Enterprise Blogs
- Cloud Security (18)
- Critical Infrastructure Protection (9)
- CSO / Risk Management (65)
- Data Center (12)
- Data Protection (67)
- Database Security (1)
- Embedded (8)
- Management (7)
- Mobile (30)
- Network Security (49)
- Public Sector (25)
- Risk Compliance (64)
- SaaS (3)
- Security Connected (151)
- Security Perspectives (7)
- SIEM (1)
- SMB (4)
- Support (6)
- System Endpoint (26)
- Virtualization (5)
Feeds & Podcasts
Meet the Bloggers
- Archive
- Barry McPherson
- Brian Contos
- Callie Skokos
- Charles Ross
- Chintan Shah
- Cindy Chen
- Dan Olds
- Dan Wolff
- Dr. Phyllis Schneck
- DThakkar
- Ed Metcalf
- Elan Winkler
- Eric Andre
- Eric Knapp
- Eric Schou
- Evelyn de Souza
- Francois Paget
- Gary Davis
- Greg Brown
- Jan Volzke
- Jim Walter
- Jimmy Shah
- Jonelle Hester
- Kim Singletary
- Leon Erlanger
- Lianne Caetano
- Martin Ward
- Matt Fairbanks
- Melissa Siems
- Michelle Dennedy
- Mike Carpenter
- Oliver Devane
- PageOne Pr
- Pamela Warren
- Pat Calhoun
- Raj Samani
- Rees Johnson
- Robert Siciliano
- Robert Welty
- Ryan Permeh
- Sean Roth
- Simon Hunt
- Steven Fox
- Stuart McClure
- Tim Roddy
- Tom Conway
- Tom Gann
- Tyler Carter
- Uy Huynh
- Vijay Upadhyaya
Archive
- May 2012 (45)
- April 2012 (38)
- March 2012 (48)
- February 2012 (46)
- January 2012 (47)
- 2011 (477)
- 2010 (429)
- 2009 (378)
- 2008 (271)
- 2007 (354)
- 2006 (143)
Tags
#McAfeeFOCUS, #MFETrivia, #SecChat, #SecurityLegos, 12 Scams of Christmas, 2012, 2012 Security Predictions, Acquisition, Advanced Persistent Threat, Android, android antivirus, Android Malware, Android security, android security app, anti-phishing, anti-theft, anti-virus, antivirus, APIs, App Alert, Apple, application blacklisting, application developers, application security, app protection, apps, app safety, ATM scams, attacks, authentication, automotive, Bad Apps, balanced scorecard, best practices, Big Data, big security data, BlackBerry, Blackhat, Black Hat, black hat hackers, botnet, Brazil, breach, Business IT, car hacking, certification, Change Control, China, CISO Executive Summit, Citrix, class action lawsuit, cloud, cloud apps, Cloud city, Cloud computing, Cloud Expo, cloud security, Cofer Black, collaboration, Compliance, Conficker, consolidation, Consumer, consumerization, consumerization of IT, Content Protection, counter identity theft, credit card fraud and protection, credit card skimming, critical infrastructure, CSP, cyber attack, Cybercrime, cyberespionage, Cyber Insurance, Cyber Intelligence Sharing and Protection Act of 2011, cybersecurity, cyber security, cyber security awareness, Cyber Security Mom, cyber threat, cyberthreats, data, database activity monitoring, database security, data breach, Datacenter, data center, data center security, Data Classification, data loss, Data Loss Prevention, Data Protection, Data Protection Act, Dave DeWalt, Dave Marcus, dedicated security appliances, Deep Command, Deep Defender, DeepSAFE, DefCon, DefCon Kids, Department of Commerce, device, Device Control, devices, dewalt, DLP, Dmitri Alperovitch, easter, Ecuador, Eelectric Vehicle, Email & Web Security, Email & Web Security, email security, embedded, embedded devices, Embedded Security, Emerging Markets, Emerging Market Security, EMM, encryption, Endpoint Protection, Endpoint Security, energy, enterprise, enterprise mobility, enterprise resource planning, enterprise scurity, enterprise security, epayment, epo, ePO Deep Command, ePolicy Orchestrator, ERP, ESM, espionage, EV, exploit, exploits, facebook, Facial recongnition, Family Safety, FDCC, file sharing, Financial Security, firewall, FISMA, Fixed Function Devices, Focus, Focus11, FOCUS 2011, forrester, Foundstone, Friday Security Highlights, Garter, Gartner, Gartner Security and Risk Management Summit, George Kurtz, Global Cybersecurity, Global SecurityAlliance Partner Summit, global threat intelligence, google, government, GTI, Hackers, hacking, Hacking Exposed, Hacktivism, HB1140, Healthcare, Heuristics, HIPAA, host intrusion prevention, Host IPS, HV, Hybrid Vehicle, ICS, IDC, identify potential cyber-threats, identity as a service, Identity Management, identity protection, identity theft, IDF 2011, Incident Response, Information leak, Information Protection, Information Security, Information Warfare, Insider Threats, Integrity, Integrity Control, intel, Intel Cloud SSO, intellectual property, Internet Explorer, internet security, Interop, IntruShield, In vehicle Infotainment, IP, iphone, IPS, IT, IT Security, japan earthquake safe donation, japan earthquake scams, kurtz, labs, laptops, Larry Ponemon, law, legal, legal risk, Legos, linkedin, live-tweeting, lizamoon, Lockheed Martin, mac, Mac OS X, malware, Malware research, managed security services, Management, Mariposa, mass sql injection, mastercard, Maturity Model, McAfee, McAfee Application Control, McAfee Cloud Security Platform, McAfee Data Loss Prevention, Mcafee DLP, McAfee Email Gateway 7.0, McAfee EMM, McAfee Enterprise Mobility Management, McAfee ePO, McAfee ePolicy Orchestrator, McAfee Firewall Enterprise, McAfee FOCUS, McAfee FOCUS 2011, McAfee Identity Protection, McAfee Labs, McAfee Mobile Security, McAfee MOVE, McAfee MOVE AV, McAfee Network Security Platform, McAfee