Trojan steals money from your bank site

Researchers at security firm Finjan have discovered details of a new type of banking Trojan horse that doesn't just steal your bank log in credentials but actually steals money from your account while you are logged in and displays a fake balance.

The bank Trojan, dubbed URLzone, has features designed to thwart fraud detection systems which are triggered by unusual transactions, Yuval Ben-Itzhak, chief technology officer at Finjan, said in an interview on Tuesday. For instance, the software is programmed to calculate on-the-fly how much money to steal from an account based on how much money is available.

The specific Trojan Finjan researchers analyzed targets customers of unnamed German banks. It was linked back to a command-and-control server in Ukraine that was used to send instructions to the trojan software sitting infected PCs. Finjan has notified German law enforcement authorities, Ben-Itzhak said.

"It's a next generation bank trojan," he said. "This is part of a new trend of more sophisticated Trojans designed to evade antifraud systems."

Finjan researchers were able to trace the communications from the code on an infected machine back to the command-and-control server, which was left unsecured, according to Ben-Itzhak. On that server, they saw the LuckySploit administration console and were able to see exactly what types of rules the Trojan was written to follow and statistics on victims.

About 90,000 computers visited the sites housing the malware and 6,400 of them were infected, a 7.5 percent success rate, he said. Of those whose computers had the Trojan installed, a few hundred had money stolen from their bank accounts, he added.

During the span of 22 days in mid-August, the criminals behind the Trojan stole the euro equivalent of nearly $438,000, according to the security company.


  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS

Online thieves step up bank raids

Cyber-criminals have developed sophisticated ways to remain undetected, a new report finds. The report, from security firm Finjan, describes how one gang, based in the Ukraine , stole 300,000 euros (£269,000) in 22 days. It used a sophisticated piece of malicious software which fooled banks' anti-fraud systems as well as forging bank statements to hide the thefts. It also recruited innocent job-seekers as so-called money mules. Such mules were needed to prevent a direct money trail being traced back to the gang.

The specific attack, monitored during the month of August, was aimed at the customers of several German online banks. The German police have been informed. The server used by the gang has been frozen although it is not known whether gang members have actually been caught.

Specific criteria

The gang used infected and fake websites to spread the trojan, a piece of malicious code which, once installed, can access all the data on the infected machine. From a command and control server hosted in the Ukraine , the code was installed on the computers of bank account holders. The trojan received specific instructions about how much money to steal from each account as well as the details of the money mule's account into which the money was transferred.

Finjan's chief technology officer Yuval Ben-Itzhak said he was surprised at the level of sophistication employed by the gang. The code included very specific criteria to make sure the bank accounts of victims were not completely emptied and to ensure the amount being stolen was not so high that it would be detected by banks' anti-fraud systems.

To further obfuscate their crimes, the code used by the gang was able to generate a forged screen showing the transfer of a small amount of money. The real amount stolen would only be obvious to the victim if they logged into their account from an uninfected computer. "They wanted to make sure the victim would not find out from their statements. In some cases they deleted transactions completely," said Mr Ben-Itzhak. Anti-fraud systems are designed to detect unusual money transfers, as well as strange behaviour on customers accounts.

Money-making schemes

Money mules are increasingly being recruited by cybercriminals as a way of preventing police finding a direct link to them. "We have spotted money mules being used in the last six months or so," said Mr Ben-Itzhak. The recession has made it easier to recruit people, he thinks.

"There are more people looking for jobs and if an attractive job offer drops into their inbox, they are going to take it," he said. The Ukrainian cyber-criminals hired its "mules" by falsely telling them they would be working for a legitimate business. These "mules" were unaware that they are being sent stolen money, but believed that they are being paid for working from home or other moneymaking schemes.

The money mules in this particular case are being treated as innocent victims and, although they will be questioned, will not face prosecution.

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS

Microsoft CEO's compensation down 6 percent in '09

The value of the compensation package granted to Microsoft Corp. CEO Steve Ballmer fell about 6 percent in fiscal 2009, a year in which weak computer sales cut into the software maker's profits. Ballmer received a pay package valued at $1.28 million for the year that ended in June, according to an Associated Press calculation of figures disclosed in a regulatory filing Tuesday.

