Top 10 Stories

Hacking group Anonymous has announced a cyber-attack war against the Bank of England and New York Stock Exchange. The organisation - made up of international hackers - warned of a series of attacks against the world's central banks over the next month. In a new YouTube video - called Shut Down the Banks - it said its main targets would be the Bank of England and New York Stock Exchange. View full story ORIGINAL SOURCE:...

McAfee security researchers revealed today that they discovered dozens of Android apps infected with malware on Google's Play Store. Researchers say the apps were infected with the Android/Clicker.G malware and only targeted Russian-speaking users. Most of the apps never went above 5,000 downloads, and some of them provided users with a fully working interface, earning good reviews. View full story ORIGINAL SOURCE: Softpedia

In the coming week, Bangladesh's central bank chief will meet with the head of the Federal Reserve Bank of New York as well as a senior representative from Swift – the global provider of secure financial messaging services – in efforts to reclaim the $81m that was stolen by hackers in a cyber-heist in February. According to Reuters, two Bangladesh Bank officials claimed that the bank considers both the NY Fed and Swift to bear...

The next vendor to kill off the OpenSSH roaming bug announced in January is Juniper Networks. The bug's best bit, as we noted at the time, was that the roaming feature had been added as an experiment back in 2010 (in version 5.4), and was undocumented. The idea of roaming is to maintain an OpenSSH session if there was a connection interruption – which happens quite often in the mobile world, when for example a client...

THREE NEW CHANGES in federal court rules have vastly expanded law enforcement’s ability to hack into computers around the world. The changes, to a federal court procedure known as Rule 41, were announced last week by the Supreme Court. They would let magistrate judges routinely issue search warrants to hack into computers outside their jurisdiction. The changes would also let magistrates issue a single search warrant for numerous computers in multiple jurisdictions, saving law enforcement the...

A rogue advertiser abused the Taggify self-serve ad platform to inject malware-installing code into browsers visiting the websites of two US TV stations. It was a textbook malvertising attack: to infect victims' PCs, the dodgy ads used the Angler Exploit Kit, which is a grab bag of code that exploits weaknesses in Adobe Flash and browsers' JavaScript engines to install spyware and other software nasties on computers. View full story ORIGINAL SOURCE: The Register

Cyber criminals are increasingly designing attacks for specific countries to trick victims into downloading malware, according to research by SophosLabs. Analysis of data from millions of endpoints worldwide revealed a growing trend of crafting spam to deliver malware that uses vernacular, brands and payment methods for better cultural compatibility. View full story ORIGINAL SOURCE: Computer Weekly

Computer scientists have discovered vulnerabilities in the Samsung Smart Home automation system that allowed them to carry out a host of remote attacks, including digitally picking connected door locks from anywhere in the world. The attack, one of several proof-of-concept exploits devised by researchers from the University of Michigan, worked against Samsung's SmartThings, one of the leading Internet of Things (IoT) platforms for connecting electronic locks, thermostats, ovens, and security systems in homes. The researchers...

A water and electricity authority in the US State of Michigan has needed a week to recover from a ransomware attack that fortunately only hit its enterprise systems. Lansing's BWL – Board of Water & Light – first noticed the successful phishing attack on its corporate systems on April 25, and has had to keep systems including phone servers locked down since then. The company says customer data has not been stolen (only, as is...

The online hacktivist Anonymous recently relaunched operation OpIcarus directed towards banking sector in Europe and the United States — The first bank coming under the fire is the Bank of Greece who had their website under a series of distributed denial-of-service attacks (DDoS) forcing the servers to remain offline for more than 6 hours. Anonymous’ Operation OpIcarus was launched in January 2016 and restarted in March 2016. The hacktivists behind the operation believe banks and financial giants are...