Network Security Roundup for August 19, 2003

CNN Money: Citibank Warns of Scam18-Aug-03 15:20 ET

Story Highlights:“Citibank warned customers Monday not to fall for an e-mail scam that threatened to shut down their checking accounts if they failed to provide their Social Security numbers. Citibank, a division of Citigroup Inc., said ‘numerous’ people received the e-mail, which purported to advise them of conditions affecting their accounts. It said the e-mail linked to a Web site that looks like Citibank’s, and asked users for their Social Security numbers.”

Full Story on CNN Money

Story Highlights:“While the second wave of an Internet attack by the ‘MSBlaster’ worm barely caused a ripple over the weekend, over a half million computers were still infected by the malicious program on Monday. Meanwhile, a new ‘good Samaritan’ version of the worm was released. Dubbed ‘Welchia,’ this worm actually deletes MSBlaster and attempts to install the proper security patch on vulnerable machines.”

Full Story on MSNBC

Story Highlights:“An invisible force from the Internet grabbed Steve Watts’ laptop and wouldn’t let go. He tried to download a software file that would help fix the problem, but the Internet worm kept rebooting his computer every two minutes.”

Full Story on CBS News

Story Highlights:“Antivirus companies warned Tuesday that a new version of the Sobig virus is rapidly spreading on the Internet, the latest in a string of Sobig computer worms to be released. The new worm, W32.Sobig.F, first appeared on Tuesday, prompting antivirus software companies to release updated virus identity files to detect and stop the new threat.”

Full Story on PCWorld

Story Highlights:“Ethical hacking is one of the most intriguing and exciting elements of our work at CQUR IT. In most engagements, our efforts involve attempting to penetrate a client’s network, documenting the results of our efforts, and recommending optimal strategies for mitigating the risks we have identified. A recent engagement for a software development firm took an interesting twist at the onset of the project, as we quickly discovered the client’s FTP server had already been hacked and was being used for illegal purposes.”

Full Story on TechRepublic