2013
Hackers Keep Phishing for Apple IDs
People spend a lot of money on iTunes and Apple's App Store, so it's not surprising that their Apple IDs would prove tempting targets for hackers. …
Attackers Using Overlooked Connected Devices to Launch 'DrDoS' Attacks
Criminals are using network connected devices to launch Distributed Reflection and Amplification Denial of Service (DrDoS) attacks. Leveraging IP-bas…
New Member of the CZ.NIC Association
The companies ACOMWARE s. r. o. and WEBNAMES s. r. o. are new members of the CZ.NIC Association as of 1 May 2013. ACOMWARE s. r. o. and WEBNAMES s. r…
A Series of Articles about internet security
Started today, there will be published new series of articles on the Root.cz websites. This series will point at internet security. First article is …
IT 13 Conference: Especially for 3D Printer Enthusiasts
Once again, experts will primarily focus on themes associated with IPv6 and security. Josef Průša, pioneer of open hardware for 3D printing in the Cz…
Cisco Highlights Possible Exploit Vector Used in DarkLeech Web Server Attacks
Attackers are exploiting a vulnerability in a popular website configuration tool (Horde/IMP Plesk) to gain remote access to web servers, said Cisco r…
Critical bug in Viber aplication threatening smartphones
Extremely dangerous vulnerability affects the mobile application of this communication platform on the Andriod operating system.
Java: Attackers exploit recently repaired vulnerabilities
Through the recently repaired vulnerability has been infected a large number of computers.
108,000+ account details of Sims players leaked
NewSeaSims, a website where Sims players can download custom content for their characters, has suffered a breach which resulted in the compromise of …
Beware of fake SourceForge site offering malicious downloads
Cyber crooks have been misusing the reputation of the popular online source code repository SourceForge (sourceforge.net) and have been pushing out m…
Wide-scale attack against WordPress blogs reported
Security firms have been tracking an escalating number of "brute force" attacks against WordPress installations, which have been trying out logins su…
90 Percent of Game Hacks Infected with Malware, AVG Warns
Nearly 90 percent of unauthorized software for popular computer games are infected with malware. The list includes unpirated "cracked" games, license…
MMS - Reply Vodafone (20130410)
E-mail is send with forged sender address reply@vodafone.xx, where xx is national domain, probably identical with national domain of recipient. Forge…
How to catching malware
In our today blogpost on blog site of CZ.NIC association we deal with our experience with one link, which is spreading via skype.
Czech National Domain Among the Fastest Growing in the EU
In 2012 the Czech national domain .CZ had nearly 21,000 new registrations per month and surpassed the one million domain mark overall (ccTLD). Also t…
Serious Vulnerabilities Found in Popular Home Wireless Routers
Hackers love to attack Java. Why? Well, not only because it is full of holes, but because it’s everywhere, embedded on endpoints, Web browsers, mobil…
New statistics
Today CZ.NIC Association has released a new statistics which can be found at https://stats.nic.cz/. New statistics monitor information divided into c…
Soaring of Bitcoin value continues to attract cybercrime
The most attentive readers and those who are interested in the main trends of virtual currency will surely have noticed the soaring of prices of Bitc…
Patch time for PostgreSQL
The maintainers of the PostgreSQL database have released an urgent patch to cope with a vulnerability that allows remote users to crash servers.
Thousands of compromised Apache servers direct users to malware
The malware infects Linux servers running Apache 2.2.2 and above. The malware injects iFrames into the sites hosted on that compromised box. These si…
DHS, FBI warn over TDoS attacks on emergency centers
Federal law enforcement officials are reporting a rise in attacks in which the telephone lines of emergency call centers were flooded with bogus call…
Facebook chat spreading the Dorifel malware
Your Photos? LOL - if you see this message with a link, don't click it as it will install the Dorifel virus. It looks like that the persons behind Do…
CSIRT.CZ warns Czech users: watch out for spam claiming your pictures have been misused
Another wave of spam messages trying to get users to click on an attached link has appeared. The text of the spam is similar to this: “Hi, s…
Pay attention and dont tell your PIN
Last some days some czech bank find out on their ATMs stickers which encourage users to say their PIN aloud instead to put them via keyboard.
