Top 10 Stories

Aerospace parts manufacturer FACC says that its financial accounting department has been attacked by hackers, who managed to steal approximately €50 million ($54.5 million) from its coffers. Perhaps surprisingly, the company, whose largest shareholder is a Chinese aviation corporation, appears not to have been hacked for its data or intellectual property, but instead for cold hard cash. View full story ORIGINAL SOURCE: Tripwire.com

In a tale with enough twists to satisfy even a Sherlock Holmes fan, Malwarebytes discovered a tech support scam run by a member of Symantec's partner program that not only sells its victims unnecessary tech support services, but also legitimate Norton products. Jerome Segura, a senior security researcher for Malwarebytes, notified Symantec earlier this month that one of the security company's certified resellers, Silurian Tech Support, was also running a scam using a fake Norton...

A fresh wave of malware attacks targeting Ukraine has been uncovered, as the world looks on wondering who is carrying out these persistent attacks. Using a new malware, following the BlackEnergy attacks reported recently, a new campaign has been underway that is threatening the Ukrainian electrcity distribution network, leading to fears that thousands may be left without power as a result of the strike.   View full story ORIGINAL SOURCE: Infosecurity Magazine (Reed Exhibitions) //...

The researcher who discovered that the UK government's phone encryption standard has a huge backdoor installed has made another discovery: GCHQ's rejection of a better encryption standard because it didn't allow for undetectable spying. Dr Steven Murdoch has updated his original post on the MIKEY-SAKKE standard, developed by UK listening post GCHQ, to include a document from the 3GPP standardization group that was responsible for the 3G mobile phone standard and which also developed the...

A security researcher has said software developed by the UK intelligence agency GCHQ contains weaknesses making it possible to eavesdrop on phone calls. The security protocol is used to encrypt Voice Over Internet Protocol (Voip) calls. In a blog, University College London researcher Steven Murdoch described vulnerabilities in how such conversations were encrypted. View full story ORIGINAL SOURCE: BBC

Asacub, a financially motivated malware campaign, has been discovered by Kaspersky Lab's Anti-Malware Research bods to be targeting Android users. The campaign has been ongoing for the last 6 month and Kaspersky has spotted more than 6,500 instances of attempted infection since the start of 2016. There was no previous detection of the campaign prior to January.   View full story ORIGINAL SOURCE: Infosecurity Magazine (Reed Exhibitions) // Tara Seals

Attackers behind the Dridex Trojan have narrowed their sights on banks based in the United Kingdom frequented by high-value business accounts, researchers claim. When a new version of the Trojan was released two weeks ago, it was promptly followed by a series of infection campaigns that focused on U.K. users. View full story ORIGINAL SOURCE: Threatpost

The likes of Forbes and Yahoo Mail are reportedly trying to block access to users who are running ad blockers. But it's an argument that is losing ground as more and more internet users find their computers are compromised by malvertising. According to security firm MalwareBytes, the latest high profile site to be found spreading malware to its visitors via dodgy ads is MSN. View full story ORIGINAL SOURCE: Graham Cluley

When workers at infrastructure facilities post selfies that show the operations’ inner workings, they’re handing vital intelligence to attackers, one expert has warned. Think back to the photos of Prince William when he was an RAF Search and Rescue helicopter pilot: as you might recall, there were login details written on a piece of paper that was pasted over his head for all to see. View full story ORIGINAL SOURCE: Naked Security

A Ukrainian man who tried to frame me for heroin possession has pleaded guilty to multiple cybercrime charges in U.S. federal court, including credit card theft and hacking into more than 13,000 computers. Sergey Vovnenko, 29, entered a guilty plea in Newark, New Jersey to charges of aggravated identity theft and conspiracy to commit wire fraud. Prosecutors said Vovnenko operated a network of more than 13,000 hacked computers, using them to harvest credit card numbers...