturday, 26 July 2008 17:13
Vandals often use hacking techniques to deface a website or destroy data and files, but there are also those who just want to steal resources (make use of other peoples’ servers without their knowledge or permission) or to cover their tracks by stealthily making use of hardware owned by legitimate businesses to carry out processing for illegal operations or to relay spam and viruses to others.
The best defence against the majority of these types of attacks comes through installing and maintaining the latest versions of anti-virus and firewall software. As new threats are identified, updates are issued which can identify and neutralise most harmful operations before they have a chance to do any damage. Having a server fully managed by a reputable hosting company ensures that these defences are always in place.
Gmail, PayPal and Ebay embrace DomainKeys to fight phishing emails
Published by Evil Bee Friday, 11 July 2008 10:37
Brad Taylor, Google’s Gmail Spam Czar, has just posted details on the ongoing cooperation with PayPal and Ebay, two of the most targeted brands in phishing emails, the effect of which is rejecting compared to flagging as spam each and every email pretending to be coming from paypal.com and ebay.com as well as from their international domain extensions. It’s a win-win-win move for users, and the companies themselves which are now digitally signing all of their emails, making phishing emails spoofing their origin easier to detect :
Read more: Gmail, PayPal and Ebay embrace DomainKeys to fight phishing emails
What to do when you've been hacked? - part2
Published by Evil Bee Thursday, 12 July 2007 15:17
After you have finished with the IMMEDIATE part, then you can move on to the investigation and restoration part...
2. SECONDARY ACTIONS
A. Review application inventory
What was on the site? Content management system, image gallery, forum... There should be a sheet of documentation somewhere that tells which version of each is installed along with the location. Sadly, most companies to not have this. Most developers/installers don't provide it unless it's specifically requested.
Application auditing and ethical hacking
Published by Evil Bee Friday, 22 June 2007 15:03
How likely is it that someone would try to hack into your company data? It's been estimated that 95% of companies experience breach attempts. We believe that estimate is low.
We understand the need for code reviews and security testing because many of our applications manipulate data that must be kept secure. To our select clients, we offer code auditing and penetration testing to help implement comprehensive security programs to protect private data.
What to do when you've been hacked?
Published by Evil Bee Tuesday, 22 May 2007 15:13
We've been hacked more than once. We've been called hundreds of times by others who have experienced the same. If you have prepared well, being hacked can be a 20 minute chore to fix. If you've not well prepared, then it can be costly, painfully embarrassing and potentially career-ending.
There are three levels of response, below is a summary of the steps within each. What's critical in any secruity breach is following a standard process and documenting every step along the way. When you're all done with a hacking fire drill, it's common that someone will want to know why it happended, what damage was done and how it will not happen again.
An Overview of Phishing
Published by Evil Bee Tuesday, 09 January 2007 00:00
Phishing continues to be one of the most significant security threats facing Internet users. During 2007, scammers distributed millions of phishing scam emails that targeted many different entities. Phishing attacks are sure to continue in 2008 and scammers will use such attacks to steal money and identities from many new victims around the world. Armed with a little knowledge about how phishing scams work, however, you can ensure that you do not become one of these victims.
Home computers targeted by hackers 50 times a day
Published by Evil Bee Saturday, 22 July 2006 15:32
Home PCs could be under attack from hackers over 50 times a night, suggests a BBC News Website experiment.
The BBC News Website team set up a honeypot' PC – a computer that looks like a normal PC online but records everything that's done to it – in order to find out the dangers facing web users.
Every single time the 'honeypot' was put online it was attacked. In one of the busiest nights of malicious online activity, the computer was attacked 53 times:
Read more: Home computers targeted by hackers 50 times a day
