Comments on: A Tale of Two Victims http://krebsonsecurity.com/2010/02/a-tale-of-two-victims/ In-depth security news and investigation Sat, 11 Feb 2012 19:29:31 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: F-3000 http://krebsonsecurity.com/2010/02/a-tale-of-two-victims/comment-page-1/#comment-24570 F-3000 Thu, 28 Jul 2011 10:28:03 +0000 http://www.krebsonsecurity.com/?p=189#comment-24570 Oh, not to forget! It is M$'s fault, when your PC gets infected within 10 minutes after plugging it online. Oh, not to forget! It is M$’s fault, when your PC gets infected within 10 minutes after plugging it online.

Like or Dislike: Thumb up 0 Thumb down 0
]]> By: F-3000 http://krebsonsecurity.com/2010/02/a-tale-of-two-victims/comment-page-1/#comment-24569 F-3000 Thu, 28 Jul 2011 10:22:09 +0000 http://www.krebsonsecurity.com/?p=189#comment-24569 It's Microsoft's fault in a manner of producing such a poor quality software as overall. Every OS has flaws, but with the price of Windows, I would expect to get a lot better designed and written software. It is not fault of the M$, when an user wishes to see the dancing bunny and installs the malware manually. But it is M$'s fault, when the malware installs by merely visiting a compromised site. IE is one of the unsafest browsers available. It's a product of M$. Then you have Windows, a product of... An example? Using Firefox on Ubuntu (linux), I can browse pornsites all I want, without getting an infection. Doing same with Windows? With IE?! As another example, With FF+Ubu, only thing I can get compromised in Facebook, is my FB account. And then, there's that botnet called coobface, or what it's name was... Every OS has flaws, but with the price of Windows, I would expect to get a lot better designed and written software. It’s Microsoft’s fault in a manner of producing such a poor quality software as overall.

Every OS has flaws, but with the price of Windows, I would expect to get a lot better designed and written software.

It is not fault of the M$, when an user wishes to see the dancing bunny and installs the malware manually. But it is M$’s fault, when the malware installs by merely visiting a compromised site.

IE is one of the unsafest browsers available. It’s a product of M$. Then you have Windows, a product of…

An example? Using Firefox on Ubuntu (linux), I can browse pornsites all I want, without getting an infection. Doing same with Windows? With IE?!
As another example, With FF+Ubu, only thing I can get compromised in Facebook, is my FB account. And then, there’s that botnet called coobface, or what it’s name was…

Every OS has flaws, but with the price of Windows, I would expect to get a lot better designed and written software.

Like or Dislike: Thumb up 0 Thumb down 0
]]> By: Eguardo http://krebsonsecurity.com/2010/02/a-tale-of-two-victims/comment-page-1/#comment-22979 Eguardo Wed, 08 Jun 2011 12:21:55 +0000 http://www.krebsonsecurity.com/?p=189#comment-22979 "I only run Microsoft Security Essentials. I’m savvy enough to not put myself in a position where malware has any chance to install on my machine." So that means your computer is turned off, unplugged and locked in a safe? Oh wait, no, you are on the internet. You can literally get a malware infection anywhere, such as from an advertisement on a trusted site, served from Uzbekistan. “I only run Microsoft Security Essentials. I’m savvy enough to not put myself in a position where malware has any chance to install on my machine.”

So that means your computer is turned off, unplugged and locked in a safe? Oh wait, no, you are on the internet. You can literally get a malware infection anywhere, such as from an advertisement on a trusted site, served from Uzbekistan.

Like or Dislike: Thumb up 1 Thumb down 0
]]> By: Pete http://krebsonsecurity.com/2010/02/a-tale-of-two-victims/comment-page-1/#comment-1767 Pete Thu, 11 Feb 2010 08:23:34 +0000 http://www.krebsonsecurity.com/?p=189#comment-1767 Because money-mules are cheap and easy to use, and local too. Because money-mules are cheap and easy to use, and local too.

Like or Dislike: Thumb up 1 Thumb down 0
]]> By: Rose http://krebsonsecurity.com/2010/02/a-tale-of-two-victims/comment-page-1/#comment-1758 Rose Thu, 11 Feb 2010 06:14:37 +0000 http://www.krebsonsecurity.com/?p=189#comment-1758 Why can't we demand the government demand that Banks stop all ACH's to the countries where the stolen monies are going to? How many more people need to get hurt and lose their jobs while the STUPID banker allow the crimes to happen under their watch. The fox is in charge of the hen house. Why can’t we demand the government demand that Banks stop all ACH’s to the countries where the stolen monies are going to? How many more people need to get hurt and lose their jobs while the STUPID banker allow the crimes to happen under their watch. The fox is in charge of the hen house.

Like or Dislike: Thumb up 0 Thumb down 2
]]> By: DaFyre http://krebsonsecurity.com/2010/02/a-tale-of-two-victims/comment-page-1/#comment-1545 DaFyre Fri, 05 Feb 2010 20:34:34 +0000 http://www.krebsonsecurity.com/?p=189#comment-1545 Perhaps those of us that know (even a little bit) about this kind of stuff should get together and make a screen cast or short video or something and post it on to get people aware of this particular attack vector. Ways that crooks can get your information (phishing, fake web-sites, et al). Perhaps those of us that know (even a little bit) about this kind of stuff should get together and make a screen cast or short video or something and post it on to get people aware of this particular attack vector.

