Extended Validation-EV SSL certificates, Phisher Nightmare
2008-05-19 22:43:00 Cross-site scripting-XSS is a type of computer security vulnerability typically found in web applications which allow code injection by malicious web users into the web pages viewed by other users. Website can be exploited with cross-site scripting vulnerability that can be used by attackers to bypass access controls such as the same origin policy. Vulnerabilities of this kind have been exploited to craft powerful phishing attacks and browser exploits. Cross-site scripting carried out on websites were roughly 80% of all documented security vulnerabilitiesCross-site scripting bugs, which are typically exploited by identity thieves and phishers, let attackers insert their own malicious code into legitimate pages but have also been used for other purposes. Last month a cross-site scripting vulnerability in Sen. Barack Obama's presidential campaign Web site redirected some visitors to the URL of his rival, Sen. Hillary Clinton. LMAO. Very Funny. You guys can keep that up.Seriously.Onli...
Salesforce.com Employee Falls For Phisher Ploy
2007-11-14 20:28:00 The Security and Compliance Connection Blog – If you are a Salesforce.com customer, you may have noticed a prominent phishing alert message on the log-in page. Initially I assumed that Salesforce had been notified of increased activity in this area and were just posting the warnings in… read more
Springbank Fraud Phisher Email - ?Springbenk.com?
2007-11-12 21:52:00 I received an email from “Springbenk.com” asking for an update to my Springbank account. Fortunately, I don’t have an account with Springbank.com, but I suspect that anyone who does have an account with Spring Bank may be fooled into “updating” their account and giving the phisher their account information. Never click on links within an ...
By: The Piggy Banker
I phisher prendono di mira Gmail
2007-08-18 02:54:00 Pare che ora come ora un gruppo di phisher stiano organizzando una truffa ai danni di Gmail, volta a rubare i dati di accesso dei suoi utenti tramite mail truffaldine che li invitano ad inserire i propri dati di accesso. Questo attacco però non è come tutti gli altri, questo è veramente brutto da vedersi, ...
I phisher prendono di mira Gmail
2007-08-18 02:54:00 Pare che ora come ora un gruppo di phisher stiano organizzando una truffa ai danni di Gmail, volta a rubare i dati di accesso dei suoi utenti tramite mail truffaldine che li invitano ad inserire i propri dati di accesso. Questo attacco però non è come tutti gli altri, questo è veramente brutto da vedersi, ...
Black List Update - Job Scams
2007-08-17 16:39:00 Oil Offshore Marine Update On Beware Job Scams we have just updated the black list of fake companies and scammers claiming to offer jobs. Unfortunately, the list is partial, because more and more fake companies get invented by the scammers. List of likely problems: losing money, losing identity, phishing attacks, and so on… Read full info ...
Equity Recruitment Agency - Scammers
2007-08-15 20:42:00 Information provided by Oil Offshore Marine Online Library Series Equity Recruitment Agency Scam Alert: Equity Recruitment Agency … Read Full Details
Scam Alert - Worldwide Bio Refineries Plc
2007-08-14 16:42:00 Information provided by Oil Offshore Marine Online Library Series Worldwide Bio Refineries Plc Scam Alert: Worldwide Bio Refineries Plc (NB: this “company” name has also been used in financial scams) … Read Full Details
Phishing Alert, Bank of Rome: Why Read the Email Headers?
2007-08-09 21:37:00 Information provided by Oil Offshore Marine Online Library Series Phishing Alert: Bank of Rome (Banca di Roma) Ok, let’s assume you get an email such as the one below (actually this email was received on Wed, 8/8/2007) or with different names and information: It’s in Italian. But you don’t need to speak Italian to figure out that there ...
Arrestati i phisher di Poste Italiane
2007-07-17 12:24:00 Erano mesi che le povere caselle mail degli italiani venivano bombardate ogni giorno da una ventina di mail farlocche, che si fingevano inviate da PosteItaliane e che richiedevano all’utente l’inserimento di username e password (dati che poi sarebbero giunti dritti dritti ai truffatori): mail di phishing insomma; da ieri forse quest’ondata di cyber-spazzatura cesserà, grazie ...
