“Things done well and with a care, exempt themselves from fear. ”

— William Shakespeare

Brazilian ‘Bolware’ Gang Targeted $3.75B in Transactions, RSA finds http://www.scmagazine.com/brazilian-bolware-gang-targeted-375b-in-transactions-rsa-finds/article/359083/

http://www.securityweek.com/cybercriminals-may-have-stolen-billions-brazilian-boletos

C-IT Recommendation

  1. Ensure your company has an effective spam gateway or email content filter solution that quarantines junk mail, detects viruses.
  2. Consult with your email security team to validate the email security solution is running on the latest stable version with the latest signature updates.
  3. Ensure your company is using a web content filtering solution to prevent user from accessing malicious websites.
  4. Validate the web content filtering solution is up to date with the latest stable version with the latest site signature updates
  5. Thoroughly educate your end users on phishing attacks and how to avoid them.
  6. Encourage your end users through your information security policy not to give their company email out for non-business related purposes
  7. Restrict administrative access on local machines and browsers to only users which absolutely need access to install programs for business purposes

Article Resources

RSA Bol-ware Whitepaper

https://blogs.rsa.com/wp-content/uploads/2015/07/Bolware-Fraud-Ring-RSA-Research-July-2-FINALr2.pdf

Man in the Browser Definition

http://searchsecurity.techtarget.com/definition/man-in-the-browser

New Android Malware Targets Banking Apps, Phone Information http://www.securityweek.com/new-android-malware-targets-banking-apps-phone-information-fireeye

http://www.infosecurity-magazine.com/view/39131/android-malware-paves-way-for-serious-banking-threat/

C-IT Recommendation

  1. Perform an asset inventory of all company owned Android devices using company provided cell phone service. Your company should have a configuration management database to show which devices have which operating systems versions.
  2. Ensure anti-malware service is deployed on all company owned Android devices. If you have a mobile device management solution, enable the company webfiltering option where applicable and force the cellular devices to pass through the company webfilter/proxy before accessing the internet.
  3. Provide mobile device security awareness informing your employees not to visit pornographic sites. Also, instruct employees not to apps from unofficial stores

If you do not have a mobile device management solution in a BYOD model, Strongly recommend users to install the security updates. Failure to do so may result in your employees devices compromising your company information and/or costing the employees or your organization a ton of money

Article Resources

http://www.fireeye.com/blog/technical/malware-research/2014/07/the-service-you-cant-refuse-a-secluded-hijackrat.html

Researchers Disarm Microsoft’s EMET http://www.securityweek.com/researchers-disarm-microsofts-emet

C-IT Recommendation

  1. Deploy a defense in depth strategy for security
    1. Do not rely on one vendor to solve all your security issues
    2. Do not rely on one type of technology to solve all your security issues.

Article References

Offensive Security Video Demonstrating Disarment of Microsoft’s Enhanced Mitigation Experience Toolkit

http://vimeo.com/99658866

Offensive Security’s Blog on Disarming EMET

http://www.offensive-security.com/vulndev/disarming-enhanced-mitigation-experience-toolkit-emet/

Microsoft’s Enhanced Mitigation Experience Toolkit

http://www.microsoft.com/en-us/download/details.aspx?id=41138

Exploit Code for Disarming EMET

http://www.exploit-db.com/exploits/33944/

See All 50 Episodes of "C-IT Security Podcast "