Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
FTC: It Takes Criminals Just 9 Minutes to Use Stolen Consumer Info
Threaded  |  Newest First  |  Oldest First
RyanSepe
RyanSepe,
User Rank: Ninja
5/27/2017 | 1:53:07 PM
Interesting Honeypot
This is an interesting exercise to show the value of compromising personal records from the attackers perspective. 
Dr.T
Dr.T,
User Rank: Ninja
5/30/2017 | 12:31:06 PM
Re: Interesting Honeypot
"Interesting Honeypot"

I like the idea that they try to understand what would happen.

 
Joe Stanganelli
Joe Stanganelli,
User Rank: Ninja
5/28/2017 | 3:05:52 PM
When you want it, you want it.
Makes sense. When you're in the market for something -- whether it's stolen PII or something else -- you often want it right away.
Dr.T
Dr.T,
User Rank: Ninja
5/30/2017 | 12:32:03 PM
Re: When you want it, you want it.
"you often want it right away"

Agree. 9 minutes is quite impressive.
Joe Stanganelli
Joe Stanganelli,
User Rank: Ninja
6/5/2017 | 5:23:36 AM
Re: When you want it, you want it.
Is it? How many of them, I wonder, already had an ecommerce portal open in another browser tab at the time?
Dr.T
Dr.T,
User Rank: Ninja
5/30/2017 | 12:29:06 PM
9 Minutes?
So they know a backdoor that we do not. 
Joe Stanganelli
Joe Stanganelli,
User Rank: Ninja
6/5/2017 | 5:25:41 AM
Re: 9 Minutes?
No, I don't think so. I think what the piece is trying to communicate is that once they had already accessed the information, they took mere minutes to use the compromised information. The 9-minute figure has nothing to do with the breach itself.
Dr.T
Dr.T,
User Rank: Ninja
5/30/2017 | 12:32:40 PM
NSA
At the same time, this is may be another vulnerability that was exploited and not shared with the vendor and hackers now know it. 


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Improving Enterprise Cybersecurity With XDR
Enterprises are looking at eXtended Detection and Response technologies to improve their abilities to detect, and respond to, threats. While endpoint detection and response is not new to enterprise security, organizations have to improve network visibility, expand data collection and expand threat hunting capabilites if they want their XDR deployments to succeed. This issue of Tech Insights also includes: a market overview for XDR from Omdia, questions to ask before deploying XDR, and an XDR primer.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-9754
PUBLISHED: 2022-06-27
NAVER Whale browser mobile app before 1.10.6.2 allows the attacker to bypass its browser unlock function via incognito mode.
CVE-2022-33146
PUBLISHED: 2022-06-27
Open redirect vulnerability in web2py versions prior to 2.22.5 allows a remote attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially crafted URL.
CVE-2022-33202
PUBLISHED: 2022-06-27
Authentication bypass vulnerability in the setup screen of L2Blocker(on-premise) Ver4.8.5 and earlier and L2Blocker(Cloud) Ver4.8.5 and earlier allows an adjacent attacker to perform an unauthorized login and obtain the stored information or cause a malfunction of the device by using alternative pat...
CVE-2022-2206
PUBLISHED: 2022-06-26
Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.
CVE-2022-30932
PUBLISHED: 2022-06-26
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.