Ashampoo breached and customer data stolen

from JoeUser Forums

 

Source: http://www.net-security.org/secworld.php?id=10941


 
The German computer software company Ashampoo has been targeted by attackers that managed to gain access to its customers database and possibly extracted data such as names and email addresses.

If you have gotten free or ‘pay for’ software from them in the past, your info may have been compromised, although Rolf Hilchner (CEO) hastened to assure customers that there was no breach of financial information.

This is somewhat embarrassing for Ashampoo since they, among other things, produce Security Software. I guess they can take some comfort in the fact that they are not the first firm - or the biggest ones - to have been breached recently.

Here’s a partial list of their software so you can check if your info might be in jeopardy:

A complete list can be obtained at their website.

A message has also emailed to the company's customers and includes a warning about possible targeted attacks that can be mounted by using the stolen information. I’m not so sure about that, since I received no such message.

"Generally it is always important that you stay suspicious of unknown senders and that you do not respond to requests that tell you to open attachments," wrote Hilchner in this message.

That’s good advice, but not fully thought out since the ramifications are that your info is now being circulated amongst criminals for nefarious purposes.

I suggest that if you receive ads in the mail, don’t open them unless they are from a company website. Then navigate on your own not using linked addresses, and see what the offers are. Not perfect but should increase protection from Phishing. Also get some extensions or software to help protect against phishing, which can be quite clever, and wait awhile before checking the offer out as by then, phishing activity may well have been reported.

And have a good weekend, folks.

Happy Easter, Happy Passover… and safe ones, I hope.

33,958 views 21 replies
Reply #1 from Elemental Forums Top

A Shampoo?  Thats a silly name.

Reply #2 from Stardock Forums Top

A Shampoo? Thats a silly name.
End of quote

Yea, never actually got that one myself. And probably the reason I don't use their software either. LOL

What's the deal with all these breaches lately? Makes me feel like we are experiencing something our of the Live Free Die Hard movie.

CursorFX - Customize your Windows cursor
Reply #4 from WinCustomize Forums Top

     Insider stuff. Usually when someone gets a taste of 'real' money ergo lots of, they'll steal, cajole, beg, borrow (not so much borrowing) to get more of it. And because those who want are relatively free with the money....well there are those who will sell their 'soul' as it were. Meaning give up corporate, state and/or federal secrets. Don't forget this economic turn down hurt a lot of people. Lots of them losing their homes etc. So a lot of cash does amazing things even to supposedly honest folk.

Reply #5 from JoeUser Forums Top

The punch line "and they sell security software too". I guess I will not be buying their software!

Reply #6 from WinCustomize Forums Top

actually, their Burning Studio software is quite good.

Reply #7 from WinCustomize Forums Top

Quoting Dr, reply 5
The punch line "and they sell security software too". I guess I will not be buying their software!
End of Dr's quote

I'm surprised you'd think that way... although superficially ironic, one thing has nothing to do with the other.

Reply #8 from Sins Forums Top

Someone could also say that goverments are sponsoring hacking in order to make internet "police state". Just to scare people and justify that they need to fully monitor internet traffic. 

Something similar that enabled patriot act to came into legislation only on the internet.

And no I'm not American but everywhere in the world not just in USA people are loosing their basic rights.......

Reply #9 from WinCustomize Forums Top

Quoting DrJBHL, reply 3
@ CharlesCS:

This article seems to be relevant to your question (hope I understood your question correctly): 

http://www.infopackets.com/news/security/2011/20110421_data_breach_stats_have_experts_puzzled.htm 

 
End of DrJBHL's quote

Thanks for the info, Doc. Well,I'm using Ashampoo HDDControl2 (now 2.07) and Ashampoo Uninstaller 4.0.4 (both excellent application). I really mind for this problem,but I'm not worried. First, Ashampoo knows about it. so it will "fix" it soon. 

About financial informatiion, I have got nothing stored in my PC. Every time I do an on-line bancking transaction (however, very few) I use Kaspersky Safe Run for Websites and Kaspersky Virtual Keyboard (Anti-Keylogger, everything is typed from there is not "seen" by the O. S. , it doesn't matter what kind of "info-stealing" malware is stored in the machine), so when I have finished and go back to normal mode  no any data at all is stored in my O.S; everything "disappear" when I close Kaspersky Safe Run (best thing ever). All hackers could do is sending some infected mails, but no problem at all with that as well (everything goes first through Kaspersky real time protection modules) .

Quoting Dr, reply 5
The punch line "and they sell security software too". I guess I will not be buying their software!
End of Dr's quote

I'm not using it, but Ashampoo AntiMalware is a very good one . This kind of problem can happen to every company.

