News

Read information and press releases from the world of CZ.NIC. Or download our RSS Feed .

2013

Opera Software Hit by 'Infrastructure Attack'; Malware Signed with Stolen Cert

Norwegian browser maker Opera Software has confirmed that a targeted internal network infrastructure attack led to the theft of a code signing certif…

Attacks-as-a-Service, MaaS, FaaS - Different Terms, Same Success History

Attacks-as-a-Service, Malware-as-a-Service and Fraud-as-a-Service - all are terms used to better qualify the complex evolution of cybercrime offer.

Car Hacking - Cinematographic Fiction or Reality

Car hacking is one of the effect of the massive introduction of technology in our vehicles, a hacker that gain access to our transport is an event th…

'World of Warcraft' Hackers Steal Millions in Gold

Adventurers in the online game "World of Warcraft" generally have to worry about bandits and dragons, but their most dangerous threat this week comes…

Forwarding Your Phone's Texts Could Invite Hackers

Getting your text messages delivered to your PC or tablet sounds pretty convenient, until a hacker uses that text-forwarding feature to hijack your G…

Compromised Yahoo! Accounts Used to Spread Android Trojan

Over the last several days, weeks really for some, people have noticed an uptick in the amount of spam coming from compromised Yahoo! accounts. But t…

What's the best way to test and secure Joomla?

Joomla is one of the most popular CMS which gives ease of installation, handling and managing your web application. And so being obvious is used in m…

Google Docs Abused to Protect Malicious Traffic

Researchers at FireEye have spotted a malware campaign using Google Docs to redirect victims and evade callback detection mechanisms.

Security iPhone Hotspot Passwords Take Seconds to Crack

If you use your iPhone as a mobile hotspot, a hacker could probably get into it in less than a minute. By default, iOS 6 generates randomized passwor…

Fortune-teller

In today's hot day, perhaps we can afford something funny. It is video, which could be projected to internet users as educational.

Java Mega-Patch Fixes 40 Serious Flaws

Java is not the safest software that users can install, as evidenced by the 40 flaws patched in its latest update. Users should install Java 7, Updat…

Trojan.Obad.A Gets Administrator Privileges and Manages Your Device for You

Android.Obad.A is equipped with an array of malicious functions including sending SMS to premium-rate numbers, entering commands in the device consol…

Some iPhones Duped by Impostor Wi-Fi Hotspots

Experts from security research company SkyCure have uncovered a security vulnerability in the carrier configuration settings of some iPhones that cou…

Top ten rules for network administrators related to internet connectivity

Last article from series about internet security is dedicated to rules and procedures which are important during connecting your network to the inter…

Remove unofficial debian-multimedia.org repository from your sources

The unofficial third party repository Debian Multimedia stopped using the domain debian-multimedia.org some months ago. The domain expired and it is …

Old Bug in Flash Allows Cyber-Crooks to start Webcams, Microphone

An older flaw in the Adobe Flash plugin that should have been fixed two years ago is still exploitable by cyber-criminals, leading to users getting s…

Medical Equipment Highly Vulnerable to Intruders

Patients using medical gear such as pacemakers, heart defibrillators and insulin dispensers could become moving targets for cyber-criminals, accordin…

The Business Behind a Hacked Email Account

Which is the commercial value of a hacked email account in the underground? How cybercriminals use a compromised email account? Why do they have to h…

Hi-Tech Car Lockpick Puts Car Manufacturers on Red Alert

A wave of car theft that started in February might completely change the contactless car lock industry as we know it.

CZ.NIC Appoints New Member to Supervisory Board

The new member, Ilona Filípková, replaces Ondřej Fryc, who did not reapply for the position.

At its meeting on 11 June 2013, the CZ.NIC Collegium sele…

Twitter Spam Campaign Exploits CNN Vulnerability

A campaign that takes advantage of vulnerabilities on the CNN website is flooding Twitter users with diet spam. Cyber-criminals exploit the open redi…

New Trojan is ‘Most Sophisticated’ Android Malware Yet

It seems like every other week we hear about a new malware that's has been wreaking havoc on Android phones. But a new Trojan uncovered by security f…

Facebook Zeus malware targeting bank accounts

Principal security firms detected a new variant of Facebook Zeus malware that is exploiting the popular social network to target user’s bank accounts…

Spear Phishing Targeting Executives Puts Vanity back in Business

A new spear phishing attack targeting executives claims victims in English-speaking countries by appealing to their vanity. The “Top 100 Executives” …

Rare, but Real, Apple Mac OS X Virus Discovered

It's not true that Macs don't get malware, but it is true they don't get viruses — at least not in the wild.

