The Reg Security: Mobe SIM crypto hijack threatens millions: Here' s HOW IT WORKS [Mon Jul 29 2013]

Dear etechnews today,

Your weekly security newsletter from theregister.co.uk
for the week ending 29th July 2013


RSA Conference Europe

Over 70 information security track sessions plus debates and keynotes.
Build your knowledge and further your career.

http://reg.cx/26Xk





*** Security News ***

Western spooks' banned Lenovo PCs after finding back doors
Report suggests 'Five Eyes' alliance won't work with Chinese PCs
http://www.theregister.co.uk/2013/07/29/lenovo_accused_backdoors_intel_ban/

British boffin muzzled after cracking car codes
Meanwhile in the USA, DARPA funds similar research
http://www.theregister.co.uk/2013/07/28/birmingham_uni_car_cracker_muzzled_by_lords/

Kiwis rally against 'snoops' charter' law
PM Key calls protesters 'misinformed' and 'politically aligned'
http://www.theregister.co.uk/2013/07/28/kiwis_rally_against_snoops_charter_law/

Pacemaker hack legend Barnaby Jack dies just before Black Hat
revelations
Tributes flood in for security titan
http://www.theregister.co.uk/2013/07/26/barnaby_jack_dies/

UK gov: Brit biz barons, get your privates in check before the spooks
arrive
MI5 and GCHQ rub hands with glee at FTSE350 security audit
http://www.theregister.co.uk/2013/07/26/gchq_teams_with_ukgov/

Deadly Spanish train disaster exploited by malware mail scumbags
Some people will click on anything
http://www.theregister.co.uk/2013/07/26/spanish_train_disaster_scams/

Five charged as Feds bust largest credit-card hack in history
Hundreds of millions stolen from biggest names in US
http://www.theregister.co.uk/2013/07/26/five_charged_as_feds_bust_largest_creditcard_hack_in_history/

Japanese police bust poker-playing IT boss for Android malware
Infected apps targetted the terminally stupid
http://www.theregister.co.uk/2013/07/25/japanese_police_bust_pokerplaying_it_boss_for_android_malware/

Raid millions of bank accounts. New easy-to-use tool. Yours for $5,000
F... KINS hell!
http://www.theregister.co.uk/2013/07/25/kins_banking_trojan/

LinkedIn snaps shut OAuth login token snaffling vulnerability
Just in case anyone wanted to add CEO of Yahoo! to your online CV
http://www.theregister.co.uk/2013/07/25/linkedin_oauth_token_snaffling_vuln/

Android 'Master Key' DEMON APPS sniffed out in China
Send for the doctor, send your IMEI to attackers
http://www.theregister.co.uk/2013/07/25/malicious_android_master_key_apps_found_in_china_symantec/

World+Dog hates PRISM: Cloud Security Alliance
We don't need no steenkin' spooks
http://www.theregister.co.uk/2013/07/25/worlddog_hates_prism_cloud_security_alliance/

UK pots 'n' pans outfit Lakeland scalded by hack attack
Saucepan Man rattled. Password reset applied
http://www.theregister.co.uk/2013/07/24/lakeland_breach_passwords_reset/

Bad Vibes, man: Babble app chaps unwrapped in phish trap hack flap
Viber website pwned, privates leaked all over the 'net by Syrian
hackers
http://www.theregister.co.uk/2013/07/24/viber/

New Kiwi spook law allows domestic prying
Kim Dotcom fair game under revised statute
http://www.theregister.co.uk/2013/07/24/kiwis_set_to_get_new_spook_law/

Top server host OVH warns of 'multi-stage' hacking attack
'Higher level of paranoia' suggests EU and US users should change
passwords
http://www.theregister.co.uk/2013/07/23/top_server_host_ovh_warns_of_multistage_hacking_attack/

Cisco coughs $2.7bn for Sourcefire
Gorges on intrusion prevention tech player
http://www.theregister.co.uk/2013/07/23/cisco_buys_sourcefire/

E-shopkeepers stabbed with SQL needles 'twice' as much as other sites
US number-one source of injection attacks, says security biz
http://www.theregister.co.uk/2013/07/23/imperva_web_app_threat_survey/

Symantec snaps up PasswordBank, touts SSO logins to biz
Prepares to punt unwanted tech at sceptical industry
http://www.theregister.co.uk/2013/07/23/symantec_passwordbank_purchase/

Oi, Google, you ate all our Wi-Fi keys - don't let the spooks gobble
them too
Privacy ninjas want anti-NSA encrypted Android backups
http://www.theregister.co.uk/2013/07/23/google_wlan_password_backup_flap/

Tango down! Chat app millions ransacked by pro-Assad hacktivists
And handed straight to the Syrian govt, we're told
http://www.theregister.co.uk/2013/07/23/tango_chat_smackdown/

Ubuntuforums.org cracker promises no password release
'Don't worry about a DB leak. That isn't how I like to do things' says
'Sputn1K'
http://www.theregister.co.uk/2013/07/23/ubuntuforums_cracker_promises_no_password_release/

Phantom apps appear in Chinese fanbois' iTunes accounts
Chinternet a-flutter with speculation and conspiracy theories
http://www.theregister.co.uk/2013/07/23/china_itunes_phantom_app_downloads/

Bloke raises hand in vid, claims: I sparked Apple dev site hack panic
'I have 100,000+ users' details ... please don't blacklist me'
http://www.theregister.co.uk/2013/07/22/im_not_a_hacker_says_apple_bloke/

Mobe SIM crypto hijack threatens millions: Here's HOW IT WORKS
You'll kick yourself when you know how
http://www.theregister.co.uk/2013/07/22/mobile_gsm_sim_card_crypto_crack/

Secret ROYAL BABY birth VIDEO leaked! (And other malware scams)
We KNEW there'd be an IT angle on the little blighter
http://www.theregister.co.uk/2013/07/22/beware_royal_baby_malware_scams_warns_expert/

Rotten hackers feast on mouldy Java flaws
Updates don't remove the elderly versions...
http://www.theregister.co.uk/2013/07/22/java_security_omnishambles/

HP closes StoreVirtual backdoor, slings key
Factory account still present, now requires one-time password
http://www.theregister.co.uk/2013/07/22/hp_closes_backdoor_slings_key/



RSA Conference Europe

Over 70 information security track sessions plus debates and keynotes.
Build your knowledge and further your career.

http://reg.cx/26Xk




------------------------------------------------------------------------

This email was sent to garn14.tech@blogger.com

To change your email or your email subscriptions

http://account.theregister.co.uk/login/

To unsubscribe from all The Register newsletters

http://account.theregister.co.uk/unsubscribe/649203/acc978a1

The Register and its contents are Copyright © 2013 Situation Publishing.
All rights reserved.