Ways that crooks can get your information (phishing, fake web-sites, et al).

Like or Dislike: Thumb up 3 Thumb down 0
]]> By: Elie http://krebsonsecurity.com/2010/02/a-tale-of-two-victims/comment-page-1/#comment-1542 Elie Fri, 05 Feb 2010 19:10:08 +0000 http://www.krebsonsecurity.com/?p=189#comment-1542 I will heed you advice and do what you suggeste and more. I will heed you advice and do what you suggeste and more.

Like or Dislike: Thumb up 1 Thumb down 0
]]> By: Rose http://krebsonsecurity.com/2010/02/a-tale-of-two-victims/comment-page-1/#comment-1534 Rose Fri, 05 Feb 2010 07:18:29 +0000 http://www.krebsonsecurity.com/?p=189#comment-1534 In the case of BG Cinema, and Shared Hope, a good bank would have contacted their customer before sending the money out. When i talked to the owner of the Cinema, he told me that the bank sent out 2 batches of AChs on two consecutive days, in Violation of the agreement he had with the bank. they also told him that they notified the FBI, and gave him the inspector" s name and phone number. When he called the FBi, they had not even heard of the case. They also lost 3 of his bank account signature cards, sent out ACH's to the wrong accounts and committed several other ridiculous mistakes. I suggested that he file a compaint with the FBI, Departments Of Financial Institutions , Attorneys General in all the stated where the bank operates, and the SEC since the bank is a public company. He said that he is no longer intersted in getting his money back, but more intersted in letting every busines owner he can know what happened to him, and to share with them his experiences and knowledge. he said " if you bank on line, you must be vigilant about watching your account, especially when some one gives your money away, and then blames you for the mistakes". I was told that the customers private information was out in the open during the transition from the failed bank to Umpqua. The common denominator between the BG Cinema and Shared Hope is the bank, and i believe that is how the thieves got the information. Since the Columbian's artilce, several other people have mentioned that they had a very similar experience . An Investigation is in order. In the case of BG Cinema, and Shared Hope, a good bank would have contacted their customer before sending the money out. When i talked to the owner of the Cinema, he told me that the bank sent out 2 batches of AChs on two consecutive days, in Violation of the agreement he had with the bank. they also told him that they notified the FBI, and gave him the inspector” s name and phone number. When he called the FBi, they had not even heard of the case. They also lost 3 of his bank account signature cards, sent out ACH’s to the wrong accounts and committed several other ridiculous mistakes.
I suggested that he file a compaint with the FBI, Departments Of Financial Institutions , Attorneys General in all the stated where the bank operates, and the SEC since the bank is a public company.
He said that he is no longer intersted in getting his money back,
but more intersted in letting every busines owner he can know what happened to him, and to share with them his experiences and knowledge. he said ” if you bank on line, you must be vigilant about watching your account, especially when some one gives your money away, and then blames you for the mistakes”.
I was told that the customers private information was out in the open during the transition from the failed bank to Umpqua. The common denominator between the BG Cinema and Shared Hope is the bank, and i believe that is how the thieves got the information. Since the Columbian’s artilce, several other people have mentioned that they had a very similar experience . An Investigation is in order.

Like or Dislike: Thumb up 1 Thumb down 0
]]> By: Rose http://krebsonsecurity.com/2010/02/a-tale-of-two-victims/comment-page-1/#comment-1532 Rose Fri, 05 Feb 2010 06:59:11 +0000 http://www.krebsonsecurity.com/?p=189#comment-1532 Good Job BK. I live in Clark County, and i have first hand knowledge with this case from the Columbian Newspaper and from talking to former employees of Umpaqua in Vancouver. Umpqua took over a failed bank in January of 09 and they botched that takeover so bad and now they are taking over Evergreen Bank in Seattle. if you want to learn more about Umpqua Bank, Google "Umpqua sued over summit role". The bank's culture leaves little to be desired. Supposedly you trust bankers with your money. Not this one. Several former employees left becasue senior management was asking them to LIE. to put the blame for mistakes on the customers. Good Job BK. I live in Clark County, and i have first hand knowledge with this case from the Columbian Newspaper
and from talking to former employees of Umpaqua in Vancouver. Umpqua took over a failed bank in January of 09 and they botched that takeover so bad and now they are taking over Evergreen Bank in Seattle.
if you want to learn more about Umpqua Bank, Google “Umpqua sued over summit role”. The bank’s culture leaves little to be desired. Supposedly you trust bankers with your money. Not this one. Several former employees left becasue senior management was asking them to LIE. to put the blame for mistakes on the customers.

Like or Dislike: Thumb up 2 Thumb down 0
]]> By: George http://krebsonsecurity.com/2010/02/a-tale-of-two-victims/comment-page-1/#comment-1481 George Wed, 03 Feb 2010 20:01:24 +0000 http://www.krebsonsecurity.com/?p=189#comment-1481 "But the truth is, most banks make that decision on a case-by-case basis." The bankers are likely pragmatists. Their legal dept probably reviewed their legal standing and signed forms on file to determine their liability, settlement costs and potential PR for each case. “But the truth is, most banks make that decision on a case-by-case basis.”
The bankers are likely pragmatists. Their legal dept probably reviewed their legal standing and signed forms on file to determine their liability, settlement costs and potential PR for each case.

Like or Dislike: Thumb up 0 Thumb down 1
]]>