Mastermind Behind Gozi Bank Malware Charged

The mastermind who designed and distributed the Gozi malware — infecting more than a million computers worldwide in order to steal banking and other credentials from tens of thousands of victims — has been charged in New York along with two co-conspirators, according to documents unsealed Wednesday.

Image source: Article

Authorities say the virus infected at least 40,000 computers in the U.S., including more than 160 computers belonging to NASA, and cost victims tens of millions of dollars in losses.

According to court documents, one command-and-control server for the Gozi virus stored more than 3,000 usernames of banking victims. In one case in Feb. 2012, a victim lost more than $200,000 siphoned from his bank account.

What's next? Read the full story to find out.

The cloud will impact the way security is consumed

Increased adoption of cloud-based computing is expected to impact the way security is consumed as well as how key government agencies will prioritize security of public cloud infrastructures, according to Gartner.

Image source: Article

The growing importance of public clouds, along with the ever-persistent threat on private and public sectors' infrastructures, is expected to result in the U.S. government declaring them a critical national infrastructure.

Growth rates for cloud-based security services are set to overtake those of traditional on-premises. Is your CU part of this statistic?

Android malware spreads through compromised legitimate Web sites

Over the past 24 hours, our sensor networks picked up an interesting website infection affecting a popular Bulgarian website for branded watches, which ultimately redirects and downloads premium rate SMS Android malware on the visiting user devices.

Image source: Article

The affected Bulgarian website is only the tip of the iceberg, based on the diversified portfolio of malicious domains known to have been launched by the same party that launched the original campaign.

The first variation of the campaign attempts to trick Russian-speaking users into installing a fake version of Adobe’s Flash Player, followed by a second campaign using a fake Android browser as a social engineering theme, and a third campaign which is attempting to trick mobile users into thinking that it’s a new version of Google Play.

Read more about this attack.

Good Technology’s 2nd Annual State of BYOD Report

Last year, BYOD was on the rise, this year, it’s in full force. Since the release of Good’s first BYOD report in December 2011, we have seen an substantial increase of companies around the globe are embracing BYOD programs to help reduce costs and bolster employee productivity.

Image source: Article

For the 2012 State of BYOD Report, Good Technology surveyed the same set of customers to see how BYOD perceptions and program support practices may have shifted in the last year.

Good’s report specially targets its most organizationally complex, multi-national, and highly-regulated customers in order to better understand how these types of companies were adopting BYOD and to share their best practices.

Where does your CU sit with respect to BYOD?

Security vendors failing to tackle mobile malware, say CISOs

Smaller point solutions are dominating the market, as traditional vendors get left behind.

Image source: Flickr/greyweed

Malware is still the biggest threat to mobile security, but most mobile device management (MDM) strategies tend to focus on securing the physical device in case of loss of theft, rather than protecting from cyber threats.

Although mobile malware still only represents a tiny fraction of the total amount of malware in the world today, it is growing exponentially.

See why MDM alone is not enough.

Security group raises BYOD concerns

The top technologies identified to mitigate risks include encryption, the use of virtual private networks, and remote lock and wipe functionality.

Image source: Article

But, who wants to setup an additional VPN for mobile devices?

GOOD technology offers mobile device management and secure application containers without poking holes in the DMZ.

What is your CU's BYOU strategy to mitigate risk?

90% of passwords can be cracked in seconds

More than 90% of user-generated passwords can be made vulnerable to hacking in a matter of seconds, according to new research from Deloitte.

Image source: Article

The problem, researchers said, is that everything that we thought to be true must be reconsidered given advances in technology.

Passwords containing at least eight characters, one number, mixed-case letters and non-alphanumeric symbols used to be considered robust.

What is your CU's password policy?

Yankee Group on Mobile Enterprise Apps

Yankee Group Principal Analyst Chris Marsh comments: “We have, for a good while now, been pointing toward the upcoming goldrush in enterprise mobile applications as companies realize more and more the need and the opportunity for strategic gain in mobilizing existing and reinventing new processes for a mobile age. As an example our surveys show that over the past year the proportion of companies deploying mobile CRM has doubled.

