Ramblings of an old Doc

 

Source: http://www.net-security.org/secworld.php?id=10941


 
The German computer software company Ashampoo has been targeted by attackers that managed to gain access to its customers database and possibly extracted data such as names and email addresses.

If you have gotten free or ‘pay for’ software from them in the past, your info may have been compromised, although Rolf Hilchner (CEO) hastened to assure customers that there was no breach of financial information.

This is somewhat embarrassing for Ashampoo since they, among other things, produce Security Software. I guess they can take some comfort in the fact that they are not the first firm - or the biggest ones - to have been breached recently.

Here’s a partial list of their software so you can check if your info might be in jeopardy:

A complete list can be obtained at their website.

A message has also emailed to the company's customers and includes a warning about possible targeted attacks that can be mounted by using the stolen information. I’m not so sure about that, since I received no such message.

"Generally it is always important that you stay suspicious of unknown senders and that you do not respond to requests that tell you to open attachments," wrote Hilchner in this message.

That’s good advice, but not fully thought out since the ramifications are that your info is now being circulated amongst criminals for nefarious purposes.

I suggest that if you receive ads in the mail, don’t open them unless they are from a company website. Then navigate on your own not using linked addresses, and see what the offers are. Not perfect but should increase protection from Phishing. Also get some extensions or software to help protect against phishing, which can be quite clever, and wait awhile before checking the offer out as by then, phishing activity may well have been reported.

And have a good weekend, folks.

Happy Easter, Happy Passover… and safe ones, I hope.


Comments (Page 2)
2 Pages1 2 
on Apr 25, 2011

Here's the part of the thread where I act surprised....

 

OH NO!!   I can't believe this!  I'm so surprised!  I can't believe this is happening!!

 

That part of the thread is now over.   Carry on.

 

on Apr 26, 2011

DrJBHL
@ CharlesCS:

This article seems to be relevant to your question (hope I understood your question correctly): 

http://www.infopackets.com/news/security/2011/20110421_data_breach_stats_have_experts_puzzled.htm 

 

Heh, close enough. It's interesting to see how we have a bigger push than ever to go completely digital and cloud while at the same time the same people claiming to provide these secure services may actually be the ones we should be worried about. Hackers have to actually work to get the data, the ones who have it already have access to it and all it takes is one greedy and/or disgruntled employee to skip the hackers hard work and simply use their co-workers password which they happen to get easily and cause all sorts of chaos

on Apr 26, 2011

DrJBHL

Quoting Dr Guy, reply 5The punch line "and they sell security software too". I guess I will not be buying their software!

I'm surprised you'd think that way... although superficially ironic, one thing has nothing to do with the other.

It's a mindset. Or at least the perception.  If they take security so lightly as to get breached, how does that speak to their commitment to their own security software?

on Apr 26, 2011

The Cloud Security is not at all reassuring to me either, CharlesCS.

Dr Guy
If they take security so lightly as to get breached, how does that speak to their commitment to their own security software?

One thing has nothing to do with the other, Dr Guy. And NO Security Suite or component thereof is fool proof. No company is "safe" from hackers, either. 

on Apr 26, 2011

How about this for a scenario. Big Bux Software Inc. hires notorious hacker to create new and improved code to prevent hackers from doing what they're paying him not to do. Said notorious hacker does the job, copies and purloins the code, modifies it for his own nefarious needs, hacks the company and steals all kinds of stuff. Yet Big Bux Inc, is unaware that they're newbie is behind it so they go to him again. He fixes it, copies then purloins the code again, hacks into the system a second time all the while Big Bux Inc. is thinking its safe. Possible?

on Apr 27, 2011

DrJBHL
One thing has nothing to do with the other, Dr Guy. And NO Security Suite or component thereof is fool proof. No company is "safe" from hackers, either.

I agree - but not every company is hacked.  Again, reality is nice, but perception is where we live.

2 Pages1 2