Hackers Breach Russian Bank and Steal $1 Million Due to Outdated Router
"The router had tunnels that allowed the attackers to gain direct access to the bank’s local network," Group-IB experts said. "This technique is a characteristic of MoneyTaker. This scheme has already been used by this group at least three times while attacking banks with regional branch networks."
On July 3, MoneyTaker used this system to transfer funds from PIR Bank's account at the Bank of Russia to 17 accounts they created in advance. Moments after the stolen funds landed in these accounts, money mules withdrew it from ATMs across Russia.
A $225 GPS spoofer can send sat-nav-guided vehicles into oncoming traffic
A new proof-of-concept attack demonstrates how hackers could inconspicuously steer a targeted automobile to the wrong destination or, worse, endanger passengers by sending them down the wrong way of a one-way road.
The most effective is to give civilian GPS signals the same type of encryption military GPS has used for decades. Unfortunately, that would do nothing to protect people using the massive number of GPS devices already in use. Another countermeasure is to develop trusted ground infrastructure to help GPS devices verify their location. This, too, is at best a long-term solution because of the cost and constraints in government policies.
What's in a name? For Cambridge Analytica, about a quid apparently
The firms – Cambridge Analytica, SCL Elections, SCL Group, SCL Commercial, SCL Social and SCL Analytics – were all too heavily associated with the furore surrounding an app that sucked up information on 87 million Facebook users to continue operating. Similarly, Cambridge Analytica US and SCL US both filed for bankruptcy.
The administrators said that the initial plan was to try and sell off the firm, sending an "email taster" to about 18,000 prospective buyers, along with marketing pushes on social media. Sales details were sent out to 13 parties and four offers were received.
It walks, it talks, it falls over a bit. Windows 10 is three years old
Flushed with success having "fixed" the disastrous Windows Vista with the jumped-up service pack of Windows 7 in 2009, Windows boss Steven Sinofsky had a relatively free hand with the next version of the platform.
Coming six years after the release of the beloved Windows 7, Windows 10 had a lot to live up to.
From now on changes would be incremental, regular and a lot more frequent. Whether users wanted them or not.
Retiring worn-out wind turbines could cost billions that nobody has
The life span of a wind turbine, power companies say, is between 20 and 25 years. But in Europe, with a much longer history of wind power generation, the life of a turbine appears to be somewhat less.
In Texas, there are approximately 12,000 turbines operational in the state. Decommissioning these turbines could cost as much as $2.3 billion.
"The blades are composite, those are not recyclable, those can't be sold," Linowes said. "The landfills are going to be filled with blades in a matter of no time."
Researchers find that filters don’t prevent porn
In a paper entitled Internet Filtering and Adolescent Exposure to Online Sexual Material, Oxford Internet Institute researchers Victoria Nash and Andrew Przybylski found that Internet filters rarely work to keep adolescents away from online porn.
This research follows the controversial news that the UK government was exploring a country-wide porn filter, a product that will most likely fail. The UK would join countries around the world who filter the public Internet for religious or political reasons.
Compromised JavaScript Package Caught Stealing npm Credentials
A hacker has gained access to a developer's npm account and injected malicious code into a popular JavaScript library, code that was designed to steal the npm credentials of users who utilize the poisoned package inside their projects.
"We determined that access tokens for approximately 4,500 accounts could have been obtained before we acted to close this vulnerability. However, we have not found evidence that any tokens were actually obtained or used to access any npmjs.com account during this window," Silverio said.
This is the third incident in the past year when a hacker has inserted malicious code in an npm package.
Mastercard goes TITSUP in US, UK: There are some things money can't buy – like uptime
"Couldn’t pay for petrol. It’s a disgrace you can’t trust cards to pay when you need them to work. Doesn’t say much for the resilience of digital payments."
Mastercard customers have been protesting loudly on Twitter that their pieces of plastic are certainly not fantastic.
Last month, Visa suffered a major outage in Europe at a particularly unfortunate time. Millions of Friday night payments were unable to be completed, and settling the bar tab after the traditional Friday night booze up proved problematic.
iPhone crashing bug likely caused by code added to appease Chinese gov’t
Wardle, who is now a macOS and iOS security expert at Digital Security, said he was perplexed when a friend first reported her fully patched, non-jailbroken device crashed every time she typed Taiwan or received a message with a Taiwanese flag.
He eventually found that the crashes were being caused by code that classified messages based on emojis they contained. He also noticed that the error seemed to be triggered when iOS had country codes that included China or language settings including Chinese (his friend’s phone specified the region as the US and the language as English, followed by Chinese.)
PayPal told customer her death breached its rules
PayPal wrote to a woman who had died of cancer saying her death had breached its rules and that it might take legal action as a consequence.
It said that Mrs Durdle owed the company about £3,200 and went on to say: "You are in breach of condition 15.4(c) of your agreement with PayPal Credit as we have received notice that you are deceased... this breach is not capable of remedy."