Image source: Article

These application types developed off of the Good Dynamics platform are good exemplars of low-hanging fruit for enterprises but the news here though is less about these specific applications and more about Good marking its move away from a pure-play mobile device management (MDM) vendor.

Has your CU moved beyond pure MDM?

There's no magic pill for security

Too often, New Year's resolutions to get into better shape are derailed because of a lack of realistic planning. The same thing happens in the security sphere.

Image source: Flickr

Real security only comes with a lifestyle change, serious commitment and determination. It requires sweat and pain at times. But the results can be worth all that effort.

Be prepared for the hard work of getting into security shape. Just as there are no magic diet pills, true security doesn't come with buying a product, even if it's from a reputable vendor.

Is your CU prepared?

Banks seek NSA help amid attacks on their computer systems

Major U.S. banks have turned to the National Security Agency for help protecting their computer systems after a barrage of assaults that have disrupted their Web sites.

Image source: Article

The attacks on the sites, which started about a year ago but intensified in September, have grown increasingly sophisticated, officials said.

The NSA, the world’s largest electronic spying agency, has been asked to provide technical assistance to help banks further assess their systems and to better understand the attackers’ tactics.

Will your CU need to call in the NSA? Let's hope not.

Fake LinkedIn notifications lead to phishing and malware

LinkedIn users are once again targeted with a massive and widespread spam campaign that takes the form of a notification about a supposedly received message from a potential new connection.

Image source: Article

Unfortunately, the offered links - although legitimate-looking - take users to compromised sites that either ask them to share private and personal data, or serve them with a variety of malware that steals information and hijacks users’ address book to spam their contacts.

These compromised sites are often located on US, UK, Russian or Italian domains.

Read the full article to learn more.

Under the Hood of the Cyber Attack on U.S. Banks

You are probably aware of a wave of DDoS attacks that recently hit several major U.S. banks. Izz ad-Din al-Qassam, a hacker group that claimed responsibility for these attacks, declaring them to be a retaliation for an anti-Islam video that mocked the Prophet Muhammad and a part an on-going “Operation Ababil”.

Image source: Article

So far the attack caused several major disruptions in online and mobile banking services.

Izz ad-Din al-Qassam assured that the cyber-attacks will continue, saying that "from now on, none of the U.S. banks will be safe from our attacks."

Is your CU prepared? See how the attack works to learn more.

CFR Watering Hole Attack

On December 27, we received reports that the Council on Foreign Relations (CFR) website was compromised and hosting malicious content.

Image source: Flickr/Chris Capehart

It was later confirmed that the CFR website was hosting the malicious content as early as Friday, December 21—right before a major U.S. holiday.

The malicious content hosted on the website does appear to use Adobe Flash to generate a heap spray attack against Internet Explorer version 8.0 (fully patched), which was the source of the zero-day vulnerability.

What can your CU do to avoid falling prey to this type of attack? Read the blog to find out.

Playing chess with APTs

During a briefing from the top security analyst at one of the Washington-area cyber centers, I got the idea that resisting targeted attacks from sophisticated adversaries (so-called advanced persistent threats, or APTs) is a bit like playing chess at the grand master level.

Image source: Flickr/Frank Black Noir

Security efforts disproportionately emphasize endpoint anti-malware. But users, desktops and devices are only the pawns on the board (who, unfortunately often hold the crown jewels – your data).

Sophisticated attackers adeptly perform the necessary intelligence-gathering to find just the right social vulnerabilities for the person of interest and the right technical vulnerabilities for the device. Once exposed, most useful devices are easily compromised by targeted malware exploits riding on the back of spear phishing or similar attacks.

Is your CU using the rook, or castle, to provide a strong defense in your own chess game?

Forrester report finds US tablet ownership doubled this year

Forrester Research has come out with its annual report on technology consumption in the US, and tablets are certainly gaining popularity.

Image source: Article

Although slightly lower than Pew Research's figures, Forrester deduced from its nigh 60,000-strong survey that 19 percent of 'mericans over the age of 18 own at least one tablet -- double the number the research outfit noted last year.

