One hoax press release, one $300 million hole in mining company

The fake press release was pretty convincing: it was sent from a domain that riffed on the ANZ Bank name, used the bank’s logo, and included the name of a PR person, along with his (NOT!) phone number. It’s yet another example of how easy it is to scam people online.

eBay’s StubHub ransacked for over $1 million, international crime ring arrested

US police have indicted six people across four countries on charges of defrauding eBay’s StubHub for over $1 million in pilfered tickets for things like Jay-Z and Justin Timberlake concerts. eBay says its servers weren’t broken into; rather, password reuse and account holders’ PCs being riddled with malware are to blame.

SSCC 157 – Routers, Browsers, Zombies and Sysadmins [PODCAST]

Here it is…this week’s Chet Chat security podcast. In this episode: fixing routers, trusting browsers, killing zombies and showing TLC to sysadmins.

Car hackers build anti-car-hacking gadget

Besides yet more white-knuckled car-jacking stunts, security researchers Charlie Miller and Chris Valasek also plan to unveil at next month’s Black Hat conference a prototype device meant to foil the type of hacks they’ve been throwing at cars.

Germany considers replacing email with typewriters to evade spying

The country’s pondering manual typewriters, however, unlike Russia’s reported embrace of electric typewriters last year. Russia should be well aware that you can plug a keylogger into those e-typewriters, given that it pulled that stunt on IBM Selectrics back in the 70s!

Arrests made after keyloggers found on public PCs at US hotels

Proof of the lack of hygiene in publicly accessible PCs came up yet again when the US Secret Service last week warned that cybercrooks are installing keyloggers on the PCs in hotel business centers to steal personal and business information from travelers.