Decade-Long Virus Infection Discovered

[security curmudgeon <jericho () attrition org>]

---------- Forwarded message ----------
From: InfoSec News <alerts () infosecnews org>

http://www.bankinfosecurity.com/articles.php?art_id=4418

By Jeffrey Roman
Bank Info Security
January 19, 2012

Recently discovered viruses, consisting of Trojans and other malware, at 
City College of San Francisco have stolen personal banking information and 
other data from perhaps tens of thousands of students, faculty and 
administrators, says John Rizzo, president of the board of trustees.

The college first noticed the infection in late November, when the IT 
department saw gaps in the data logs of a server located in the Phelan 
Avenue campus computer lab. Further investigation revealed that the 
viruses had existed in the college's systems since 1999, Rizzo confirms.

During the investigation, the college's IT department saw transmissions 
being sent to Russia and China, as well as other countries, Rizzo says.

The college has 100,000 students and 3,000 employees. So far, there's been 
one confirmed instance of personal banking information recorded by a 
virus, he says. "We're looking at the ... central database to see if 
anything was taken from there," he adds.

[...]
_______________________________________________
Dataloss Mailing List (dataloss () datalossdb org)
Archived at http://seclists.org/dataloss/
Unsubscribe at http://datalossdb.org/mailing_list

Small, inexpensive USB drives pose huge threats to organizations left unprotected. 
Download Chapter 1 of CREDANT Technologies eBook
Data Protection to the Rescue
http://www.credant.com/campaigns/external_media_ebook/chapter1/lp/