The whole report isn't available to the public, but why not use the time you would've spent reading it inspecting what's under the tree, and hoping you'll be responsible for upping those tablet stats in next year's report.

Read the blog to access the report.

Public WiFi Threats Dissected

You have heard the loudly voiced fears: Signing onto open, unmanaged, public WiFi networks is about as smart, and safe, as unprotected public sex with strangers.

Image source: Article

Everything up to and including identity theft is blamed on public WiFi -- and yet most of us continue to use it. A recent study, for instance, says 55 percent of mobile devices use public WiFi.

All the threats are reasonably accurately portrayed, but you know what is missing? Quantification of how often users on public WiFi networks are compromised and what costs or damages ensued.

Do you allow your members to bank online using public WiFi? Should you?

From CRM to “Big Data,” why a step back can be a step forward

Are banks in general shying away from technological advances, such as the use of “Big Data” analytics, because the issue is just too complex to get a handle on? Will mobile banking and mobile payments ever become mainstream, and, if so, when?

Image source: Article

A lot of banks can’t afford that kind of research and development and they depend on third parties.

Isn’t one of the arguments that if banks don’t do it, other competitors will?

What is your CU's position on Big Data? Read the article to see what other banks think.

Banks Spend Way More On Info Tech Than Any Other Business

Measured as a percentage of revenues, financial services firms spend more on IT than any other industry.

Image source: Article

The reasons for a higher use of IT in the banking industry are manifold. Financial service firms have to fulfill exacting regulatory requirements which translate into IT costs that do not contribute to the firms’ earnings.

Furthermore, banks rely heavily on IT in their back offices as well as their distribution channels.

How much does your CU spend on IT? Read the article to see how you stack up.

Using Data and Analytics to Fight Fraud

As financial institutions enhance the data they are willing to apply toward helping alleviate fraudulent activity, it could have a game-changing impact in the fight against fraud.

Image source: expetec1202

Fraud still poses a very real threat to financial institutions and businesses because, in most cases, they bear the majority of the financial burden.

Lawmakers have recently passed legislation designed to detect and protect consumers, businesses and financial institutions from a multitude of fraud schemes, but are laws alone enough to contain the rising threat of fraud?

Does your CU lean on laws to help protect against fraud? Read the article to see what the author of this article has to say.

Social Media: The Next Big Payments Platform?

Payments upstarts like Dwolla and Chirpify are aiming to capitalize on social media's popularity.

Image source: Article

But the question remains whether consumers will flock to a system that lets the world know what they're buying.

Watch the video to see where things are headed.

Managing Mobile Risk – Avoiding Information Governance Mine Fields

Despite the challenges, CUs can rein in the information governance risks with common sense and the latest technologies.

Image source: Article

Most Credit Unions don’t practice what they preach when it comes to information governance.

Centralized document management, formal information management lifecycles, and proof of governance policy enforcement have all become non-negotiable elements in many firms’ policy management and enforcement protocols. And they influence firms’ choices of technology.

What does your CU information governance program look like? Read the article to learn more.

DDoS Attacks Against US Banks Peaked At 60 Gbps

Some of the distributed denial-of-service (DDoS) attacks that targeted the websites of U.S. financial institutions this week have peaked at 60 Gbps.

Image source: NSS Labs

A group calling itself "Izz ad-Din al-Qassam Cyber Fighters" launched a series of DDoS attacks against the websites of several U.S. banks during September and October, severely disrupting online and mobile banking services for extended periods of time.

The attacks are not that much different from the ones in September and October. There are some changes in the tools being used, but they are not significant.

Most banks and their providers are better prepared to defend against DDoS attacks now than they were two months ago. How does your CU stack up?

Cyber Terrorists Threaten Fresh Attacks Against U.S. Banks

A group claiming to be aligned with Islamic terrorism that launched a massive attack against U.S. bank websites in the fall has threatened another round, set to start this week.