Reply #10 from WinCustomize Forums Top

Quoting inthebloodofeden, reply 9
First, Ashampoo knows about it. so it will "fix" it soon.
End of inthebloodofeden's quote

inthebloodofeden, the data has been taken. There's nothing to fix. 

 

 

Reply #11 from WinCustomize Forums Top

Quoting DrJBHL, reply 10
Quoting inthebloodofeden, reply 9First, Ashampoo knows about it. so it will "fix" it soon.

inthebloodofeden, the data has been taken. There's nothing to fix. 

End of DrJBHL's quote


 

What kind of data are you talking about,Doc?  Name and e-mail addresses ? About that it doesn't matter at all; everyone wants that can just ask, it's quicker!! I'm just a home user. not a big company.

And of course THERE IS something to fix for the future (Ashampoo knows which kind of work hackers did ). 

Reply #12 from WinCustomize Forums Top

Quoting inthebloodofeden, reply 11
About that it doesn't matter at all; everyone wants that can just ask, it's quicker!!
End of inthebloodofeden's quote

Until you start getting phishing ads, and esecutables and malware in those emails. 

Don't really want to go back and forth on this. The point in the OP is clear enough. 

Reply #13 from WinCustomize Forums Top

I'm safe Doc, trust me. I know how hackers work. I'm SURE data has already been taken since long time...before Ashampoo attack.

Reply #14 from WinCustomize Forums Top

Compaines always get a bad name when they are hacked into. Truth is most do the best they can and this is always going to happen. Only solution is to never post any personal infomation or purchase anything on the Internet. I buy what I want and don't worry about it. I'm not saying I'm happy with all this stuff but the hackers aren't getting better every year they are getting better everyday. You can read this stuff everyday somewhere so this isn't anything new.

Reply #15 from WinCustomize Forums Top

DaveBax is right.(Did I say that?...j/k) Point being hackers are no different than other folks. They learn too. Its a constant back and forth type one-upmanship.

Reply #16 from Elemental Forums Top

Here's the part of the thread where I act surprised....

 

OH NO!!   I can't believe this!  I'm so surprised!  I can't believe this is happening!!

 

That part of the thread is now over.   Carry on.

 

Reply #17 from JoeUser Forums Top

Quoting DrJBHL, reply 3
@ CharlesCS:

This article seems to be relevant to your question (hope I understood your question correctly): 

http://www.infopackets.com/news/security/2011/20110421_data_breach_stats_have_experts_puzzled.htm 

 
End of DrJBHL's quote

Heh, close enough. It's interesting to see how we have a bigger push than ever to go completely digital and cloud while at the same time the same people claiming to provide these secure services may actually be the ones we should be worried about. Hackers have to actually work to get the data, the ones who have it already have access to it and all it takes is one greedy and/or disgruntled employee to skip the hackers hard work and simply use their co-workers password which they happen to get easily and cause all sorts of chaos

Reply #18 from JoeUser Forums Top

Quoting DrJBHL, reply 7

Quoting Dr Guy, reply 5The punch line "and they sell security software too". I guess I will not be buying their software!

I'm surprised you'd think that way... although superficially ironic, one thing has nothing to do with the other.
End of DrJBHL's quote

It's a mindset. Or at least the perception.  If they take security so lightly as to get breached, how does that speak to their commitment to their own security software?

Reply #19 from WinCustomize Forums Top

The Cloud Security is not at all reassuring to me either, CharlesCS.

Quoting Dr, reply 18
If they take security so lightly as to get breached, how does that speak to their commitment to their own security software?
End of Dr's quote

One thing has nothing to do with the other, Dr Guy. And NO Security Suite or component thereof is fool proof. No company is "safe" from hackers, either. 

Reply #20 from WinCustomize Forums Top

How about this for a scenario. Big Bux Software Inc. hires notorious hacker to create new and improved code to prevent hackers from doing what they're paying him not to do. Said notorious hacker does the job, copies and purloins the code, modifies it for his own nefarious needs, hacks the company and steals all kinds of stuff. Yet Big Bux Inc, is unaware that they're newbie is behind it so they go to him again. He fixes it, copies then purloins the code again, hacks into the system a second time all the while Big Bux Inc. is thinking its safe. Possible?

Reply #21 from JoeUser Forums Top

Quoting DrJBHL, reply 19
One thing has nothing to do with the other, Dr Guy. And NO Security Suite or component thereof is fool proof. No company is "safe" from hackers, either.
End of DrJBHL's quote

I agree - but not every company is hacked.  Again, reality is nice, but perception is where we live.