Ballmer's salary, which is set at the beginning of the year, increased by 4 percent to $665,833. The CEO's bonus was cut by 14 percent to $600,000 from $700,000 in 2008, according to the company's annual proxy statement filed with the Securities and Exchange Commission. According to the filing, the company's compensation committee evaluates Ballmer's performance in the fiscal year, looks at what other Microsoft executives will be paid and "exercises its judgment" in recommending his bonus. Ballmer could have received up to 200 percent of his base salary, or about $1.3 million.

The balance of Ballmer's pay came in the form of $7,350 in company matches to his retirement savings account and $3,444 in imputed income from life insurance, disability insurance and athletic club membership, or payments in place of an athletic club membership.

Ballmer did not receive stock or stock options in 2009. He currently holds 4.6 percent of Microsoft's shares. Bill Gates, Microsoft's founder and current board chairman, owns 8 percent of the company's stock.

Microsoft's fiscal year ended on a down note in June as the economic crisis continued to hammer technology sales. The Redmond, Wash.-based company's revenue fell 3 percent from 2008, the first such decline since Microsoft went public in 1986. Earnings sank to $14.6 billion from $17.7 billion in 2008.

Microsoft's biggest businesses, Windows and Office, are tied to the health of the PC industry. Since the economic meltdown, consumers and businesses have both cut back on buying computers. The last three months of 2008 marked the PC industry's worst holiday season in six years. For 2009, market research firms IDC and Gartner have both predicted a year-over-year decline in PC shipments, which would be the first such drop since 2001.

The company said that as a whole, executive officers' incentive compensation was 29 percent lower than in 2008. The company said it would not give Ballmer or other executive officers merit-based salary increases in fiscal 2010.

Microsoft reported Ballmer's higher salary, but not his bonus cut, in a draft filing with the SEC on Sept. 19. The company had also previously announced that shareholders will have a chance to vote on a "say-on-pay" measure proposed by the board at its annual meeting on Nov. 19. The proposal would give shareholders a chance to weigh in, in a nonbinding fashion, every three years on executive compensation.

The board is also proposing changes to company bylaws that would give groups of shareholders representing 25 percent or more of outstanding shares the right to call special shareholder meetings — a right Microsoft said in the SEC filing is "increasingly considered an important aspect of good corporate governance."

Shareholders also will have the opportunity to vote on two proposals from their peers. One, from the AFL-CIO Reserve Fund, asks Microsoft to adopt principles for health care that include support for universal, continuous, affordable coverage for individuals and families.

The second, from a shareholder in Ohio, suggests Microsoft list recipients of company charitable gifts over $5,000 on the company's Web site.


  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS

Wireless recharging comes to laptops

That Dell is releasing a new laptop for business customers is the opposite of surprising. But the fact that it contains notable features not seen in any other laptops certainly is. Most everything about the new Latitude Z is expected: It's yet another very thin notebook (a metric which PC manufacturers keep using to try to one-up each other), with a different kind of exterior finish (soft-touch, in this case), and comes in a black cherry. It measures 16 inches across, and is 14 millimeters thin at its most narrow point.

But you probably wouldn't guess that the Latitude Z charges wirelessly. And as far as we can tell, it's the first laptop to do so. Surprised that this is coming from Dell? You're not alone.

The wireless charging is handled elegantly enough. An inductive pad that's built into a laptop stand can accomplish a full recharge in "about the same amount of time" as a standard-issue cabled charger, according to Dell. While smartphone maker Palm has a similar (albeit smaller) wireless charging system for the Pre, and companies like Visteon and Wild Charge have debuted wireless charging accessories for phones, no PC maker has incorporated the idea until now.

Dell wireless charging

It's part of what Dell is terming its new "wireless eco-system." Besides being able to get juice without wires, the Latitude Z will also be able to dock without them. A smaller separate adapter can hook up the laptop with any accompanying monitor, whether it be one in a cubicle, or in a conference room.

