CommunityDNS News Bits, May 29, 2009.

29May09

Provided by CommunityDNS, the information in this post consists of news items in the security-based Internet community.

Hiding secret messages in Internet traffic: a new how-to

Researchers have discovered a method by which hackers may surreptitiously pull data from a compromised system. Using the technique known as “steganography” hackers are able to hide information during data transmission by exploiting TCP design weaknesses, thus extracting information while being undetected by network operators.

Click here for more information.

Experts: Gumblar attack is alive, worse than Conficker

Previous News Bits have pointed out Gumblar’s frenetic growth as one of the most widespread hacks. Infecting websites and then taking advantage of vulnerabilities in a user’s installation of Adobe’s Acrobat Reader and Flash Player, Gumblar is worse than Conficker in that it spreads via a hole in Windows, through removable storage devices and network shares with weak passwords as well as disables security software and installs fake antivirus software. Gumblar also monitors web traffic and installs a data-theft Trojan that steals usernames and passwords from infected PCs. Also, once a Conficker infection is remediated there is no further spread of the worm. With Gumblar, however, it can use the FTP credentials it steals to compromise more web sites.

Click here for more information.

New Research Finds Over 80% of Domain Names Used by Phishers Are Legitimate Domains

Research has found that up to 81% of domain names used by phishers are legitimate domains that have been hacked. Of 30,454 names being observed for phishing, only 18.5% were registered by phishers.

Click here for more information.

Boucher Schedules ICANN Hearing

Rick Boucher, Chairman of the House Energy and Commerce Communications Subcommittee for the US Congress will hold a hearing on June 4 to examine the future of the US government’s relationship with ICANN.

Click here for more information.

US sets out cyber security plan

“Just as the US has failed to invest in its physical infrastructure so has it failed to invest in its digital infrastructure”, as cited by President Obama as he sets out on developing a national cyber security plan. Now treating America’s digital infrastructure as a strategic national asset, Obama will create a new office in the White House and appoint a cyber security coordinator personally selected by Obama to advise him on cyber-related matters.

Click here for more information.



Follow

Get every new post delivered to your Inbox.