Re: spyware targets bank customers. news at 11.

2005-08-10 Thread Florian Weimer
* Perry E. Metzger:

A major identity theft ring has been discovered that affects up to 50
 banks, according to Sunbelt Software, the security company that says
 it uncovered the operation. The operation, which is being
 investigated by the FBI, is gathering personal data from
 thousands of machines using keystroke-logging software, Sunbelt
 said Monday.

 http://news.com.com/ID+theft+ring+hits+50+banks%2C+firm+says/2100-7349_3-5823591.html

I should point out that most players in the field don't rush to the
press with their findings, in order not to impact a pending law
enforcement investigation.

-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]


Re: spyware targets bank customers. news at 11.

2005-08-10 Thread Adam Fields
On Wed, Aug 10, 2005 at 04:11:31PM +0200, Florian Weimer wrote:
 * Perry E. Metzger:
 
 A major identity theft ring has been discovered that affects up to 50
  banks, according to Sunbelt Software, the security company that says
  it uncovered the operation. The operation, which is being
  investigated by the FBI, is gathering personal data from
  thousands of machines using keystroke-logging software, Sunbelt
  said Monday.
 
  http://news.com.com/ID+theft+ring+hits+50+banks%2C+firm+says/2100-7349_3-5823591.html
 
 I should point out that most players in the field don't rush to the
 press with their findings, in order not to impact a pending law
 enforcement investigation.

They stated on their blog that they only did so because they couldn't
get anyone's attention in law enforcement, and now that the FBI is
involved, they're not saying anything else (and yes, their actions are
being questioned in the comments).

http://sunbeltblog.blogspot.com/2005/08/massive-identity-theft-ring.html
http://sunbeltblog.blogspot.com/2005/08/more-on-identity-theft-ring.html

Except that while I've written the above I've noticed a followup which
has more details and says they're going to have a fix today:

http://sunbeltblog.blogspot.com/2005/08/keylogger-from-hell.html

-- 
- Adam

** I can fix your database problems: http://www.everylastounce.com/mysql.html **

Blog... [ http://www.aquick.org/blog ]
Links.. [ http://del.icio.us/fields ]
Photos. [ http://www.flickr.com/photos/fields ]
Experience. [ http://www.adamfields.com/resume.html ]
Product Reviews: .. [ http://www.buyadam.com/blog ]


-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]


Re: spyware targets bank customers. news at 11.

2005-08-10 Thread Florian Weimer
* Adam Fields:

 They stated on their blog that they only did so because they couldn't
 get anyone's attention in law enforcement, 

You mean this part?

| We have notified the FBI, but no response just yet. We have notified a
| few of the parties involved. (Update: It looks like they were working
| on the case when after we sent originally sent the data in, but we
| didn't get any response from them at the time indicating they had
| received our data.)

AFAIK, the FBI is a bit like a black hole, so it's a bit hard to work
with them.  On the other hand, not disclosing the details of an
ongoing criminal investigation to non-trusted individuals (and these
people are apparently new to the field) is usually a good idea.
Filing a complaint doesn't mean you are trustworthy.

(However, this has little to do with cryptography. 8-)

-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]


spyware targets bank customers. news at 11.

2005-08-09 Thread Perry E. Metzger

   A major identity theft ring has been discovered that affects up to 50
banks, according to Sunbelt Software, the security company that says
it uncovered the operation. The operation, which is being
investigated by the FBI, is gathering personal data from
thousands of machines using keystroke-logging software, Sunbelt
said Monday.

http://news.com.com/ID+theft+ring+hits+50+banks%2C+firm+says/2100-7349_3-5823591.html

(Hat tip to Adam Fields for pointing this one out to me.)

Perry

-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]