Sunday, November 30, 2014

62% of Medical Websites Vulnerable and could be hacked

›
A recent review of data from some recent botnet activity indicates that as many as 62% of known Medical or Medically related websites could ...
Thursday, November 27, 2014

CRITICAL ALERT: Hackers are just waiting on Cyber Monday...

›
SLC Security Services LLC is providing this alert in regards to the upcoming "Cyber Monday". We are seeing indicators that hackers...
Wednesday, November 26, 2014

SLC Staff are in the SOC... Monitoring the situation! ELEVATED PROTECTION LEVEL

›
Members of the security team at SLC Security are in the SOC. ALERT: Violent agitators, shots fired, looting, bricks & rocks being thro...

BREACH: Xerox and Texas Health and Human Services Commission Dispute Leads to Breach Notification via OSINT-X Newswires

›
An ongoing legal dispute between the Texas Health and Human Services Commission and its former contractor, Xerox, has led the state agency ...

Stolen Cards used on Charity Sites to Validate if they are Valid Cards

›
We have seen several reports today and yesterday of stolen cards being tested by carders on charity sites. If you operate a charity web site...
Monday, November 24, 2014

BREACH: City of Cleveland Police Website Hacked

›
Anonymous claims responsibility for the hacking of the Cleveland Police Website. A group of hackers claimed responsibility Monday for shut...
Thursday, November 20, 2014

General Mills has 3 Compromised Host

›
A company of this size should be able to manage their security infrastructure however 3 of their machines have showed up on our blacklist as...

GPS Tracker Vulnerability

›
During some research this week we tested several GPS trackers that offer bluetooth and we made an interesting discovery. All of the GPS trac...

1.5 Million Passwords Floated for Sale

›
SLC Security Services LLC has been made aware of a new password list being put up for sale on Darknet. The password file consist of major se...

EMAIL ISSUES: Texas A&M University-Kingsville

›
For the past few weeks, a phishing e-mail has had success in catching people’s information, causing it to circulate further throughout the ...

BOTNET Wall of Shame 11-20-2014

›
11-20-2014,50.193.61.78,Comcast Cable Communications Holdings, Inc 11-20-2014,54.68.211.27,Amazon Technologies Inc. 11-20-2014,67.222.114....
Monday, November 17, 2014

BOTNET Wall of Shame

›
11-17-2014,71.43.89.74,Time Warner Cable Internet LLC 11-17-2014,70.154.153.120,BellSouth.net Inc.
Sunday, November 16, 2014

SLC Security Services LLC OSINT system attacked by botnet

›
We want to send out personal thank you to the operators of this particular botnet for allowing us the opportunity to map out all the host th...

BREACH: U.S. State Department Hacked - Unclass Network Shut Down via OSINT-X Newswires

›
Unclassified Email Network Shut Down For Security Reasons The U.S. State Department has temporarily shut down its entire unclassified emai...
Friday, November 14, 2014

DHL the next to fall?

›
Remember when UPS stores started getting smacked? How there was a delay in information that we reported right here. Today we are making a pr...

NOTICE: Virginia Polytechnic Institute and State Univ

›
Although it has not been publicly disclosed we can tell you that we have data coming from this entity that is quite troubling. It looks like...

BOTNET Wall of Shame - This will be an ongoing feature of the blog

›
The following host were detected during our last review. These are the results out of the first 100 in the list. There are over 7600 in the ...
Thursday, November 13, 2014

Entity Portal Coming Soon...

›
Honestly we are very tired of telling companies that they are infected, hosting malware or owned. What we are about to start doing is just p...

Botnet List - PENDING

›
Later this week we will post a list of organizations that have been identified as having machines that are actively part of a larger botnet....

BREACH: Anthem Blue Cross Data Breach

›
This is not news to us but we are glad they finally disclosed it. Now if the other 2 Blue Cross locations would do the same we would feel li...

HACKING ACTIVITY: TSB Bank

›
Cyber-criminals are stealing signatures and personal details from hacked email accounts to try and dupe bank staff into releasing cash. T...
Wednesday, November 12, 2014

BREACH: HSBC Turkey Confirms Card Breach via OSINT-X Newswires

›
HSBC Turkey confirms that a recent cyber-attack exposed payment card information for 2.7 million customers. The bank is a subsidiary of...

Many companies infected and they don't even realize it

›
SLC Security Services has been performing analysis of malware infections as detected by Internet honeypots, threat data (From other vendors)...

BREACH: US weather systems hacked by Chinese: Report via OSINT-X Newswires

›
The Washington Post is saying China hackers have breached a U.S. weather network, with CNBC's Eamon Javers. ...

BREACH: City and Industrial Development Corporation's (CIDCO)

›
The personal records of about 85,000 applicants to the City and Industrial Development Corporation's (CIDCO) housing scheme have inadv...

BREACH: Eastern Iowa Airport

›
The Eastern Iowa Airport recently learned of a security incident involving credit and debit card data collected at the Airport Parking Fac...