Both cost extra, and are by no means cheap ($199 for each), but the intention is for companies to buy, not necessarily individual consumers. Other cool things Dell is introducing: touch-sensitive controls on the screen's bezel, and its first take on "instant on."

The sliding touch controls--not visible to the naked eye--are located on the right side of the bezel and appear when contact is made. Any controls can be customized and placed there, such as screen brightness, volume, or easy access to specific applications. When controlling an application like Excel or a Web browser, the right side of the bezel can be used as a sort of touchpad for scrolling through a spreadsheet or Web page.

The instant-on capability works exactly the way it sounds. Instead of waiting for Windows to boot up, the computer uses a second smaller motherboard and a separate ARM processor. Through a separate, non-Windows interface, it allows e-mail, contacts, calendars, and a Firefox-based Web browser to be accessed right away. E-mail, contacts, and calendars are always running in the background and are constantly being synced.

The ARM processor doesn't have access to the main motherboard or the ports, which should alleviate security concerns, according to Todd Forsythe, vice president of Dell's commercial client product group. The secondary processor--used mostly in smartphones--also draws much less power than a more robust desktop or notebook processor and so while it's running in the background it doesn't drain the battery as fast: using just the instant-on mode will provide up to two days of battery life; when using Windows and the accompanying Intel Core 2 Duo processor, it will get four hours.

Companies like DeviceVM and Phoenix have built businesses out of instant-on capabilities--basically a quick-booting interface built right into the computer's BIOS that isn't dependent on Windows. Dell said it decided not to go with either of those because they wanted to use the separate low-power processor for the background syncing.

What Dell, and DeviceVM, and Phoenix , and plenty of others are doing is part of a trend that's gaining steam: doing a sort of end-run around Windows. HP came out with its own interface on Touchsmart PCs last year that allows for quick sorting between photos, e-mail, and Web browsing on a few models. Lenovo recently introduced a new touch-screen interface for its tablet, and Asus has its own for its popular Eee PC Netbooks and touch-screen desktop called TouchGate.

Most people aren't used to seeing Dell trying new things like this, some of it actually ahead of competitors. Last year, we wrote about how Dell was starting to be a little more risky about the types of products it was trying out. Not new to the market, just new to Dell, which has traditionally had a habit of waiting, analyzing the market's response to new products, and jumping in later with a more efficient, and less expensive way of making that product.

But that way of doing things is over for Dell now. The company has struggled to find the right mix of products and now has less opportunity to be picky. But it's a good sign that the company is trying out smaller, more innovative, and more practical ideas like wireless charging, docking, instant on, and touch interfaces. Though it's only in the Latitude Z right now, we hear these features are stirring a lot of interest in other product groups at Dell. It's easy to see how, for a cheaper price (the Z starts at $1,999), these new features could find much broader acceptance with retail customers.



  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS

Satellites Could Help Keep Hungry Populations Fed

In the early 1980s, scientists at NASA's Goddard Space Flight Center , Greenbelt , Md. , developed the Normalized Difference Vegetation Index (NDVI), an innovative combination of two satellite measurements that allowed them to analyze changes in the "greenness" of Earth as viewed from space. Much like measurements from weather satellites allow meteorologists to track and monitor hurricanes, NDVI lets scientists track droughts, crop infestations, and even full-blown crop failures that lead to widespread famine.

Few non-scientists have ever heard of NDVI, yet this vital sign of the planet has important implications for everyone, said Molly Brown, a Goddard scientist who has N-D-V-I emblazoned on her car's license plate. NDVI has been used to study everything from the spread of disease to the archaeological remains of ancient Rome .

Perhaps most important, Brown said, is that this remote sensing tool will play a key part in helping us to keep food on the table as future populations swell, the climate changes, and pressures on the agricultural system mount.


  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS

Kids need 'free computers'

Apparently the PPTA are going to make submissions to the government regarding accessibility of computers to poor kids. Thousands of - one estimate puts it at 100,000 - kids need 'free computers'. I wonder how many homes with no computer/internet access have Sky TV? A good number. So this is the next 'public good' argument. These children are our future and they need to be properly educated which won't happen if they can't get to the internet to research their homework.

