Hackers Target Banks, Other Security Woes

A new class of malicious softwares directed at online security technology implemented by Bank of America and other financial institutions, reports Washington Post blogger Brian Krebs.

It thwarts the “site key” technology designed to prevent theft of user names and passwords from a victim’s computer. The unique picture upon log-in is supposed to assure users that it’s not a fake site, but hackers’ technology has allowed them to steal the “site key” and store it with the user’s sign-in information.

In other security news:

• The state of Massachusetts is warning 150,000 members of its Prescription Advantage insurance program that their personal information might be in the hands of an identity thief. It’s not releasing details of the breach, citing an ongoing criminal investigation, according to InfoWorld.
• The California government Web site hacked in October, hosted by the Transportation Authority of Marin, again is seeded with pornography and trying to direct people to sites laden with malware, reports eWEEK. The previous hacking prompted closure of the entire state government’s Internet and e-mail service.
• The British government confirmed this weekend it has lost two more unencrypted computer disks containing personal information on thousands of citizens, reports Times Online. The head of the U.K. tax agency resigned amid the furor over two previous lost disks.
• And the head of spy agency MI5 has written letters to 300 banks, accounting and legal firms, warning that China is spying on the computer systems of British corporations, reports BBC News. The letter outlines “signatures” that can be used to identify Chinese trojans and a list of internet addresses that have been used to launch attacks.