BREACH: USPS (Updated 11-11-2014 4:22PM EST)

›
USPS is reporting that employee data and now customer data, has been compromised.  Major news articles started reporting on the issue ea...
Tuesday, November 11, 2014

It's Quiet... You should be worried

›
We are seeing some indicators of some serious malware distribution today. We are starting to see compromised servers popping up all over the...
Monday, November 10, 2014

Applebee's Quietly Disabling Wifi Payment System?

›
Just this week we were advised that 2 of our local Applebee's no longer allowed customers to pay via the tableside tablet system that ha...

BREACH: Grand Casino Mille Lacs via OSINT-X Newswires (WCCO)

›
Update 11-11-2014 @ 10:00AM ET: Grand Casino Mille Lacs has posted a website notice and has a toll-free phone number - 866-328-1987 - for ...

Don't change your IP camera passwords, end up an Internet star

›
A website finds and displays web camera's that have not had the default passwords changed. Hosted out of Russia... Who knew? http://w...
Sunday, November 9, 2014

BREACH: Wyoming State Library

›
The Wyoming State Library said its statewide online catalog was breached last month by unknown hackers, but no sensitive personal data was...
Friday, November 7, 2014

BREACH: Idaho Supreme Court (Website Defacement)

›
State officials learned at about 12:15 p.m. Thursday that the website hosting court opinions, jury information and other resources for Idaho...

NEWS: FBI Seized Darknet Sites

›
List of Darknet sites that were seized or taken offline. Silkroad 2.0 Agora Alpaca Blackmarket BlueSky Cloud Nine Hydra OnionShop ...

Microsoft has 16 Patches in the Queue for Next Week

›
All you Micro$oft users be aware a large update is coming next week. Corporate customers can expect the patches Sunday evening or Monday and...
Thursday, November 6, 2014

Quotes and Comments - Your news our way

›
Protecting the Perimeter From the Cloud - Why not fight fire with fire? Why Ebola Makes HIPAA Training Urgent - We thought HIPAA traini...

Quotes and Comments - Your news our way

›
NSA Director Says Agency Shares Vast Majority of Bugs it Finds: Yeah they share them 10 years after they find them and exploit them. They s...

Leveraging Hadoop for Security Analysis in Networks

›
I have been trying to stay active on the blog but as you all can tell we have become somewhat busy over the past few weeks. This is to be ex...
Wednesday, November 5, 2014

The Latest Hacking Craze - Old Attacks - New Technology

›
SLC Security provides an SDR course for beginners. What is an SDR you ask? SDR stands for "software defined radio". No longer is i...

Over 1000 Backoff Malware Infected Machines in the US, 2500 in Europe

›
Researchers at SLC Security Services LLC have been able to identify over 3500 positive infections utilizing 3 variants of the Backoff malwar...
Tuesday, November 4, 2014

Drupal Hacks allowing purps to build massive botnet...

›
Over the past month we have been monitoring a situation with Drupal based web site security and several vulnerabilities that were being dist...
Monday, November 3, 2014

Today's Naughty List - 3 Nov 2014

›
50.74.234.66   United States (USA)   New York New York     81.137.204.83   United Kingdom (GBR)   n/a n/a ...
Friday, October 31, 2014

EXCLUSIVE - The Malware Hitlist

›
The following list is a historical look at Backoff and similar malware over the past few months. Many Retailers have been affected by this m...

NOTIFICATIONS: Pending Patient Notifications

›
SLC Security Services LLC will begin notifying patients of Cape Fear Valley Health System (Fayetteville, NC) and WakeMed (Various Locations)...

BREACH: Freeborn County Sherriff's Office

›
Freeborn County administration is investigating a suspected data breach within law enforcement, according to Administrator John Kluever. ...

BREACH: Watsons Bay Hotel (watsonsbayhotel.com.au)

›
The host at watsonsbayhotel.com.au is compromised and is serving up malware. The IP and Domain have been added to our block list.
Wednesday, October 29, 2014

Peerblock updates and signature updates

›
Clients and Lab users. We have updated our signatures, MD5 hashes, IP and network information. Customers we have already pushed the MD5 and ...

OPINION: PCI-DSS Pretty Much Useless...

›
Quote: Merchants must meet more than 400 requirements, like installing firewalls, updating antivirus software, and ensuring that credit c...

Today's Naughty List - 28 Oct 2014

›
  89.248.169.94   Netherlands (NLD)   n/a n/a     208.105.81.202   United States (USA)   New York New York ...

SLC Security Auditing Framework Community Edition

›
SLC Security Services LLC announced today that we will be releasing our auditing framework as freeware. The free version of the software wil...

Patient Disclosure Monitoring - 28 Oct 2014

›

Webex Trollers on the Prowl

›
We have been asked by a company to determine who has been dialing into their Webex. The Webex session showed a phone number but the person o...

The Learning Series: Lesson 1 Access Control List - Be specific, Be precise!

›
As many of you know this blog is staffed by volunteers and various individuals that have experience in computer forensics, network forensics...

Peerblock Update

›
We have once again rolled out a huge update to our peerblock list. It's probably a good time to force your peerblock to force an update ...

