FBI offering $100,000 reward for information on Most Wanted Cyber Criminals

Bloggers Republiq

The US Federal Bureau of Investigation has added five new hackers to its Cyber most wanted list and is seeking information
from the public regarding their whereabouts.

The men are wanted in connection with hacking and fraud crimes both within the US as well as internationally. Rewards ranging from up to $50,000 to $100,000 are being offered for information that leads to their arrest.

Two of them are Pakistani, Farnhan Arshad and Noor Aziz Uddin , who caused the damage of over $50 million after hacking business telephone systems between 2008 and 2012. Arshad and Uddin are part of an international criminal ring that the FBI believes extends into Pakistan, the Philippines, Saudi Arabia, Switzerland, Spain, Singapore, Italy, Malaysia, and other locations.

Syrian national Andrey Nabilevich Taame, wanted for his alleged role in Operation Ghost Click , a malware scheme that compromised more than four million computers in more than 100 countries between 2007 and October 2011; there were at least 500,000 victims in the United States alone.

Alexsey Belan, a Russian national, is wanted for alleged hacking of three US-based companies between 2012 and 2013.

Carlos Perez-Melara is wanted for his alleged involvement in manufacturing software that was used to intercept the private
communications of hundreds of victims around September 2003. As part of the scheme, Perez-Melara ran a website offering
customers a way to “catch a cheating lover” by sending “spyware ” disguised as an electronic greeting card.

The rewards are being offered for each of the five fugitives, all of whom are believed to be living outside the U.S.

" The expansion of the Cyber’s Most Wanted list is a reflection of the FBI’s increased efforts in this area ," FBI officials said in
a statement.


Microsoft set to deliver Patches for three Critical flaws, but no patch for Office Zero-day vulnerability

Microsoft has released advanced notification for the November 2013 security updates that are scheduled to be released on November 12, 2013.

The company plans to deliver eight security bulletins for Windows 8.1, three of them are rated critical and five are important.But there's no relief in sight for a zero-day vulnerability ( CVE-2013-3906 ) in how Office handles .TIFF graphics files .

The bulletins listed in Microsoft's advanced notification as critical are for remote code execution vulnerabilities in Windows operating system and the remaining vulnerabilities listed as important are said to be remote code execution, elevation of
privilege, information disclosure and denial of service flaws affecting Windows operating system, as well as Microsoft Office.

A malicious zero day attack capable of hijacking your PC via a vulnerability found in Windows, Office, and Lync is being exploited more widely than originally thought. Some new reports of the security researchers at Fire Eye and Symantec claim that malware groups are actively using the TIFF flaw to hack into computers.

The majority of the exploits detected by Microsoft, Fire Eye, and Symantec have occurred in the Middle East and Asia.

Microsoft also explains that the fix for Security Advisory 2896666 could come at any time, which means it could release even before next Tuesday. However, the current Fix It solution is still the proposed deterrent at this point.