Top 10 Stories

The Shadow Brokers announced yesterday they plan to cancel the auction for the supposed NSA hacking tools and convert the process into a crowdfunded sale. So instead of an auction that would have awarded the highest bidder access to all the hacking tools, the group is now offering the password to everyone who contributes to an end goal of 10,000 bitcoin ($6.3 million). This change of heart comes just two weeks after the group complained...

A whopping £13m was lost through cyber crime in Northern Ireland last year, police have revealed. Yet, almost a quarter of people are unaware of the risks they face online. A survey commissioned by the PSNI to mark Get Safe Online Day today found that 22% of people here said they had a limited understanding of cyber crime. However, the survey also revealed that 94% said they were somewhat, or very concerned, about their online...

Malware now targeting Australian users could be based on one of the world's worst banking trojans. Fidelis malware mangler Jason Reaves says the TrickBot malware has strong code similarities to the Dyre trojan, a menace that ripped through Western banks and businesses in the US, the UK, and Australia, inflicting tens of millions of dollars in damages through dozens of separate spam and phishing campaigns since June 2014. Dyre stole some US$5.5 million from budget...

The Obama administration is considering a major retaliatory cyber attack against Russia, NBC News reports. The move is in response to allegations of the country’s involvement in recent hacks against the Democratic National Committee earlier this summer. NBC reported on Friday that the CIA is preparing for an operation "designed to harass and ‘embarrass’" the country’s leadership, including Russian President Vladimir Putin. According to the network's sources, the agency has "reams of documents that could...

British banks are failing to report the full extent of cyber-attacks on their infrastructure for fear of punishment and bad publicity, according to a new report. Cyber security experts and banking executives told Reuters that the banks are taking advantage of a grey area in reporting, with current structures not set up to strictly mandate notification of every incident. View full story ORIGINAL SOURCE: Infosecurity Magazome

One of the world's most prolific Android malware instances is still the most prevalent piece of malware more than two years after it first emerged. The capable trojan known as Ghost Push infects Android up to version five, aka Lollipop, still employed by about 57 per cent of all users. Ghost Push won't run on Android version six, Marshmallow, and the recently released version seven Nougat which together account for about 10 per cent of...

This week, the US government-backed ICS-CERT warned that the troubling new generation of computer attacks is powered by malware that can infect cellular modems used to connect automotive and industrial equipment to the Internet. An advisory published Wednesday listed five industrial control devices manufactured by Sierra Wireless that are vulnerable to malware known as Mirai when default passwords that ship with the equipment aren't changed on the gateways. The advisory referenced a separate notice from...

We've all had them. Those emails you read with a growing sense of dread which tell you to change the password you use on this account, that social network or one of the many other online services you use. Those emails are common given that almost one billion login credentials have been stolen and shared online in the last year. Yahoo, MySpace, LinkedIn, Dropbox and Tumblr, have all been hit and the list goes on...

The US Air Force is probing a failure in a classified computer network at Creech Air Force Base – the command centre for US targeted drone operations – after "critical systems" were taken offline by a mysterious outage in early September, documents show. The computer network in question, called SIPRNet, is a secretive version of the internet used by the US Department of Defense and the Department of State to transmit classified information including email, video and intelligence reports. According...

Scores of New Zealand online retail sites have been hacked and are infected by credit card skimming software that can steal customers' payment information, a security researcher has found. The stores run vulnerable, unpatched versions of the Magento shopping cart software. Unknown criminals are using security holes in the vulnerable systems and inject malicious code written in Javascript, according to Willem de Groot, who runs a Magento hosting company in the Netherlands. As unsuspecting customers go to pay...