The trick behind camouflaged links
By using JavaScript, links can be modified in such a way that even the most attentive user will not notice anything amiss. This can be exploited by a…
VSkimmer Botnet Targets Credit Card Payment Terminals
The malware, vSkimmer, can detect the card readers, grab all the information from the Windows machines attached to these readers, and send that data …
Fake ‘CNN Breaking News Alerts’ themed emails lead to Black Hole Exploit Kit
Cybercriminals are currently mass mailing tens of thousands malicious ‘CNN Breaking News’ themed emails, in an attempt to trick users into clicking o…
Hacking Java Applications using JavaSnoop
Let us see the various approaches currently available for testing of Java based thick client applications and their respective drawbacks.
High-End Digital Cameras can Forward Pictures to Attackers
High-end DSLR cameras come with a multitude of features for sharing pictures, but do they really reveal the contents only to their owners? According …
Gaming platforms as vector of cyber attack
The Origin platform allows malicious users to exploit local vulnerabilities or features, by abusing the Origin URI handling mechanism. In other words…
Huawei USB modems vulnerable
Huawei has been accused of poor security practice by Russian researcher Nikita Tarakanov, who told Black Hat Europe last week that the vendor's 3G an…
CZ.NIC Releases the First Stable Version of Datovka for Android
Datovka for Android is one of the CZ.NIC Labs projects for communicating with egovernment mailboxes.
Prague, 18 March 2013 – The research and developm…
Recap of the (D)DOS Attacks of 4-7 March
This document provides insight into the period between 4 and 7 March, which saw a series of (D)DOS attacks launched against www services operated in…
The CZ.NIC Association is Ready for Potential Attacks
Thanks to the robustness of the entire system the CZ.NIC Association is using, it is unlikely that its operation could be interrupted in the event of…
Czech news servers are under DDOS attack
From today morning greatest czech news servers are under attack, which have knocked out their websites.
Web page fills up hard disk
Developer Feross Aboukhadijeh has published a simple technique that allows a web page to fill up a hard disk without any action on the user's part. I…
New Member of the CZ.NIC Association
The company ComSource s. r. o. is a new member of the CZ.NIC Association as of 1 March 2013. ComSource company become a member of the Chamber of Doma…
Common Virtualization Vulnerabilities and How to Mitigate Risks
Virtualization has eased many aspects of IT management but has also complicated the task of cyber security.The nature of virtualization introduces a …
Researcher unearths two new Java zero-day bugs
A Polish security firm known for rooting out Java vulnerabilities has reported two new bugs in the browser plug-in to Oracle. Vulnerabilities affect …
Banking apps not safe from OS vulnerabilities
Mobile banking apps rely on tools such as HTTPS and sandboxing to keep safe, but operating system vulnerabilities may render such measures useless an…
New Patches from Adobe and Microsoft
Adobe and Microsoft each have issued security updates to fix multiple critical vulnerabilities in their products. Adobe released updates for Flash Pl…
Facebook malware
How does it works, how to protect yourself against it and what to do if you get infected?
9 Tips to Stay Safe on Public Wi-Fi
The number of free public Wi-Fi hotspots is growing, but not every hotspot can provide the protection of a private home network. Your notebook, table…
New Ransomware Encrypts Victim Data
An unusual new strain of ransomware makes good on its threat, doing what the majority of other varieties only claim to do. The Trojan actually encryp…
How to fix the UPnP security holes
First, and foremost, you need to make sure you've blocked UPnP at your Internet gateway. Specifically, you need your firewall to block any system fro…
Security flaws in Universal Plug and Play expose million devices
Over 80 million unique IPs were identified that responded to UPnP discovery requests from the internet. The risk is an attacker could “execute arbitr…
Password Cracker Targets Siemens S7 PLCs
Siemens S7 programmable logic controllers, the same PLC family exploited by the Stuxnet malware, are in the crosshairs of a password-cracking tool th…
Eight Simple Tips for Securing Your Computer
Do you have anti-virus software on your computer? If you do, congratulations. You have taken the first step toward real computer security. However, m…
Security Flaws Leave Networked Printers Open To Attack
Printers that use popular print server software sold by Hewlett-Packard are vulnerable to attacks that can bypass built-in biometric defenses, recove…
Microsoft Releases Fix for Critical IE Vulnerability
Microsoft has released a fix for a critical remote code execution flaw in Internet Explorer that is being actively exploited. The fix, MS13-008, did …