Top 10 Stories

The Anonymous campaign OpIcarus launched against the banking sector seems to be ramping up, with eight more financial institutions suffering DDoS attacks during the past few days, ever since the campaign was publicly announced. View full story ORIGINAL SOURCE: Softpedia

Identity thieves stole tax and salary data from big-three credit bureau Equifax Inc., according to a letter that grocery giant Kroger sent to all current and some former employees on Thursday. The nation’s largest grocery chain by revenue appears to be one of several Equifax customers that were similarly victimized this year. View full story ORIGINAL SOURCE: Brian Krebs

Tens of millions of credentials reportedly stolen from an adult dating website called Fling.com have been put up for sale on the dark web. Currently listed on an underground marketplace called The Real Deal the information reportedly contains email addresses, plain text passwords, usernames, IP addresses and date of birth records. Additionally, the compromised data includes sexual preferences, whether the account was a free or paid version and the gender of the user. View full story ORIGINAL...

Google has started notifying affected employees of a data breach that occurred when one of the managers of a third-party benefits vendor sent a file containing sensitive information about Google employees to the wrong person. View full story ORIGINAL SOURCE: Softpedia

For the past five years, a vulnerability in many Android phones has left users' text messages, call histories, and possibly other sensitive data open to snooping, security researchers said Thursday. The flaw, which is most severe in Android versions 4.3 and earlier, allows low-privileged apps to access sensitive data that's supposed to be off-limits, according to a blog post published by security firm FireEye. But instead, the data is available by invoking permissions that are already...

Pranksters have infiltrated the control system behind the infamous Locky ransomware and replaced the malware’s main payload with a dummy file. Locky normally spreads using malicious and disguised JavaScript inside email attachments supposedly containing an invoice or similar. Malicious messages are sent to prospective marks in spam runs. Those on Windows machines who open the malicious attachment are likely to become infected, a process that results in user files getting encrypted. If this happens it’s...

BlackHat Asia A world-first proof-of-concept worm - if unleashed - could spell disaster for the world’s critical infrastructure, including power utilities by making attacks exponentially more difficult to detect and stop. It is a stand-alone attack but The Register has confirmed a realistic stealthy end-to-end attack scenario can be produced by combining two independent research efforts. The programmable logic controller (PLC) worm is the brain child of German hackers Ralf Spenneberg and Maik Brüggeman of Steinfurt-based consultancy OpenSource...

ATM maker NCR Corp. says it is seeing a rapid rise in reports of what it calls “deep insert skimmers,” wafer-thin fraud devices made to be hidden inside of the card acceptance slot on a cash machine. KrebsOnSecurity’s All About Skimmers series has featured several stories about insert skimmers. But the ATM manufacturer said deep insert skimmers are different from typical insert skimmers because they are placed in various positions within the card reader transport, behind the shutter of a...

The number of Windows systems worldwide hit with malware infection attempts in the second half of last year jumped by nearly 6% over the previous year to 20%. Microsoft’s new Security Intelligence Report (SIR) published today shows vulnerability disclosure was up by more than 9% from June through December of 2015, with some 3,300 bugs reported. “More importantly, high severity vulnerability disclosures were up more than 40%,” says Tim Rains, director of security at Microsoft....

Several popular webmail providers are investigating a report that millions of their users' login details are being shared online by a hacker. Google Gmail, Yahoo Mail, Microsoft Hotmail and Mail.ru are among the services said to have been affected. The security firm that flagged the issue said that it believed many of the usernames and passwords involved had not been leaked before. View full story ORIGINAL SOURCE: BBC