Weekly Brief, February 8, 2009

Chinese hacking training site Black Hawk Safety Net has been shut down by police. $249 000 in assets were frozen during the raid.

The town of Poughkeepsie, New York is reviewing its insurance coverage after a hacker transferred $378 000 from its account at TD Bank to banks in Ukraine. $95 000 of the money has been recovered, but town supervisor Patricia Myers has condemned the bank for not reporting the transfers sooner.

In the first case of its kind, Venezuelan citizen Edwin Pena pleaded guilty to hacking into the networks of VoIP providers and reselling hacked VoIP services.

It seems to have been the week for hacking to make illegal profits from new services. Hackers sent out targeted emails purporting to come from the German Emissions Trading Authority. The phishing attack enabled the thieves to harvest account information and steal 250 000 carbon credit permits from six companies worth more than $4 million.

And Brian Krebs reports that hackers attempted to steal over $150,000 from the United Way, although the charity was able to block the transfer with the help of its bank.

Breach Security, which sells firewalls, says that an online marketing industry ASP site that uses might have been subject to a data breach. It uploaded contact names and e-mails for the Blackhat security conference to the site.

The National Institute of Science and Technology has released the second draft of its Smart Grid Cyber Security Strategy and Requirements document. It classifies connections between electricity management devices according to the potential impact from a security breach.

Micro-blogging service Twitter explained a phishing attack that caused many of its users' accounts to be compromised. The attack stemmed from a concerted, long-term effort to harvest user names and passwords from third-party filesharing sites that have been setup using a back door. Because many users still use the same password for multiple systems, these users found their accounts compromised on Twitter (and presumably many other services).

What’s hot on Infosecurity Magazine?