Week in review: SASFIS Trojan, phishing escalation and IE patch

Here’s an overview of some of last week’s most interesting news and articles:

Online cybercriminal DarkMarket closed, founder arrested
DarkMarket has been shut down by the US SS and the FBI, but not before it was infiltrated by an FBI agent that managed to become one of the site’s administrators.

Phishing attacks escalate, DIY cybercrime kits to blame
With the proliferation of DIY cybercrime kits, criminals previously uninterested in this kind of crime found that the doors to online fraud were finally open.

Four information management roles IT departments need
Gartner has identified four information-management roles that IT departments need to establish and recruit from outside the IT team in a major trend that will affect both IT and business.

Identity theft in focus
Identity theft, when a thief uses your personal information for their personal gain, comes in all shapes and sizes.

Networks Solutions breached, hundreds of sites defaced
Network Solutions confirmed on Tuesday that their servers have been breached and that a few hundred of their customer’s web sites have been defaced.

Hiding from Google
Worried about Google tracking your online activity? Not satisfied with Tor’s speed? GoogleSharing anonymizes your searches and movements inside and from Google online services that don’t require you to login into your Google account.

Analysis of 32 million breached passwords
Imperva released a study analyzing 32 million passwords exposed in the Rockyou.com breach.

SASFIS Trojan treads lightly
The SASFIS Trojan variants may be not as famous and well-known as BREDOLAB’s or Zeus/Zbot’s, but they still pose a considerable danger to users and networks around the world.

Banking Trojan coming at you from all sides
Using the very effective tactic of multiple attack vectors, the makers of the Zbot banking Trojan are ensuring a high enough infection rate for them to make profit.

First real-time security application for Facebook
Defensio 2.0, a threat detection system for the social Web, analyzes and classifies user-generated content in real-time as it is posted to blogs and Facebook pages, to protect visitors from being exposed to malicious links and spam.

E-crime gangs turn to expanded extortion model
A new report by the APWG reveals that e-crime syndicates are expanding conventional, email-based phishing campaigns and their target base.

Critical Internet Explorer patch released
Microsoft released a security update that resolves seven privately reported vulnerabilities and one publicly disclosed vulnerability in Internet Explorer.

95% of email is spam
The European Network and Information Security Agency (ENISA) released its new spam report which looks at spam budgets, impact of spam and spam management.

Unknown virus brings down UK university network
The network of UK’s University of Exeter was hit on Monday by what they claim “is a completely new virus and we are the only organisation in the world to experience it.”

Tor Project infrastructure breached, users advised to upgrade
Tor users have been advised to upgrade following a security breach that left two of the seven directory authorities compromised.