IT Security, the most popular topic in town

by SherlockTalent

What an incredible month this has been in South Florida Tech – and it’s not over yet! I wish to extend my personal thanks and gratification to the team that helped pull together last Tuesday’s South Florida Joint Security event. The afternoon and evening sessions attracted unprecedented numbers of attendees illustrating the enormous interest in the field of IT Security.

To our host NSU’s GSCIS, our speakers and our organizing team, I say a big heart felt thank you.

Just ahead are 2 exciting events designed to prepare developers for the upcoming PayPal BattleHack.  We have 2 really exciting speakers lined up for the Fort Lauderdale (July 31) and Miami (August 1) PayPal Battle Hack Dev Meetups.

South Florida Joint Security Event Followup

by SherlockTalent

With over 300 registered attendees, the South Florida Joint Security Event was a resounding success. Our thanks go to our gracious host NSU who provided a magnificent venue and great food. We also thank our NSU speaker team , John Christly, Dr. Martin Clarke, Carlos DeJesus, Ramon Hurlockdick and Mike Huckaby of RSA.

View Facebook album View Dave Lord’s Album

More security events: Elevate’s Free Security Seminar Series, Aug 15

Malware used to steal bank accounts

by SherlockTalent

Federal prosecutors on Thursday brought what they called the largest hacking and data breach case in the country, charging five people with running an organization that hacked the computer networks of more than a dozen corporations, stealing and selling at least 160 million credit and debit card numbers.

The scheme was run by four Russian nationals and a Ukrainian, said the prosecutors, who announced the indictments in Newark. Paul Fishman, the United States attorney for the District of New Jersey, said losses ran into the hundreds of millions of dollars.

“The losses in this case are staggering,” Mr. Fishman said at a news conference in Newark. “This type of crime is really the cutting edge of financial fraud.”

The victims in the scheme, which prosecutors said ran from 2005 until last year, included JCPenney; 7-Eleven; JetBlue; Heartland Payment Systems, one of the world’s largest credit and debit processing companies; and the French retailer Carrefour. A separate case involving one of the defendants and the Nasdaq stock exchange was filed by the United States attorney for the Southern District of New York.

“The defendants and their co-conspirators penetrated the secure computer networks of several of the largest payment processing companies, retailers and financial institutions in the world, and stole the personal identifying information of others, such as user names and passwords,” prosecutors said.

The defendants were identified as Vladimir Drinkman, Aleksandr Kalinin, Roman Kotov and Dmitriy Smilianets of Russia and Mikhail Rytikov of Ukraine. Mr. Drinkman is in custody in the Netherlands and Mr. Smilianets is in custody in the United States. The whereabouts of the other three was unclear.

The attacks underscore the broader threat that hacking poses to a financial system that is almost entirely reliant on networked communications.

In the Nasdaq case, Mr. Kalinin is accused of hacking into the servers used by the exchange. From November 2008 through October 2010, he installed malicious software, or malware, on servers that allowed him to delete, change or steal data, according to the indictment unsealed on Thursday. The infected servers did not include the platform for securities trading.

In a separate indictment also unsealed in federal court in New York, Mr. Kalinin and another Russian, Nikolay Nasenkov, who is also at large, are accused of conducting a scheme to steal bank account information and use it to withdraw millions of dollars from the victims’ bank accounts. From December 2005 through November 2008, the two men hacked into computer systems and stole information from banks including Citibank and PNC Bank, according to the indictment.

In January 2006, the personal identification numbers for hundreds of customer accounts were compromised by a cyberattack on PNC Bank’s online banking Web site, the indictment said. Mr. Nasenkov supplied stolen account information to co-conspirators who, in turn, used it to encode blank A.T.M. cards and withdraw $1.3 million from victims’ accounts.

In 2007, Mr. Kalinin placed malware on a computer network that processed A.T.M. transactions for Citibank and other financial institutions and used the code to steal bank account information for about 500,000 bank accounts, including 100,000 Citibank accounts, the indictment said. The stolen account information was used to to create A.T.M. cards that were used to withdraw $2.9 million from Citibank customers’ accounts.

In 2008, Mr. Nasenkov used a computer program to attack Citibank’s Web site that resulted in the theft of account information for more than 300,000 accounts, according to the indictment. The information was used to create A.T.M. cards that were used to withdraw $3.6 million.

Five Charged in Hacking of Financial Companies – NYTimes.com.

Makin Bacon Hackathon II by Emphasys Software – Aug 10

by SherlockTalent

SherlockTech is proud to sponsor the Second-Annual Makin Bacon Hackathon.

Last April, Emphasys Software hosted its first “Makin Bacon Hackathon.” An event where developers, designers, and programmers collaborated and built things they wanted to see in the world. We are now very excited to continue our support for the growing technology scene and announce the “Makin Bacon Hackathon II.“

Like our last event, teams will be building mobile or web apps and competing for prizes and swag. Sharing skills and networking with fellow Miami techies is also highly encouraged. (and of course, eat MORE bacon!)

Participants will pitch ideas, form teams (up to four) or work alone, and build projects based on the listed APIs (see below for full list) to turn their ideas into reality in a limited amount of time.