www.fusspils.net

If you havent been following this story it goes like this.  A bank employee sent some rather sensitive information/data to an incorrect Gmail account.  The bank demanded that Google release the Gmail account holders name/details and are taking them to court as they refused to disclose the info.  I Don't like the way that the bank is using a "sue you" method as an internal security policy.  The Story...

A California federal judge has ordered Google to temporarily de-activate a Gmail account after a bank mistakenly sent sensitive data to the account.

U.S. District Judge James Ware also ordered Google to disclose the identity of the Gmail account holder.

The Rocky Mountain Bank of Wyoming sued Google to obtain the account holder’s name after a bank employee erroneously e-mailed an attachment to the account containing sensitive information on 1,325 individual and business bank customers. The attachment contained customer names, addresses, Tax ID and Social Security numbers and loan information.

The employee sent a second e-mail to the recipient instructing the person to delete the e-mail and attachment without opening it. When the employee got no answer, the bank contacted Google to find out if the account was active or not. Google wouldn’t provide any information without a court order so the bank sued Google to get the account holder’s name and contact information.

Google has stated that once it receives a court order to identify an account holder, its policy is to notify the account holder before complying with the order to give the account holder a chance to file an objection

Credit

One of the world's nastiest password-stealing trojans evades detection by the majority PCs running anti-virus programs, according to a study that examined 10,000 machines.

Zeus, a stealthy piece of malware that sits on a PC and waits for users to log in to bank websites, is detected just 23 per cent of time by AV programs, according to the study (PDF) released by security firm Trusteer. Even AV programs with up-to-date malware signatures were unable to identify the infection a majority of the time, the authors said.

Zeus, which also goes by the name Zbot and PRG, escapes detection using sophisticated techniques such as root-kit technology, the Trusteer report said. The company is able to detect it by examining the fingerprint Zeus leaves when it penetrates an infected PC's browser process.

A recent report estimated that Zeus is the No. 1 trojan, with 3.6 million infections in the US alone, or about 1 per cent of the installed base of PCs. Trusteer's study, which found Zeus accounted for 44 per cent of the banking malware infections, was consistent with that finding. After sneaking onto a PC, it sits quietly in the background until a user logs on to a financial website. It then sends the login credentials to a remote server in real time, sometimes by use of instant messaging programs.

Of Zeus-infected machines, about 31 per cent don't run AV at all and 14 percent run AV that's out of date. The remaining 55 per cent had AV programs that were up to date.

Source The Register