Banxico (the Bank of Mexico) says that, while its investigation of a series of criminal raids on the Interbanking Electronic Payment System (SPEI) is still in progress, they've concluded that the initial attack came through a small brokerage house.

McAfee researchers are tracking the Sun Team, a DPRK threat group operating a mobile malware campaign ("Red Dawn") against North Korean defectors. They're using Facebook and Google Play to spread spyware under the guise of beta applications. Three bad apps have been found: "Food Ingredients Info" for the health conscious and two bogus security apps, "Fact AppLock," and "AppLock Free," for the rest of you.

FireEye's iSIGHT unit has found a great deal of Japanese personally identifiable information for sale in a Chinese black-market souk, apparently culled largely from earlier big breaches. (The criminal vendor gets low grades from the black market's equivalent of Yelp.)

Two alleged members of the Syrian Electronic Army, Ahmad ‘Umar Agha, 24 (“The Pro”) and Firas Dardar, 29, (“The Shadow”) now face eleven US Federal counts of conspiracy to commit computer fraud, conspiracy to commit wire fraud, and aggravated identity theft. Both men remain at large.

Facebook continues to struggle with content moderation. In one category the company has expressed a desire to purge—terrorist imagery and propaganda—Facebook has met with indifferent success. The Global Intellectual Property Enforcement Center and the Digital Citizens Alliance say it's easy to find jihadist exhortations and imagery of unbelievers' executions. You just have to know which hashtags to follow.