NSP, McAfee Policy Auditor, McAfee Risk Advisor, McAfee Security Journal, McAfee Security Management, McAfee Security Webinars, McAfee SiteAdvisor, McAfee Vulnerability Manager, McAfee Vulnerability Manager for Databases, mcafee wavesecure, Microsoft, Microsoft Security Bulletin, Mid-Market, Mobile, mobile antivirus, mobile app, mobile data communications, mobile device, mobile devices, mobile devices and security threats, mobile malware, mobile phone spyware, mobile security, mobile security app, mobile smartphone security, mobiles security, mom, MS12-020, MySQL, NACACS, near field communication, Network Perimeter Security, Network Security, Network Security; Email & Web Security; Security-as-a-Service, network security server security, new year resolution, next-gen IPS, Next Generation IPS, NFC, Night Dragon, NIST, NitroSecurity, NitroView, OMB, online banking, Open Source, operational risk, Operation Aurora, Optimized, outages, OWASP, passwords, password security, patch, Patch Tuesday, Patmos, PCI, PCI Compliance, PCI DSS, Peer to Peer file sharing, perception, personal information over mobile phones, phishing, PII, Ponemon Institute, PostScript, Potentially unwanted program, power grid, power loss, Pre-detection, Pre-Installed Malware, Printers, privacy, protection, Public-Private partnerships, Public Sector, pup, QR codes, reference architecture, regulations, reporting, reputational risk, retail, risk, Risk Advisor, Risk and Compliance, Risk Management, ROI, Rookits, Rootkits, RSA, RSA 2012, SaaS, SaaS security solutions, safe searching, Salesforce.com, Saviynt Access Manager, SCADA, scam, SCAP, SEC Guidance, SecTor, secure cloud computing, secure container, security, Security-as-a-Service, Security and Defense Agenda, security attacks, security awareness, security breach, security conferences, Security Connected, Security Connected Reference Architecture, Security Influence, security information and event management, security management, security metrics, security optimization, security policy, security threats, Sentrigo acquisition, Shady RAT, SharePoint, shortened URLs, SIA Partners, SIEM, SiteAdvisor, Situational Awareness, Small Business, smartphones, smartphone security, SMB, social business, social media, social networking, social networks, Software-as-a-Service, spam, Spearphishing, sql attacks, SQL Injection, State of Security, stealth attack, stealth crimeware, stealth detection, Steve Jobs, storage, Stuxnet, substation, Support, Symbian, T-Mobile, Tablet, tablets, tablet security, TAGITM, targeted attacks, TCO, technology development, Telecommunications, threat reduction, TJX, TPM, Trusted Computing Module, trustedsource, twitter, Twitter online security, U.S. Cyber Challenge Camps, urchin.js, Vericept DLP, ViaForensics, Virtualization, VIrtual Machines, visa, Vontu DLP, vPro, vulnerability, Vulnerability Manager, vulnerability manager for databases, Web 2.0, Webinar, web protection, web security, Websense DSS, Web services, white hat hackers, Whitelisting, wikileaks, Windows 7, Windows Mobile, Wind River, Xerox, youtube, Zero-Day, zeus
US-VISIT was visited by a virus
|
|
Wednesday, May 10, 2006 at 1:18am by
Francois Paget
The US-VISIT network consists of mainframe servers and Windows-based workstations installed at nearly 300 strategic locations in the US like airports and seaports. It is used by Department of Homeland Security (DHS) to take fingerprints and digital photos of visitors coming into the US. It compares each passenger's profile with national security and criminal watch lists.
On August 18, 2005 an enigmatic computer failure led to a nationwide breakdown of the network resulting in thousands of travelers being stranded in line at US border checkpoints. This technical hitch was not clearly explained to the public. DHS spokespersons contradicted themselves. One spokesperson said in an initial report that a virus caused the outages. Four months later, another one told that the failure was due to routine computer glitches with no evidence that it was caused by a virus.
Today we know: it was a virus and the virus was Zotob.
As early as April 2006, on wired.com, Kevin Poulsen explained that a worm infiltrated agency computers on the day of the outage. He learned this fact from two Bureau of Customs and Border Protection (CBP) reports obtained under the Freedom of Information Act. The Department of Homeland Security's US-VISIT program office declined to comment on the documents.
But yesterday, Kevin Poulsen and Ryan Singel fast forwarded the story. They distributed a link to a document filed in the court last Thursday. Inside this PDF, 15 documents are quoted:
That's 330 pages of helpdesk calls from screeners complaining about their computers being down; another 244 pages of work tickets to attack the problem; and 21 pages of IP addresses of computers "involved in the incident." Another document is described as a meeting notice on a "Zotob Status Meeting" in November "regarding the Zotob virus."
Today like these investigators, we are waiting for the May 26 judgment to learn the whole story.
|
|
Tags: Cybercrime, Data Protection, global threat intelligence, identity protection, malware, phishing, Public Sector
Submit your own comments / message for this post