The Drupal Security Team has released a Security Update which addresses a vulnerability affecting Drupal. An attacker may exploit this vulnerability to take control if Drupal is configured to allow .tar, .tar.gz, .bz2, or .tlz file uploads and processes them.

The hardest part of any financially motivated cybercrime is the cash out. 

The strategy for cashing out for cyber criminals needs to be easy enough to make it worthwhile and safe enough to stay under the radar of the both the financial institutions involved or law enforcement agents.