Spyware, viruses, & security forum: NEWS - February 22, 2013

Twitter, Pinterest, and Tumblr have all warned users that some of their personal data might have been compromised following a security breach at customer service software provider Zendesk.

Zendesk disclosed the security breach on its blog Thursday evening, noting that a hacker broke into its system this week, and gained access to the support information of three major customers. The company believes the hacker downloaded the email addresses of Tumblr, Twitter, and Pinterest customers who attempted to get support from the companies.

All three companies promptly notified users of the data breach. Twitter said the incident affected a "small percentage" of users.

"Zendesk's breach did not result in the exposure of information such as Twitter account passwords," Twitter wrote in a message to affected users, according to Wired. "It may, however, have included contact information you provided when submitting a support request such as an email, phone number, or Twitter username."

Continued : http://www.pcmag.com/article2/0,2817,2415744,00.asp

Also:
Zendesk breach affects Tumblr/Pinterest/Twitter
Zendesk Compromised, Twitter, Tumblr and Pinterest Users Affected
Zendesk hack endangers Tumblr, Twitter and Pinterest users

Jean-Ian Boutin, who works for AV firm Eset, has discovered trojans that carry a valid digital signature. This potentially allows online banking spyware to pass superficial tests as harmless. Apparently, the certificate in question was issued by the DigiCert Certificate Authority - to a company that ceased to exist a long time ago.

A valid signature from a company called "NS Autos" confirmed the origin of a range of programs that, on close analysis, turned out to be trojans, at least some of them specialising in online banking fraud. While a company called NS Autos did once exist, it was liquidated in 2011. Apparently, that didn't stop the DigiCert Certificate Authority from issuing a valid certificate for signing executable programs to the company on 19 November 2012. The certificate was only revoked when Eset reported the discovery.

Continued : http://www.h-online.com/security/news/item/Certified-online-banking-trojan-in-the-wild-1808898.html

If you are one of the more than two million people who follow Donald Trump on Twitter, you might have seen an unusual tweet from the impossibly coiffed real estate mogul yesterday.

Rather than plugging his "The Apprentice" American TV show, or chirping up on a political issue, the multi-millionaire appeared to have chosen to quote a lyric by hip-hop artist Lil' Wayne.

These hoes think they classy, well that's the class I'm skippen

It turns out that Donald Trump had, in reality, had his Twitter account hacked. [Screenshot]

The offending tweet was swiftly erased, and "the Donald" - who doesn't believe in cover-ups - posted an explanation: [Screenshot]

Continued : http://nakedsecurity.sophos.com/2013/02/22/donald-trump-twitter-hacked/

Also: Donald Trump's Twitter "seriously hacked," tweets Lil Wayne lyrics

From Trendlabs Security Intelligence blog:

Based on the number of phishing sites we observed in 2012, it appears that cybercriminals have discovered a new target in mobile devices.

For 2012, we found 4,000 phishing URLs designed for mobile Web. Though this number represents less than 1% of all the phishing URLs gathered that year, this highlights that mobile devices (smartphones, tablets and the likes) are valid platforms to launch phishing attacks.

Cybercriminals use phishing sites, which are spoofed versions of legitimate sites, to trick users into disclosing sensitive information like usernames, passwords, and even account details.

What's more worrisome is the kind of websites these phishing attacks spoof. In 2012, 75% of mobile phishing URLs were rogue versions of well-known banking or financial sites. Once users are tricked into divulging their login credentials to these sites, cybercriminals can use these stolen data to initiate unauthorized transactions and purchases via the victim's account.

Continued : http://blog.trendmicro.com/trendlabs-security-intelligence/when-phishing-goes-mobile/