‘Trojan Horse’ Bug Lurking in Vital US Computers Since 2011
Nov 6, 2014, 2:13 PM ET
By JACK CLOHERTY and PIERRE THOMAS
A destructive “Trojan Horse” malware program has penetrated the software that runs much of the nation’s critical infrastructure and is poised to cause an economic catastrophe, according to the Department of Homeland Security.
National Security sources told ABC News there is evidence that the malware was inserted by hackers believed to be sponsored by the Russian government, and is a very serious threat.
The hacked software is used to control complex industrial operations like oil and gas pipelines, power transmission grids, water distribution and filtration systems, wind turbines and even some nuclear plants. Shutting down or damaging any of these vital public utilities could severely impact hundreds of thousands of Americans.
Hackers Breach White House’s Unclassified Computer Network
DHS said in a bulletin that the hacking campaign has been ongoing since 2011, but no attempt has been made to activate the malware to “damage, modify, or otherwise disrupt” the industrial control process. So while U.S. officials recently became aware the penetration, they don’t know where or when it may be unleashed.
DHS sources told ABC News they think this is no random attack and they fear that the Russians have torn a page from the old, Cold War playbook, and have placed the malware in key U.S. systems as a threat, and/or as a deterrent to a U.S. cyber-attack on Russian systems – mutually assured destruction.
The hack became known to insiders last week when a DHS alert bulletin was issued by the agency’s Industrial Control Systems Cyber Emergency Response Team to its industry members. The bulletin said the “BlackEnergy” penetration recently had been detected by several companies.
https://abcnews.go.com/US/trojan-horse-bug-lurking-vital-us-computers-2011/story?id=26737476
Tag: hackers
Home Depot says malware affected 56M payment cards
Home Depot says malware affected 56M payment cards
SEPTEMBER 18, 2014, 4:50 PM LAST UPDATED: THURSDAY, SEPTEMBER 18, 2014, 6:09 PM
ASSOCIATED PRESS
NEW YORK — Home Depot said that 56 million payment cards were estimated to have been breached in a data theft between April and September at its stores in the U.S. and Canada. That makes it the second-largest breach for a retailer on record.
The nation’s largest home improvement retailer, based in Atlanta, also confirmed Thursday that the malware used in the data breach has been eliminated. The retailer said there was no evidence that debit PIN numbers were compromised or that the breach affected stores in Mexico or customers who shopped online at Homedepot.com. It said it has also completed a “major” payment security project that provides enhanced encryption of customers’ payment data in the company’s U.S. stores.
The disclosure puts the data breach behind TJX Cos.’s theft of 90 million records, disclosed in 2007 and ahead of Target’s pre-Christmas 2013 breach which compromised 40 million credit and debit cards.
Home Depot confirmed its sales-growth estimates for the fiscal year and said it expects to earn $4.54 per share in fiscal 2014, up 2 cents from its prior guidance. The company’s fiscal 2014 outlook includes estimates for the cost to investigate the data breach, providing credit monitoring services to its customers, increasing call center staffing and paying legal and professional services.
– See more at: https://www.northjersey.com/news/home-depot-says-malware-affected-56m-payment-cards-1.1091344#sthash.hhDBCSU5.dpuf
Hackers may have stolen credit data from Home Depot
Hackers may have stolen credit data from Home Depot
Javier E. David | @TeflonGeek
Home Depot may be the latest retailer to have suffered a massive credit card breach, the company confirmed on Tuesday, after a website reported that a large cache of stolen data had appeared on black market sites.
According to information first reported by Krebs on Security, the breach may have extended as far back as the spring of this year. If so, the fallout may end up being far larger than Target’s incident late last year, when information pertaining to tens of millions of customers was compromised.
Home Depot is working with investigators to determine the origin of “unusual activity,” a spokeswoman told CNBC in a statement
https://www.cnbc.com/id/101964168
First contagious WiFi computer virus goes airborne, spreads like the common cold
First contagious WiFi computer virus goes airborne, spreads like the common cold
Computer science researchers have demonstrated for the first time how a digital virus can go airborne and spread via WiFi networks in populated areas at the same pace as a human diseases.
The “Chameleon” virus, designed by a University of Liverpool team, showed a remarkable amount of intelligence by avoiding detection and breaking into personal and business WiFi networks at their weakest points — spreading at an alarming rate.
Network Security Professor Alan Marshall said the virus doesn’t try to damage or disrupt established networks — instead, the virus slips in unnoticed to collect the data and log-in information of all users connected to the network via WiFi, and seeks other WiFi networks through them — a much more subtle, sinister and dangerous objective.
“WiFi connections are increasingly a target for computer hackers because of well-documented security vulnerabilities, which make it difficult to detect and defend against a virus,” Marshall said in a ScienceBlog report. “It was assumed, however, that it wasn’t possible to develop a virus that could attack WiFi networks — but we demonstrated that this is possible and that it can spread quickly.”
The secret to Chameleon is the method by which it avoids detection. Traditional computer antivirus programs look for viruses present on computers and the Internet itself. Chameleon sticks strictly to WiFi networks, bypassing secured, more heavily encrypted networks to enter and spread through weaker ones — especially free public access points like those found in cafes, on trains and in airports.
Read more: https://dailycaller.com/2014/02/25/first-contagious-wifi-computer-virus-goes-airborne-spreads-like-the-common-cold/#ixzz2uQHqGcIp
Security Expert Claims To Gain Info On 70-K ObamaCare Records in 4 Minutes
Security Expert Claims To Gain Info On 70-K ObamaCare Records in 4 Minutes
January 21, 2014 – 3:08 PM
By Eric Scheiner
A cyber security expert claims he could gain access to 70,000 personal records of ObamaCare enrollees in about 4 minutes.
David Kennedy, CEO of TrustedSec, told Fox News Sunday the information can be obtained without even hacking.






