Windows Security Blunders Again
-
Disneyland Malware Team: It’s a Puny World After All [Ed: Microsoft Windows TCO]
A financial cybercrime group calling itself the Disneyland Team has been making liberal use of visually confusing phishing domains that spoof popular bank brands using Punycode, an Internet standard that allows web browsers to render domain names with non-Latin alphabets like Cyrillic.
[...]Holden said the Disneyland Team domains were made to help the group steal money from victims infected with a powerful strain of Microsoft Windows-based banking malware known as Gozi 2.0/Ursnif.
-
iTWire - Lumen APAC chief says firms should be upfront in acknowledging data breaches
Companies should acknowledge that they have suffered a data breach as soon as they can, the APAC managing director of a global technology firm says, adding that at the same time there would necessarily be some interval between discovery and making a public statement.
Francis Thangasamy, managing director of the Asia-Pacific operations of Lumen Technology, told iTWire during an interview in Melbourne on Tuesday that there would be a different communications process in different countries.
"I think another important [step] is first identifying what is the level of data that's been lost," he said. "So for that you need to do thorough forensics – a lot of organisations do not complete the full thorough forensics process and then realise that there is still a lot more data that can be compromised. Or it could be that there's there's still a backdoor in there."