Image source: Article

n the last round of attacks, security experts told FOX Business the perpetrators created a so-called “botnet” of compromised Web servers that it used to carry out the attack. The Web servers, the experts said, provided more horsepower than the personal computers because of their higher-level access to Internet infrastructure and less limiting bandwidth restrictions.

Without spoiling the article, side channel attacks could threaten cloud security in a big way. It's best to be prepared. Read the article to start getting prepared.

Sophisticated Smartphone Hacking: 36 Million Euros Banking Theft

A sophisticated digital attack involving smart mobile phones has been used to steal 36 million euros or 47 million dollars from corporate and private banking customers across Europe.

Image source: Article

The attack appears to have emanated from cybercrime servers in the Ukraine.

Android and Blackberry mobile devices have been specifically targeted, showing that attacks against Android devices are now a growing trend.

What are your thoughts, observations and views? Read the article to read more about "ZITMO" or "Zeus-In-The-MObile".

Sophisticated Zeus Campaign Stole €36 Million From 30,000 Bank Accounts

The Eurograbber campaign, as it has been named, used custom versions of Zeus and Zeus in the mobile (ZITMO) Trojans to bypass the two-factor authentication measures to compromise customer bank accounts.

Image source: Article

The sophisticated Zeus campaign stole an estimated €36 million, or $47 million, from over 30,000 customers across more than 30 banks in Europe this summer.

The attack intercepted SMS messages sent to customers to confirm financial transactions.

Does your CU protect your SMS channel? Read the article to see how these banks fell victim to this expensive campaign.

Good Vault launches two-factor authentication for iPhones

Good Technology announced Good Vault, a system for adding two-factor authentication to the iPhone 4 and 4S for access to Good for Enterprise email.

Image source: Article

The system will be especially valuable for government agencies and companies in highly regulated industries, such as healthcare and financial services, where it's critical to ensure that data is protected from unauthorized users if an employee's smartphone is lost or stolen.

With the Vault system, one of two sleeves is attached to the iPhone: One that can read a smart card or one that can read a microSD card, he said. Once either of the sleeves is in place, inserting the microSD or smart card becomes one component of the two-factor identification process, while typing in a PIN is the second. Once authenticated, users would have access to Good for Enterprise email.

Read the article to learn more about protecting access to the iOS platform.

Using Cloud for Disaster Recovery

Use of cloud for DR solutions is becoming more common, even the organizations which are not using cloud for mission critical production applications are moving towards using cloud for application DR.

Image source: Article

The article covers some of the best practices and lessons learned from the Cloud DR solutions we have implemented so far.

What does your CU do for disaster recovery? Read the article to see all tips and tricks and best practices.

Bank Agrees to Reimburse Hacking Victim $300K in Precedent-Setting Case

In a case watched closely by banks and their commercial customers, a financial institution in Maine has agreed to reimburse a construction company $345,000 that was lost to hackers after a court ruled that the bank’s security practices were “commercially unreasonable.”

Image source: Article

People’s United Bank has agreed to pay Patco Construction Company all the money it lost to hackers in 2009, plus about $45,000 in interest, after intruders installed malware on Patco’s computers and stole its banking credentials to siphon money from its account.

Although the UCC places some burden on the customer to “exercise ordering care,” the court found that it was unclear what obligations a customer had when the bank’s security system was found to be commercially unreasonable.

How much does your CU have to lose for not taking the right steps to protect your members?

Online Service Offers Bank Robbers for Hire

An online service boldly advertised in the cyber underground lets miscreants hire accomplices in several major U.S. cities to help empty bank accounts, steal tax refunds and intercept fraudulent purchases of high-dollar merchandise.

Image source: Article

The service, advertised on exclusive, Russian-language forums that cater to cybercrooks, claims to have willing and ready foot soldiers for hire in California, Florida, Illinois and New York.

The proprietors of this service say it will take 40-45 percent of the value of the theft, depending on the amount stolen.

In 2010, the U.S. Justice Department targeted one such network in New York City, charging more than three dozen J1s with knowingly assisting in the theft of funds from organizations that had been victimized by cyber fraud. But was that enough? Read the article to find out more about these e-robbers.