Tip to remove Trojan.kardphisher
2007-05-12 20:01:00 Few days back I just saw a post about a Trojan named as Trojan.kardphisher on Technospot blog where Ashish has mentioned that about this Trojan . When this Trojan enters in your computer it starts showing a pops up with a message that ?Your Copy? of windows has been activated by other user and asks you to reactivate . After that is will ask you for new registration and to enter your credit card number for payment . You can check this video how this Trojan works .Symantec's Takashi has posted the steps you need to remove Trojan.kardphisher . 1. Reboot the infected machine. You can do that by simply clicking the "No" and "Next" buttons, or by doing a good-old fashioned hard reboot.2. While Windows is starting, press the function 8 key (F8 key) to enter Safe Mode.3. Click Start > Run.4. Type regedit5. Click OK.6. Navigate to and delete these subkeys:HKEY_LOCAL_MACHINESOFTW-AREMicrosoftWindowsCurrentVersi-onRunsoft2HKEY_LOCAL_MACHINESOF-TWAREMicrosoftWindowsCurrentVer-sionPoliciesSystemDi...
By: DIGITAL I.T BLOG
Alerta de seguridad: ¡El Troyano Kardphisher no te activa Windows!
2007-05-07 19:14:00 Symantec Corp, ha detectado una serie de ataques realizados con el troyano Kardphisher. Troyano que se hace pasar por un programa legítimo de activación de Windows y que solicita al usuario los detalles de su tarjeta de crédito para poder efectuar la supuesta actualización. Mientras está activo, impide que se pueda abrir cualquier otra aplicación, incluido ...
Phishermen use call-forwarding scam to avoid detection when bank notes susp
2007-05-02 17:57:00 Most of get a lot of phishy e-mails requesting personal and financial information from criminals pretending to be a trusted brand. Now they are adding a devious twist designed to beat fraud detection software, which is used by a lot of companies as a means to detect fraudulent transactions, early on. Herb Weisbaum of KOMOTV.com (Seattle) ...
Los ?phishers? preparan nuevos sitios webs fraudulentos bancarios
2007-04-22 16:07:00 (seguridadenlared.org) Desde primera horas de la mañana del domingo se han detectado varias páginas web fraudulentas que suplantan la imagen de las entidades financieras: La Caixa y Banesto. Este tipo de web solo tiene un propósito; el robo de claves bancarias y están preparadas para que el lunes algún cliente caiga en la ...
Are Charity Fraudsters (Phishermen and Pharmers) preparing to exploit the V
2007-04-19 16:24:00 Internet criminals use disasters to get nice people to donate their hard-earned money to them, personally. Recent examples where this occurred have been the Katrina hurricane, Tsunami disaster and London bombings. According to the Sans Internet Storm Center, we can probably expect the same activity to occur in the wake of the Virginia Tech Disaster. Here is ...
Phishers Leveraging Virginia Tech Tragedy
2007-04-18 04:55:00 Further evidence that phishers are an entirely lower than the scum of the earth. From SANS: There has been a flurry of domain registrations related to the Virginia Tech tragedy, as reported by GoDaddy and other registrars. While some of these are undoubtedly well-intentioned organizations joining in the outpouring of support for the friends and family of ...
New IE 7 bug could help phishers
2007-03-16 00:00:00 A vulnerability in Internet Explorer (IE) browser could make phishing websites appear genuine, a security researcher has reported. The flaw lies in the way IE7 processes a locally stored HTML error message page that is typically shown when the user cancels the loading of a web page, said Aviv Raff, a security researcher based in Israel.
By: Malware Help Org
Phisher 'Vladuz' dodges eBay's defenses
2007-03-16 00:00:00 A miscreant who went by a variation of the name Vladuz was able to secure credentials reserved for employees of eBay and post on at least two of the company's forums, including (ironically) one dedicated to trust and safety.
By: Malware Help Org
Firefox: about:blank is Phisher's Best Friend
2007-02-25 18:29:01 Firefox suffers from a design flaw that can be used to confuse casual users and evoke a false sense of authority when visiting a fraudulent website. The flaw can be also used to bypass a fix for an old UI spoofing bug that was thought to be addressed.
By: Malware Help Org
Phishers targeting MySpace: security researcher
2007-02-22 18:28:01 Criminals are setting up MySpace phishing sites in a bid to circumvent the popular online community's anti spam measures, security researchers say.
