Saturday, January 18, 2014
What's coming in 2014?
What's coming to information security world in 2014?
These are my views:
1. Malware will be for profit. No longer about fun.It will be harder to track who is behind it.
2. Cryptolockers or alike will go mainstream.
4. Demand for digital/IT forensic will go up.
5. More providers will enhance their services offering with encryption to respond to NSA's spying activities.
6. Companies and government organisations will collaborate more to fight cybercrimes. More join announcements will be made on successful take-downs of botnet or cybercrime networks.
7. Windows XP end of live will have a high impact and will directly contribute to higher botnet activities. The bad guys are holding their cards now, waiting for the right time to swallow their preys once XP is left orphaned.
8. More malware will target Android devices. I won't be surprised if Cryptolocker invades Android soon (if it does not already did that).
9. Data breaches will continue to rise. We will see more data breaches of big retail or non IT services companies.
10. Big Data will be one of the hot topics discussed.
What's yours?
Acknowledgement:
Picture's source - http://www.flickr.com/photos/danmoyle/11178388835/sizes/z/
Wednesday, November 14, 2012
How secure your SMS token/mTAN/TAC code is really up to you
Users will always click on an URL sent to them right? I bet any information security pros out there must have heard or said this before.
Here is a news reporting that some people in Germany got their bank account swipe out after a Trojan "intercepted/diverted" their mTAN (SMS based one time password).
Excerpt from the news by Thelocal.de:
Berlin state police warned on Tuesday that "bank customers using the
SMS-TAN/mTAN process have become victim of fraudulent money
withdrawals." Several people have reportedly had their bank accounts
emptied in the past few weeks, the police said in a statement.
"In all cases, the SMS containing the mTAN for the online banking system
was caught or diverted," the statement said. "Up until now, those
affected have been customers using a Smartphone with an Android
operating system."