Big Data in Banking: Driving Value in Next Best Action

It’s difficult to read a banking technology article or go to a conference without hearing about big data.

Image source: Article

Most of us now believe that big data is more than just hype, that it can offer business benefits to those that can leverage big data into new business capabilities.

But a common question I hear is “How does it relate to my day-to-day business? What does a “big data” business use case look like?”

What does Big Data look like for your CU?

Best BYOD management: Work zones for smartphones

Anthony Perkins wants employees at BNY Mellon to bring their personal smartphones to work and use those instead of company-issued BlackBerries to access business email, applications and data.

Image source: Scoop.it

But there's a catch: Not all employees are comfortable with the prospect of having their personal phones locked down and controlled as tightly as the BlackBerries that Perkins would like to phase out. That's where the notion of containerization comes in.

Because corporate apps and data are often mixed in with the user's personal content, mobile device management (MDM) tools tend to be very strict when it comes to managing corporate resources on users' phones. Usage policies often apply to the entire device, covering both personal and professional apps and data. Users may not be willing to give up control of their personal phones in exchange for the privilege of using them for business.

Where is your CU investing in BYOD? Mobile containers or MDM?

imsmartin presents identity theft trends and protections

Sean Martin, CISSP, and founder of imsmartin consulting, presented to a group of over 100 attendees during the Firefighter's National Credit Union Summit. The group represents the growing National Coalition of Firefighters Credit Unions.

Image source: Advioso

Identities are at the core of nearly everything that takes place within a credit union. And, with the number of fraudulent attempts to use a stolen identity increasing dramatically, credit unions must take a good hard look at how they are managing their members' and employees' identities - including the transaction auditing and access control mechanisms surrounding them.

In his presentation, Martin covered the following topics:

• Identity theft trends
• Detecting identity-based fraud
• Tips for consumers
• Tips for credit unions

Fill in the form at Advioso to obtain a copy of the presentation, along with a few identity theft protection whitepapers from content sponsors TeleSign, Guardtime, and CSID.

Cryptography attack: side-channel cloud threat is all nerd and no knickers

Side-channel attacks are nothing new. Their arrival in the cloud, or rather the potential for a side-channel approach to touch the cloud threat surface, most certainly is though; but is it something you need to worry about?

Image source: Article

In order to answer that, you first have to get your head around what a side-channel attack actually is.

Is the cloud safe from side-channel attacks on crypto keys in a real world scenario or not? Good question. The researchers suggest that there is room for a potential breach within the imperfect isolation of VMs found in public clouds, and advise that 'highly sensitive workloads' should not be stored there.

Without spoiling the article, side channel attacks could threaten cloud security in a big way. It's best to be prepared. Read the article to start getting prepared.

The Day A Computer Virus Came Close To Plugging Gulf Oil

The Shamoon scenario could repeat again with financial companies.

Image source: Article

“If this would happen to the three biggest banks in the U.K., all of their systems went down, all of their servers went down, [it would] mean that people can’t see their bank account online anymore, so they don’t know whether or not they still have money anymore. All the ATMs have a blue screen,” says Schenk.

Is your CU safe from these types of attacks?

Read the article to find out if you are prepared.

'There's an App' for Legal Teams

The catchphrase for the mobile lawyer? "There's an app for that." That may be true, but finding it and making it work for you or your law firm is a journey where law firms should let technology drive the business model.

Image source: imsmartin

This article captures the most presented and discussed applications used by lawyers — specifically looking at them from the perspective of lawyer mobility.

While there are thousands of commercial apps available, the next big wave is in the form of custom apps.

Is your CU building its own apps? Are you building them for your lawyers? Read the article to learn more about a few mobile development platforms.

Security Debate: On-premise or in the cloud?

There are many things that are easier to do in the cloud, but is security one of them?

Image source: Article

Proponents argue that basing security tools in the cloud provide all the benefits of any cloud-based resource, including low cost of entry, simplicity of maintenance/upgrades, etc.

