Large Zeus Botnet Used For Financial Fraud 68
An anonymous reader writes "A large Zeus version 2 botnet is being used to conduct financial fraud in the UK and is operated from Eastern Europe. The botnet appears to be controlling more than 100,000 infected computers. The criminals have been harvesting all manner of potentially lucrative and revenue-producing credentials — including online account IDs plus login information to banks, credit and debit card numbers, account types plus balances, bank statements, browser cookies, client side certificates, login information for email accounts and social networks, and even FTP passwords."
Always wondering... (Score:3, Interesting)
Considering all these weird captchas on the login pages, I don't think it's possible to check every collected bank account automatically, and doing that manually would be too tiring.
Re:That's awesome, but... (Score:3, Interesting)
On a side note, it would be interesting to use x'; DROP TABLE Passwords; -- as my actual password for email, banking etc, and see if A) my password is hashed for that site, and B) if it destroys their databases
Re:Oh no (Score:3, Interesting)
How dare they capture my unencrypted logins?!?! Seriously, its a shame SFTP or FTPS isn't more supported, and by 'more supported' I mean supported by IE and Firefox. I hate how adding encryption to FTP is suddenly "Whoa, whoa, whoa, we only provide basic support on browsers." Funny how they don't say the same thing about HTTPS.
Re:Which OS? (Score:3, Interesting)
Probably. Not that it is imposible for Mac OSX and Linux to be compromised. But right now the numbers show that almost all bot net activity comes from compromised Windows PC's.
The average user wants to be able to use a computer like they use a car, or a door, or a toaster, or a toilet. No need for technical training, no cryptic messages, etc. The problem is a computer is not that kind of device. It is more like an aircraft. If you don't gain some level of technial expertise, it is easy to "crash and burn" the system.
It is a crime to put John Q Public on the internet with a Windows PC. Watching it is like watchin a baby seal be clubbed to death. They are helpless and have no clue the danger they are in.
If the government, or banks or anyone with a vested interest in the web being secure (let alone spam free) was serious. Every user would be given a liveCD of some Linux to run on their computer to browse the internet.
Re:I predicted this (Score:1, Interesting)
Should it matter? Dell and Best Buy didn't educate them about the security hazards of using Microsoft Windows(R).
Is it BMW's (and their dealers) responsibility to tell the buyer of any operability issues inherent in the car before purchase?
Yes.