Well actually they can get to the internet. At their local library, internet cafe, at their friends houses and when they are at school. In fact, these are possibly better places for them to be doing their research if their own home is chaotic and overcrowded.

It is the parents who have to do the prioritising. It is the parents who have to put a value on learning over leisure. It is not the job of perfect strangers. And it pains me to say so. Because education is key to raising aspirations and expectations. But what lesson is learnt when people can constantly look to others instead of themselves for solutions?



  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS

Wasatch Computer Technology LLC

Cost Estimator

The new Wasatch Cost Estimator is a powerful business tool that allows users to calculate all costs pertaining to a job before beginning the printing process. This feature makes it easy to perform an accurate calculation of ink usage, media costs, and extra processing charges. When calculations are complete, users can export their results as Comma Delimited Text or directly to a print-friendly HTML web page.

Improved PSS Halftoning

SoftRIP version 6.5 includes improvements to Wasatch's Precision Stochastic Screens halftone method (PSS). This update combines the advantages of Error Diffusion with the full speed and other quality advantages of PSS. It even preserves color profiles, since all profiles made with earlier versions of PSS will continue to work accurately with this update.

ICC Input Profiles

This release provides a greatly expanded suite of ICC input profiles, many with ISO numbers, making it more convenient than ever to match a wide variety of industry-standard color responses. These input profiles enable users to achieve consistent, high quality color with profiles in RGB, CMYK, Web Coated SWOP, and Japan Color, to name a few.

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS

Google Develops 'Noop' Language

Google has developed a language for the Java Virtual Machine, known as "Noop". The language is being positioned as an experiment for developers and coders.

"Noop is a new language that runs on the Java Virtual Machine, and in source form looks similar to Java," according to the Noop Web page. The goal is to build dependency injection and testability into the language from the beginning, rather than rely on third-party libraries as all other languages do."

Noop, pronounced "no op", is "new language experiment that attempts to blend the best lessons of languages old and new, while syntactically encouraging industry best-practices and discouraging the worst offenses," according to Google. Noop will be run either through a translator, compiler, or compiled directly to Java byte code.

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS

New Computer Technology!

  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS

Dust Storm Passing Over Spirit

The amount of electricity generated by the solar panels on Spirit has been declining for the past several Martian days, or sols, as a regional dust storm moved southward and blocked some of the sunshine at Spirit's location. The team operating the rover has responsively trimmed Spirit's daily activities and is keeping an eye on weather reports from observations by NASA's Mars Reconnaissance Orbiter.

Spirit's solar panels generated 392 watt-hours during the mission's Sol 2006 (Aug. 24, 2009), down from 744 watt-hours five sols earlier, but still generous compared with the 240 watt-hours per sol that was typical before a series of panel-cleaning events about four months ago.

"We expect that power will improve again as this storm passes, but we will continue to watch this vigilantly," said JPL's John Callas, project manager for Spirit and its twin, Opportunity. "Spirit remains power positive with healthy energy margins and charged batteries. The weather prediction from the Mars Color Imager team is that the storm is abating, but skies will remain dusty over Spirit for the next few sols."

Recent images from the Mars Color Imager camera on Mars Reconnaissance Orbiter showed this regional storm becoming less extensive Monday even as it shifted southward so that its southern edge covered the Gusev Crater area where Spirit is working. Malin Space Science Systems in San Diego, which operates that camera, provides frequent weather updates to the rover team.

Meanwhile, in JPL's In-Situ Instrument Laboratory, the rover team is continuing testing of strategies for getting Spirit out of a patch of soft soil where it is embedded on Mars. On Sol 2005 (Aug. 23, 2009) Spirit used its panoramic camera to examine the nature of how soil at the site has stuck to the rover's middle wheels. The team has also used Spirit's rock abrasion tool as a penetrometer to measure physical properties of the soil around Spirit by pressing into the soil with three different levels of force. The team is aiming to start sending drive commands to Spirit in September.


  • Digg
  • Del.icio.us
  • StumbleUpon
  • Reddit
  • RSS