BREACH: Hackers breach some White House computers

›
Hackers thought to be working for the Russian government breached the unclassified White House computer networks in recent weeks, sources ...

NEWS: AZ State Retirment System Responds To Potential Data Breach via OSINT-X Newswires

›
The Arizona State Retirement System is responding to a potential data breach affecting almost 44,000 members. Officials believe some sensi...

NEWS: NSA Chief Warns Companies Against Revenge Hacking via OSINT-X Newswires

›
Businesses, under siege from hackers looking to steal sensitive information, increasingly want to take matters into their own hands. But t...

Some MD5's to catch some nastiness - Enjoy

›
191a02952905cc0037753700636c3339 e8045d8c9851b509a7bd25c9969cded2 37e3ec6c9569bd7035b440c24af108fd e543385928ffdde91a5f78c1ac8a99dd dc5bf1fc...
Tuesday, October 28, 2014

NEWS: Cyberattacks Point to Russia via OSINT-X Newswires

›
We agree Fireeye! Earlier this year, investigators for Silicon Valley security company FireEye Inc. visited a U.S. firm to deter...

BREACH: ASRS 44000 retirees affected

›
Nearly 44,000 state retirees may have had their personal data compromised in a security breach, and the Arizona State Retirement System is...

Noisy Much?

›
 kevin 109.190.158.183 smtp 2014-10-27 16:42:51  kevin 109.190.158.183 system 2014-10-27 16:41:37  kevin 109....
Monday, October 27, 2014

Malware Hit List - It's coming this week - Updated

›
This week Vulnerable Disclosures will be releasing a list of companies, individuals and firms affected by hard to detect malware including n...
Sunday, October 26, 2014

BREACH: Delaware River and Bay Authority

›
The Delaware River and Bay Authority is warning customers of a possible data breach on board the Cape May-Lewes Ferry. The Authority says...

Shellshock via email? You bet'cha - UPDATED

›
Starting yesterday we began seeing some known spam host trying to execute code via specially crafted email messages. We believe SANS also is...
Saturday, October 25, 2014

Backoff Malware and Variants are Spreading through POS Systems Quickly

›
We have had several retailers notify us that they are having problems keeping the Backoff variant off their point of sales systems. We have ...

BREACH: Qutar Petrolium Hacked

›
Qutar Petrolium appears to be owned at this time. What is interesting is that we started seeing malicious activity the past few days and the...

Second Breach Kinston, NC Government

›
70 Lenoir County employees information has been published in a salary report. An employee failed to remove the information that included nam...

RESEARCH: Cloud Providers Ignoring Malware Laden Host

›
During our recent research we have been seeing an uptick in the number of cloud hosting providers that are hosting malware and malicious con...

DISCLOSURE: YourTel America USD

›
Via FCC Disclosed a public release of customer information. Type: Retail Area: Cell Provider First Noted: 24 October 2014 1:25AM ES...

DISCLOSURE: TerraCom Inc.

›
Via FCC Disclosed a public release of customer information. Type: Retail Area: Cell Provider First Noted: 24 October 2014 1:25AM ES...

Reeves International Inc Hacked (www.breyerhorses.com)

›
Reeves International Inc. is informing customers of a data breach of one of their online retail sites called Breyer Horses . On September 9...
Friday, October 24, 2014

Today's Peerblock Update

›
If you are updating your peerblock from our servers you may wanna force an update today. This will protect you from several nasty malware va...

NEWS: SLC Security Services certified as an Electronic Countermeasures School

›
(Raleigh, NC) - Earlier this week SLC Security Services LLC's founder and CEO Kevin Wetzel was granted approval by the North Carolina Pr...

NEWS: Hackers Threatening Judge in Silk Road Case

›
We are getting reports and mainstream news has started reporting that hackers are targeting judge Katherine Forest whom is set to oversea th...
Wednesday, October 22, 2014

ALERT: Organized Chinese Hacking Attacks NET 117.25.130.0/24

›
We highly recommend you block the netblock listed above. We have seen a serious rise in the number of reports of hacking from this IP space....

ABUSE: CARI.NET (www.cari.net) Complaints

›
We started fielding complaints this morning from cari.net in California. Our clients are reporting brute force attacks from this entity. C...

Today's Naughty List - 22 Oct 2014

›
120.113.70.54   Taiwan (TWN)   T'ai-pei Taipei 111.93.244.98   India (IND)   n/a n/a 124.81....

NEWS: Don't say we didn't warn you about this one

›
Security researchers have been talking behind the scenes with Microsoft concerning the recent patching efforts on CVE-2014-4114. Apparently ...
Tuesday, October 21, 2014

Wow - Still think your phone and faxes are secure?

›
I was coming back from the store today and guess what I observed? You can tell from the picture that our local phone com...

Today's Naughty List - Increased Activity 21 oct 2014

›
201.205.250.2   Costa Rica (CRI)   n/a n/a     110.136.246.195   Indonesia (IDN)   n/a n/a     ...