By: Malware Help Org
Phishers using Google Maps mashup to locate victims
2007-02-22 18:28:01 Account holders with at least two Australian banks have become victims of a phishing scam in which malicious code reveals the physical location of affected IP addresses using Google Maps. Bank account holders in Germany and the U.S. have also been targeted.
By: Malware Help Org
Phishers go one step further
2007-02-01 02:15:02 Today we are going to talk about phishing. We already know that financial institutions are a prime target for phishers. As malware evolves from an amateur hobby to a money making business, things have evolved a lot.The phishing we are going to talk about doesn't target a financial institution, nor an e-Commerce site. It directly goes against the Spanish Internal Revenue Service, called "Agencia Tributaria". The scam goes like this, you receive an email that informs you that some taxes have been wrongly charged and that you are elligible for a refund of 90 €. Here is part of the email. It is written in Spanish. Bad Spanish indeed. Of course to apply for it you have to enter your data in a web form, that for sure is located somewhere not related to real agency. So as always, be careful, and type the url of the site you want to visit. Do not follow links from emails, it is much safer.
By: PandaLabs Blog
Phishers, spammers and hackers are stepping up their efforts
2007-01-15 22:07:02 Phishers, spammers and hackers are stepping up their efforts to get to your information. These days, your sensitive data is worth more than your money, in most cases. One Social Security Number can allow a bad guy to get dozens of credit cards and even loans for houses, cars, boats and more. In our battle to protect our sensitive data and protect our identity, here are some tips and some web sites to put in our arsenal, if you are a US citizen: Check your credit report. Every 12 months, you are entitled to receive a free credit report from all three of the national credit agencies. Make sure to take advantage of that freebie. Here is the first web site you should visit for all the details: Federal Trade Commission’s Facts for Consumers. Check your Social Security Earnings Statement. The Social Security Administration sends you this statement every year about 3 months before your birthday. You should check this report for signs of fraud. Make sure that the listed a...
Are the Phishermen Planning a Christmas Offensive?
2006-10-28 15:54:01 Vnuet is reporting that security experts have noted a massive botnet (1,000,000 compromised PCs) being formed and the suspicion is that it will be used for a holiday season (Christmas) attack on Internet consumers. “No one knows yet exactly what nefarious activity the army of captive PCs will be used for. But the chances are it [...]
Phishers are getting smarter
2006-08-21 19:45:02 I actually had to go and double check my wallet tonight after receiving an email from PayPal to one of my accounts… It’s not an account I use a lot, and I didn’t remember having a PayPal account linked to it so I doubted it was real, however it was interesting.. It was the one legit email that you do get from PayPal… the Credit Card expiration reminder… I actually had to get my wallet and double check that it wasn’t the last four digits of my CC that were showing… Here’s the email: Dear , Your credit card ending in 3812 will expire soon. To avoid any interruption to your service, please update your credit card expiration date by following the steps below. If you do not update your credit card expiration date - You will no longer be able to fund payments with this card To update your credit card expiration date: 1. Log in to your PayPal account 2. Go to the Profile subtab 3. Click on the ‘Credit Cards’ link in the Fi...
By: ComputerDefense
Phishers are bold
2006-08-15 19:42:01 I recently received yet another phishing attempt, this time to my email address associated with this site, from one Mr. Lord Freeman. I decided that for a change… I would reply and see what happened. I was rather impressed with how bold the individual was and how quickly they asked for information without any attempts to build comradery or familiarity. I’m interested to see how the individual will respond to the most recent email, and will keep you apprised… In the mean time.. here’s how quickly it happens. Original Email: From: Mr Lord Freeman lord_freeman10@virgilio.it> Reply-To: mrlord_freeman05@latinmail.com- Subject: WAITING FOR YOUR GOOD RESPONSE Date: Tue, 8 Aug 2006 00:55:06 +0100 (GMT+01:00) (Mon, 19:55 EDT) >From Mr Lord Freeman P.O Box 3038, 57 victoria Street, London SW1H, LONDON. Hello in order to transfer out (Twelve million, five hundred thousand British pounds) from our Bank. I have the courage to look for a...
By: ComputerDefense
|
|
 |
|
 |