Google Chrome Update Fixes 2013's 1st Critical Flaw

The new update for Google's Chrome browser doesn't offer any new features, but it will keep you safe from a number of potential hacks and hijacks. Go…

Infected Photos Steal From Car Shoppers

If an online seller sends you photos of an item, run them through a malware scanner first — at least according to the FBI. A new warning issued by th…

Apple Update Fixes Remote Code Execution Flaws in Mac OS X

Apple addressed over thirty serious vulnerabilities in OS X and Safari Web browser in a hefty update this week. The updates address vulnerabiliti…

Czech Republic a Leader in the Introduction of IPv6 in Public Administration

According to current data from the Czech Republic, 48 % of websites of national government bodies and 26 % of towns and municipalities support the ne…

NetTraveler, new global cyber espionage campaign from Kaspersky

NetTraveler cyber espionage campaign, revealed by Kaspersky’s team, targeted over 350 high profile victims from 40 countries.

Fake 'Android Defender' Promises Security, Delivers Malware

The newest threat to Android is an app that promises users security for their mobile devices. But don't let the phony "Android Defender" name fool yo…

'Beta Bot' Banking Trojan Disables Your Security

A recently discovered piece of malware called Beta Bot started out as a humble Web-page automated script, but over the last five months, it has evolv…

Fake Amazon Order Confirmation Promises 55” TV Set, Delivers Malware

A recent spam campaign abuses the world’s largest online retailer, Amazon.com, to promise a 55” TV set but instead direct users to a malware-laden pa…

Drupal Forces Password Resets After Breach Discovery

Drupal.org, home to one of the web’s most popular Content Management System (CMS) platforms, has issued an alert to community members and reset all a…

Smartphone Sensors Could be Used to Activate Malware, Research Shows

Mobile phone sensors such as microphones, accelerometers and cameras might be used to initiate a malware outbreak on smartphones, according to resear…

Facebook Phishing Scam Targets ‘Fan’ Pages

The message informs users about a new Facebook feature called the "Fan Page Verification Program," which is fake.

BIOS Bummer: New Malware Can Bypass BIOS Security

Researchers expect to release proofs-of-concept at Black Hat that show how malware can infect BIOS, persist past updates, and fool the TPM into think…

Report of Activities of CSIRT.CZ in 2012

možno zobrazit, protože je v něm chyba: Špatný identifikátor objekt

Accuvant Labs Shares Java Vulnerability Details from Pwn2Own

Accuvant Labs has published details concerning a Java vulnerability exploited during the Pwn2Own contest earlier this year. The flaw was patched in A…

The Dangers of Downloading Software from Unofficial Sites

Microsoft researchers shared the example of a password-stealing Trojan bundled up with a game tool used for customizing the massively popular Dota2 W…

Five Percent of the Internet Could Be Hijacked via Embedded OS Flaws

Embedded devices – an umbrella term defining specialized appliances that run their own operating system such as GPS receivers, industrial equipment, …

Ondřej Filip re-appointed to UN secretary-general’s advisory group

Multistakeholder Advisory Group (MAG), an advisory body of the UN general-secretary for the organisation of the Internet Governance Forum. Filip was …

Critical Linux Exploit In The Wild

If you run servers that provide shell accounts, it’s time to take some preventive measures. At least it is if you are running kernel versions 2.6.37 …

Malicious Mac OS X Backdoor Signed With Valid Developer ID Found on Activist's Computer

Independent security researcher Jacob Appelbaum discovered the "new and previously unknown backdoor" on an African activist's Mac during a workshop a…

Malicious YouTube Pages Targeting Chrome Users

Researchers at Zscaler have discovered a fake YouTube page that is hosting malicious Chrome extensions. Such pages, as seen in the past, prey on the …

Vulnerability Assessment of SNMP Service – I

This is the first article out of a series of articles that I am planning to write on vulnerability assessment of SNMP Service.

Botnets: News from World of Linux

Last article from our new series about internet security is dedicated to Botnets.

New Apache Backdoor Targeting cPanel Installations

Researchers have discovered a new backdoor targeting Apache on cPanel-based servers. The attackers have replaced the Apache binary with a malicious o…

Malicious Firefox, Chrome Extension Hijacks Facebook Profiles

Researchers at Microsoft are reporting a wave of malicious browser extensions attempting to hijack Facebook profiles.

SCADA Vulnerabilities in Rockwell and Schneider Products Disclosed

Risk Based Security, the primary sponsor of the Open Security Foundation (OSF), has disclosed three SCADA vulnerabilities that impact two of the mark…