But critics say not so fast. Getting security is hard enough when you control all the resources. Moving them to the cloud just further complicates the job.

Read the article to get these experts' opinion in this Network World Tech Debate.

Guidance on Cloud Security

The banking and financial sector with its strict regulations and need for high security, had always been seen as the last sector, to adopt cloud computing.

Image source: Article

Prior to embarking into cloud computing, organisations must consider a number of threats.

A number of factors also need to be taken into consideration when choosing the proper software security for cloud computing.

This article captures both lists.

End-users admit ignorance of corporate cloud policies

Already tested by the BYOD movement, security-conscious IT admins are increasingly forced to cope with employees exposing their organization to security risks and unforeseen expenses by signing on to unauthorized cloud services.

Image source: Article

This includes storing customer records on Dropbox, enlisting Amazon Web Services to test beta code, or creating and sharing sensitive documents via Google Docs.

A new study from Symantec titled "The Myth of Keeping Critical Business Information Out of Clouds" points to the chasm between users and IT admins over access to cloud applications.

Read the article to see the survey results.

Mobile is impacting cloud security issues

The burgeoning influx of employee-owned smartphones and tablets in the workplace has added to the complexity of securing cloud-based systems, according to a panel of experts who urged IT security teams to consider setting enforceable mobile policies alongside cloud policies.

Image source: chetansharma

The process for setting policies addressing both mobile and cloud is easier said than done.

Hybrid cloud policies developed in conjunction with mobile security policy should be as a collaborative effort involving all of an organization's data owners, administrators and others who know the business and can find a middle ground.

View what the panelists say in full detail in this article.

Gartner: How big trends in security, mobile, big data and cloud computing will change IT

When you go to a Gartner conference one of he main things you'll notice is the sheer volume of data they can generate on just about any IT topic.

Image source: Gartner

The Gartner conference, attended by some 9,000 executives focused on the changes security challenges, mobile computing, big data and cloud will be bringing to IT in the near future.

Trying to get through it all can be daunting so we've tried to simplify that process by distilling a variety of Gartner ITxpo presentations and coming up with the most salient information.

What are you interested in? Mobile? Big Data? Cloud? All of the above? Read the article to learn more about each.

Lack of abuse detection allows cloud computing instances to be used like botnets

Some cloud providers don't detect attacks launched from their networks, researchers say.

Image source: YahooLabs

Some cloud providers fail to detect and block malicious traffic originating from their networks, which provides cybercriminals with an opportunity to launch attacks in a botnet-like fashion, according to a report from Australian security consultancy firm Stratsec.

Researchers from Stratsec, a subsidiary of British defense and aerospace giant BAE Systems, reached this conclusion after performing a series of experiments on the infrastructure of five "common," but unnamed, cloud providers.

What are your cloud instances up to? Read the article to learn more.

In security response, practice makes perfect

We've heard it many times in many forms -- expect to be breached, expect that you've been breached, expect that you are being breached.

Image source: imsmartin

The unfortunate reality is that most organizations don't even know that they've been compromised and therefore don't do anything to block spreading of the malware, control the damage, prevent loss of information, or even recover from the technical problems associated with the compromise.

Assuming the adversary makes it in, the question remains: How long after a breach occurs can the organization remediate and prevent further damage?

Which state is your CU in? Waiting to be breached? Already breached? Don't know? Regardless of the state, you should read the article to learn more about some best practices in response.

Managing Mobile Risk

What happens when data collaboration and delivery travels to the mobile devices we all carry? Most CIOs see the introduction of unnecessary risk, observed many experts.

Image source: Article

Controlling information is not a new concept

But today's unmanaged mobility — in the form of BYOD (bring your own device) to work programs — and equally unmanaged use of popular Web services such as Dropbox and Evernote — represent a seemingly unstoppable phenomenon.

This creates a set of issues that must be addressed before an information governance firestorm hits. Read the article to see where your CU sits in terms if mobile information governance.

Doing the Two-Step, Beyond the A.T.M.

BANK A.T.M.'s embody decades-old technology. A four-digit PIN?

