Monday, June 25, 2012

North Korea uses infected games to DDoS South Korea | Naked Security



FILED UNDER: Featured, Law & order, Malware
North and South Korea, courtesy of ShutterstockSouth Korean police arrested a man from Seoul last week, on suspicion of working with North Korea to develop games infected with spyware.
According to a news report in the Korea JoongAng Daily, the 39-year-old game distributor was arrested on June 3 and charged with violating the National Security Law.


The law is North Korea-specific. Passed as the National Security Act in 1948, it outlawed: communism; recognition of North Korea as a political entity; organizations advocating the overthrow of the government; the printing, distributing, and ownership of “anti-government” material; and any failure to report such violations by others.


The man was identified only by his family name, which news outlets render as either Cho or Jo. Police claim that Cho met with North Korean spies who had set up a hacking base disguised as a trading firm in the Northeastern Chinese city of Shenyang.




The North Korean spies were allegedly associated with the country’s Reconnaissance General Bureau.
According to the Federation of American Scientists, this department ferrets out strategic, operational, and tactical intelligence for the Ministry of the People’s Armed Forces and plants spies in South Korea, either via boat or though tunnels under the demilitarized zone.
Korea DMZ
The Seoul Metropolitan Police said that Cho paid the spies tens of millions of won to develop the illegal game software.
Ten million won is equal to US $8520 or £5514.
The police allege that Cho turned to the reconnaissance unit to develop the games at this cheap price and knew they were infected.
According to Geek.com, the cost of the infected games was about one-third of a typical price.
Cho is also accused of setting up a server in South Korea that the North Koreans used in attempts to launch DDoS attacks at South Korean networks.
According to Geek.com, one such recent DDoS attack was launched against South Korea’s Incheon International Airport. Airport departures were disrupted multiple times in the spring of 2011 as a result.
The attack used a botnet of zombified computers that had been infected after their owners downloaded the Trojans by playing the poisoned games.

BotnetBeyond turning players’ computers into zombies, authorities also believe that Cho may have passed along personal information about more than 100,000 registered users to the North Koreans.
The police said Cho retained the personal information of hundreds of thousands of South Koreans, having collected the data from major portals.
This isn’t the first time North Korea has been implicated in cyberwarfare against South Korea.
There have long been claims that North Korea is operating a cyberwarfare unit (presumably being countered by the one alleged to exist in South Korea), and in 2008 it was reported that South Korea’s military command and control centre were the target of a spyware attack from North Korea’s electronic warfare division.
The sexy female seductress at the centre of that case, who was accused ofseducing army officers in exchange for military secrets, was subsequently jailed for five years.
In 2009, a massive DDoS attack crippled 26 South Korean and foreign governmental websites, including military sites.
This spring, between April 28 and May 13, North Korea’s Reconnaissance General Bureau also managed to devastate GPS signals throughout the Korean peninsula.
The Reconnaissance General Bureau’s cultivation of cyber warriors is now at such an advanced state, in fact, that a South Korean expert recently claimedthat North Korea’s abilities to wage a devastating cyber war are behind only those of the US and Russia.

News Center – Springhill Group Home Loans: Tips for Home Employment to Avoid Work-At-Home Scams





1.    You must know the person you are dealing with. Most company that hires employee do not offer to employ you directly, just to sell you training and materials and to look for customers for your work.
2.    Do not be a dime a dozen. Managing a business is just like any other business which requires hard work, skill, good products or services, and time to make a profit. Additionally, there is no such thing as sitting on a rackin’ chair and just waiting for the time of giving checks.
3.    Be observant and cautious about the emails you are receiving that includes an offering of work at home opportunities. Most of these acts are deceptive.
4.    Put into practice the so called “know and pay”. You have to know first everything in detailed before making a plan or action to a certain situation.
5.    Find a picture paints a thousand words. Claims that there are customers for work such as medical billing and craft making may not be true. If the company says it has customers waiting, ask who they are and contact them to confirm. To make an assurance, ask likely customers in your area if they actually hire people to do work at home.
6.    Get references for other people who are doing the work. Ask them if the company kept its promises.
7.    Check of about legal requirements. There are works that cannot do at home and requires some license or certificate that proves you are an authorized person to the work. Check with your state attorney general’s office. Ask your local zoning board if there are any restrictions on operating a business from your home. Some types of work cannot be done at home under federal law. Look for the nearest U.S. Department of Labor in the government listings of your phone book.
8.    Know the return and exchange policy. If you have to buy equipment or supplies, ask whether and under what circumstances you can return them for a refund.
9.    Get rid off the old envelop stuffing scheme. This is a usual scam in which instead of getting materials to send out on behalf of a company, they will give you instructions and will ask you to send them a money for information about working at home, considered as an illegal for the reason that there is no real product or service being offered.
10. Be cautious of the statement: Advance on your pay. This is just their intro into their long tragic story to have an audience and be their listener and soon be their member on the very theatric act. Possibly, they will give you a check for part of your first month’s pay. You deposit it, and the bank tells you the check has cleared because the normal time has passed to be notified that checks have bounced. Then, the criminal will ask you to return a portion of the payment for some different reason. After sending the money back, the check that you deposited finally bounces because it turned out to be an intricate forged. Now the criminal have your payment, and you’re left owing your bank the amount that you withdrew.
11. Make your own research about work-at home opportunities. Look for reviews, articles or even magazines that can give you an advice or tips on how to determine whether the work is accurate or forged. Ask also some of the persons that is same with the profession of the said employer and to really check if there is alike work of your employer’s offering. Before you make an application, reassure all the important information of the employer that you can work with. The in-detailed identification of the company or of the employer in which you can hold, when something wrong happen.

