The Week in Security

On Ice On Ice

The Ice IX malware has been updated to fool Facebook users into exposing their credit card details. The malware adds a credit card field to the social network's login page. The modified page claims the account info is needed for security purposes. (Image: ThinkStock)

Whose Breach Is It Anyway? Whose Breach Is It Anyway?

There are some discrepancies between Global Payments' account of its data breach and that of Brian Krebs, who broke the news but did not initially name the breached processor. One possibility, he says, is that his report was about "a separate, as-yet undisclosed breach at another processor." (Image: ThinkStock)

Business as Usual Business as Usual

Global Payments' data breach, which it estimates exposed up to 1.5 million card account numbers, wasn't bad for business. The company continued to sign new customers even as its breach made headlines. (Image: ThinkStock)

RIP PCI? RIP PCI?

The Payment Card Industry data security standard took a hit from the Global Payments breach. Though experts say the standard improves security, breaches keep happening at companies that were considered compliant. (Image: ThinkStock)

Advertisement
Jail Time Jail Time

A man landed in jail for stealing $320,728 from Chase Bank in a card-skimming scam that spanned seven counties in California. Gervork Aroutiounyan was sentenced to three years and eight months in state prison. A co-conspirator, Gnel Snapyan, will be sentenced in June.(Image: ThinkStock)

Price of Prepaid Price of Prepaid

Google bought the prepaid processor TxVia to improve its mobile wallet. Though Google didn't cite security issues for motivating this deal, the prepaid account tied to the Google Wallet had a short-lived but well-publicized security flaw that let users bypass the PIN to access the stored funds. (Image: ThinkStock)

Sticky Fingers Sticky Fingers

A security guard who stole $5,160 from an ATM he was replenishing received a nine-month jail sentence. The guard, Glen Robert Cherry, of New Zealand, must also repay the amount he stole. (Image: ThinkStock)

Behind Bars Behind Bars

A "stunning 20-month hacking spree" landed a U.K. identity thief an even longer jail sentence: two years and two months. Edward Pearson was convicted of possessing the stolen personal details of over 8 million adults, though he committed just $3,700 in fraud. (Image: ThinkStock)

Advertisement

A big breach raises big questions and identity thieves face justice in the major security stories of the week through April 5.

 

Already a subscriber? Log in here
Please note you must now log in with your email address and password.