Image source: judybaxter

What a seemingly crude security system. Where are the uppercase and lowercase letters and the random punctuation that we are continually told are crucial to hacker-resistant passwords?

In fact, though, the four-digit numbers required to use cash machines are one element of an extremely strong security model that most of today's Web sites fall well short of matching.

Is your CU planning to offer your Members the option of requiring two-step verification for added peace of mind? Read the article to learn more about two-factor authentication.

Technology report: Biometric banks and privacy

It may sound like something straight out of a James Bond movie, but believe it or not, Australia’s major banks are moving to embrace biometric security systems.

Image source: Cynic

There are two main reasons why the banks are moving in this direction; both of which revolve around customer experience. The first is to improve their customer's experience whilst utilising ATMs and Eftpos machines and terminals. The second is to remove the need for customers to carry around a wallet or purse full of plastic cards.

Banks aim to introduce biometric security systems to reduce the incidence of fraud. There’s also the fact that ATMs and Eftpos are time consuming, require customers to have a plastic card that stores account details and to remember a Personal Identification Number (PIN).

Is your CU and your members ready for biometric technology? Read the article to learn more about biometrics.

Trend Micro Identifies Malware Spreading via Skype

If you use Skype, you’ve likely been privy to an odd message coming from some of your contacts that says, “lol is this your new profile pic?”

Image source: Article

The explosion of this Trojan through various gaming communities was covered by SiliconANGLE earlier; but now Trend Micro’s malware labs have identified the malware as a variant of DORKBOT.

Users of Trend Micro’s product are already protected from this sort of intruder and the company has detected and blocked more than 6,800 associated files since Sunday.

Read up on the Skype-based attacks here to see why the payload is far more sinister than the silly name of this threat.

An eye for a buy: Banks look to retina and fingerprint technology

ANZ has floated the idea of retina-scanning automatic teller machines and is considering using electronic fingerprints as part of an effort to beat rival banks in the realm of technology.

Image source: Article

By the middle of next year, it would introduce 800 ATMs that allowed ''next generation'' deposit services, including coins, notes and cheques to be credited to customers' accounts immediately, the bank said yesterday.

It will plough about $1.5 billion into new technologies, including ATMs consumers could access through fingerprints or retina identification.

How much does your CU plan to invest in your ATM technologies? Read the article to learn more about how ANZ is using biometrics to deliver better security for their consumers transactions.

DDoS attacks on major US banks are no Stuxnet—here's why

The attacks that recently disrupted website operations at Bank of America and at least five other major US banks used compromised Web servers to flood their targets with above-average amounts of Internet traffic.

Image source: Article

The attacks used compromised Web servers to wield a bigger-than-average club.

The distributed denial-of-service (DDoS) attacks—which over the past two weeks also caused disruptions at JP Morgan Chase, Wells Fargo, US Bancorp, Citigroup, and PNC Bank—were waged by hundreds of compromised servers.

Your CU isn't on the list? So it must be safe then, right? Read the article to see why this may not be true.

MasterCard Plans Shift To EMV-enabled ATMs By 2016

After October 2016, banks can hold ATM operators liable for fraudulent withdrawals and cash advances from debit and credit cards.

Image source: Lexcel

The announcement gives banks, ATM operators, and equipment manufacturers more than four years to cycle EMV cards and equipment into circulation.

While not immune from fraud, EMV-enabled debit and credit cards require much more sophistication to clone, compared to the magnetic stripe cards popular among Americans today.

Is your CU planning to use EMV technology? Read the article to learn more about EMV-enabled ATMs.

Banks fail to repel cyber threat

A shadowy but well organized hacker group in the Middle East has disrupted the electronic banking operations of America's largest financial institutions in recent days, underscoring U.S. vulnerability to online terrorism.

Image source: Geograph

A group identifying itself as Izz ad-Din al-Qassam Cyber Fighters attacked the websites of Wells Fargo, U.S. Bancorp and Bank of America.

The strikes left customers temporarily unable to access their checking accounts, mortgages and other services.

Is your CU at risk of the same sort of attack? Read the article to see how this group operates.