Sunday, June 24, 2012

Springhill Group - Begin with the Basics: Creating a Solid Investment Policy Spring Hill FL


Most builders understand that laying a strong foundation is the key to constructing a good home. Do the job right and the structure will be stable. Do it wrong and it could collapse in Spring Hill.
Local Companies


Edward Jones - Financial Advisor: Manny Tsesmelis
352-686-0338
5173 Mariner Blvd
Spring Hill, FL 34609


Edward Jones - Financial Advisor: Paul Conrad Bauer Financial Group Inc
352-688-0731                                                   352-597-7717
3296 Commercial Way                                    6142 Dorset Rd
Spring Hill, FL 34606                                      Spring Hill, FL 34608




Edward Jones - Financial Advisor: Brande K Sanders
352-796-8819
7 N Main St
Brooksville, FL 34601

stock investing
Buy & Sell Stocks with Plus500™. No Fees,Free Demo, 200€ Bonus!
www.Plus500.com

Still Investing Stocks?
Try the Forex Market. Guaranteed Stop-Loss & Freeze Rate!
www.easy-forex.com

Ask an Investment Advisor Online Now 
4 Investment Advisors Are Online. 
Ask a Question, Get an Answer ASAP.
JustAnswer.com/Investment-Advisor

Springhill Group Counselling | Tumblr


New Zeus Malware Scam Promises Rebates, Security
CSO — A new Zeus P2P malware variant discovered last week by security vendor Trusteer is attempting to scam users of some of the Internet’s most popular and trusted brands — Facebook, Google Mail, Hotmail and Yahoo — with promises of rebates and new security measures.
Slideshow: The Future of Malware
In a blog post, Trusteer CTO Amit Klein ays the scams “exploit the trust relationship between users and these well-known service providers, as well as the Visa and MasterCard brands, to steal users’ debit card data.”
As usual, the fraudsters try to trick users into providing confidential financial information: debit card number, expiration date, security code, and PIN. On Facebook, a web inject offers a 20-percent cash back offer by linking a Visa or MasterCard debit card to their account.
What is unique about this one, Klein writes, is that “in the attacks against Google Mail, Hotmail and Yahoo users, Zeus offers an allegedly new way of authenticating to the 3D Secure service offered by the Verified by Visa and MasterCard SecureCode programs.”
Trusteer’s director of product marketing, Oren Kedem, says while web injects are common, this is the first time he has seen a scam try to use 3D Secure. “Many customers are familiar with it,” he says, “and it has become so trustworthy that victims could see it as a plausible approach.”
In this case, the lure is convenience. Victims are told that if they link their debit card to their web mail accounts, “all future 3D Secure authentication will be performed through Google Checkout and Yahoo Checkout respectively,” and, of course, that they will be protected from fraud in the future, by providing their confidential information. The Hotmail attack is similar.
Users are “reassured” that, “Your Debit Card pin is ONLY used for verification purposes. It activates CashBack option. Never disclose your Debit PIN to anyone, including family and friends. Your Debit PIN is confidential and is for your use online.”
Kedem says he does not know how many people have fallen for the scam, “but since this is a version of Zeus, which is the No. 1 malware out there and since just about everybody uses one of these services, there is a large number of targets.” He says Trusteer has notified the companies of the new variant.
Kedem says the most common way to get infected with the Zeus malware is by “drive-by” download - simply by visiting a website with the malware present. It then takes over the user’s browser when one of the targeted sites, like Facebook, is visited. He says users should take the usual precautions with any unsolicited offer they see online that asks for confidential information.