Home Messages Index
[Date Prev][Date Next][Thread Prev][Thread Next]
Author IndexDate IndexThread Index

Re: hackers plant backdoor on bank Website ..

  • Subject: Re: hackers plant backdoor on bank Website ..
  • From: Roy Schestowitz <newsgroups@xxxxxxxxxxxxxxx>
  • Date: Sat, 18 Nov 2006 19:39:28 +0000
  • Newsgroups: comp.os.linux.advocacy
  • Organization: schestowitz.com / Netscape
  • References: <iskul2hvjffgqjf7i8cebf80tuin0t1bor@4ax.com> <1k2434-tnj.ln1@ellandroad.demon.co.uk>
  • Reply-to: newsgroups@xxxxxxxxxxxxxxx
  • User-agent: KNode/0.7.2
__/ [ Mark Kent ] on Saturday 18 November 2006 19:13 \__

> begin  oe_protect.scr
> Doug Mentohl <doug_mentohl@xxxxxxxxxxxxx> espoused:
>> "hackers ..planted a backdoor virus program on the Website of China
>> Unionpay, the country's only national electronic payment network
>> operator, that may result in customer information being leaked"
>> 
>> "The backdoor program, Backdoor.BlackHole.2005.a, is capable of
>> hijacking customer's computers when they visit the Website"
>> 
>> http://english.people.com.cn/200611/18/eng20061118_322836.html
>> 
>> Windows 2000          Microsoft-IIS/5.0       18-Nov-2006
>> 
>> Red-Hat/Linux        Apache/1.3.19           28-May-2002
>> 
>> http://uptime.netcraft.com/up/graph?site=www.chinaunionpay.com
>> 
>> excuses fuddie ..
> 
> Oh, what stupid, stupid people would swap out LAMP for Windows/IIS -
> particularly where you need security.  This is an error of such enormous
> proportion that heads should role.  I mean roll.

I could not agree more. Here's my bank.

http://toolbar.netcraft.com/site_report?url=https://www.nwolb.com

Several of these are Windows 2000!!! 2 "critical" exploits in the wild.
Didn't they patch 5 "critical" flaws on Tuesday?

Royal Bank of Scotland  155.136.72.107  Windows Server 2003     Microsoft-IIS/6.0       
3-Sep-2006
Royal Bank of Scotland  155.136.72.107  Windows Server 2003     Microsoft-IIS/6.0
29-Aug-2006
Royal Bank of Scotland  155.136.72.107  unknown Microsoft-IIS/6.0       16-Aug-2006
Royal Bank of Scotland  155.136.72.107  Windows Server 2003     Microsoft-IIS/6.0
4-Jun-2006
Royal Bank of Scotland  155.136.72.107  Windows Server 2003     Microsoft-IIS/6.0
7-Dec-2005
Royal Bank of Scotland  155.136.72.30   Windows Server 2003     Microsoft-IIS/6.0
7-Sep-2005
Royal Bank of Scotland  155.136.72.30   Windows 2000    Microsoft-IIS/5.0
8-May-2004
Royal Bank of Scotland  155.136.72.30   Windows 2000    Microsoft-IIS/5.0
18-May-2002
Royal Bank of Scotland  194.202.168.220 Windows 2000    Microsoft-IIS/5.0
18-Jul-2001
Natwest Online  62.172.189.210  OS/390  IBM HTTP Server/V5R1M0  21-Fe

If money goes missing, it's /my/ time that will be spent chasing it. I also
need to keep track of the balance and inform others, just in case. To make
matters worse, I imagine that interest rates and commission (among other
factor) will be negatively affected to account for extra security staff,
software licensed (Ballmer's profit), insurance and compensation for
damages. Also see:

One in ten online shoppers faces Yuletide attack 

,----[ Quote ]
| Big insecurity chief, Micheal Greene, from PC Tools reckons that one in
| ten online shoppers are going to face an attack from Sypware, Adware,
| Aalware or Steal-your-indenity-ware. With online shopping reaching
| $10 billion during last years holiday season, this is prime time for
| phishers and hackers to be plying their trade.
| 
| Greene continues by saying that many people simply aren't aware that
| online shopping can cause problems exposing them to indentity theft
| and infection of their PC's. 
`----

http://www.theinquirer.net/default.aspx?article=35674

Pervy hacker gets ten years 

,----[ Quote ]
| Thirty-six year-old Adrian Ringland of Ilkeston in Derbyshire pleaded
| guilty to forcing schoolgirls to send him explicit pictures after
| having infected their computers with a Trojan horse. The man posed
| as a teen in chatrooms and gained the trust of the girls, before
| planting malicious software onto their PCs. He masked the Trojan
| as a picture of himself, but once opened, he had full access to
| their computers and used the Trojan to blackmail the teens into
| sending explicit pictures.
| 
| [...]
| 
| Security folks over at Sophos are warning that it's only a matter
| of time before this happens again - "These children will not be the
| last to be abused via the internet using spyware," senior
| technology consultant for Sophos Graham Cluley said.
`----

http://www.theinquirer.net/default.aspx?article=35666


T'is the season to be ripped off...

,----[ Quote ]
| Online fraudsters are gearing up for the massive increase in consumer
| online shopping due to take place over the festive season. One in 10
| holiday shoppers can expect some form of spyware, adware, or other
| internet attack as they conduct transactions on the web, according
| to net security firm PC Tools.
`----

http://www.theregister.co.uk/2006/11/13/xmas_safe_shopping/

Needless to mention, there's also the NHS...

,----[ failed NHS project cost $12 billion ]
| The players under the microscope .. Accenture, Microsoft, iSoft
| 
| http://www.baselinemag.com/article2/0,1540,2058194,00.asp
| 
| 
| "Microsoft .. is working particularly closely with iSOFT on the
| development of Lorenzo, the core clinical solution .. being built on
| Microsoft's .Net web services technology"
| 
| http://www.e-health-insider.com/news/item.cfm?ID=700
`----

There's the BBC...

BBC Looks To Microsoft For Web 2.0

,----[ Quote ]
| However, you don't sign deals or commitments if you're a quasi-autonomous
| Public Corporation operating as a public service broadcaster, as the BBC
| is. BBC Director General Mark Thompson met Microsoft Chairman Bill Gates
| in Seattle on Wednesday to sign the non-exclusive memorandum of
| understanding and discuss the BBC's digital strategy.
`----

http://www.forbes.com/2006/09/28/bbc-microsoft-internet-cx_cn_0928bbc.html?partner=yahootix

The list goes on and on, I assure you...

Best wishes,

Roy

-- 
Roy S. Schestowitz      |    "Turn up the jukebox and tell me a lie"
http://Schestowitz.com  | Free as in Free Beer ¦  PGP-Key: 0x74572E8E
Load average (/proc/loadavg): 0.49 0.77 0.95 2/148 27062
      http://iuron.com - semantic search engine project initiative

[Date Prev][Date Next][Thread Prev][Thread Next]
Author IndexDate IndexThread Index