Provided by CommunityDNS, the information in this post consists of news items in the security-based Internet community.

Network Solutions breach exposed 500k card accounts

Details from 573,928 credit card holders were grabbed from a breach to Network Solutions systems. Hackers dropped software onto the system that delivered e-commerce services on behalf of 4,343 merchant websites. The software diverted transactions to a rogue server.

Click here for more information.

Security researchers unpick botnet economics

In a newly released paper, botnets provide cybercrooks with multiple potential sources of income:

  • DDoS attacks
  • Theft of private information
  • Spam
  • Phishing
  • SEO (Search Engine Optimization) spam
  • Click fraud
  • Distributing adware

A single botnet is capable of performing all of these activities at the same time.

  • A botnet for hire can bring in $50.00 to thousands of dollars for a 24-hour attack.
  • Stolen bank account information can yield from $1.00 to $1,500.
  • Personal data that can be used to open bank accounts under false names can yield $5.00 to $8.00 for a US citizen, higher for an EU citizen.
  • Phishers pay between $1,000 to $2,000 per month for a fast flux botnet.
  • Spam costs around $70.00 for a few thousand messages to $1,000 for tens of millions messages.
  • Search engine manipulating spam (SEO) costs $300 per month.
  • Adware brings in from $0.30 to $1.50 for each program installed. The price is higher in the more affluent US.

Click here for more information.

Feds strike deal on IPv6 testing

The US government is requiring all network and software vendors to enter into a comprehensive product testing program for IPv6 before their products can be sold to the US government. The compliance test is to be run either by the National Institute of Standards and Technology (NIST) or labs accredited by NIST to perform such tests. Companies will not be allowed to become accredited and test their own products.

Click here for more information.

Aussie ‘Net filtering trial deemed a success despite problems

Five of the nine Australian ISPs reported few problems in testing the government’s filter file. The filter file has been met with controversy that stems from a completely opt-in system by the user to being mandated to be used by all as found in the nation’s cyber security plan, to having ISPs voluntarily using the file with customers choosing not to use the file. Two of the country’s largest ISPs, Telstra and InterNode refused to participate in the test.

Click here for more information.

EU updates mobile rules to boost use of Internet on the move

In a move that could boost the EU’s Internet-accessing mobile phone users from less than 100 million to 500 million, the EU Commission reached agreement on how to free up radio spectrum for new mobile Internet services. Under the GSM Directive the 900 Mhz frequency reserved for GSM phones, such as the Blackberry and the iPhone, will now be able to carry traffic for standard mobile phone handsets. The law, to take affect in October, is also designed to save mobile operators around €1.6 billion in network costs that deal with mobile Internet delivery.

Click here for more information.