Virus Information News

[First]  [Previous] |    160     161     162     163     164     165     166     167     168     169    | [Next]  [Last] of 172 page(s)

Free hosting for phishing pages

blog.commtouch.com

May 13, 2010

Yesterday we announced our collaboration with RSA, The Security Division of EMC, in which we now provide real-time phishing data to the RSA® FraudActionSM Anti-Phishing Service to further help prevent online fraud and identity theft. The phishing data

Aside from the traditional "dedicated" phishing sites, we also detect sites that have been hidden within legitimate sites. In our Q1 2010 trend report we provided statistics for these in the section entitled "Compromised websites - Categories infected with phishing." As described in the trend report, these legitimate sites infected with phishing are generally not changed in any obvious way. The phishing page is added by a hacker - unbeknownst to the site owner - and the link to the page is then inserted into phishing emails. The screenshots below show a recentexample identified by the Commtouch team of a legitimate site that is unknowingly hiding a Bank of America phishing page. Phishers gain several advantages from this ploy: * The legitimate site name lends legitimacy to the link * The phishing page is hosted for free * It usually takes several days or more to detect and remove the page

How can they misuse thee Google - Let us count the ways.. (Part 3)

blog.commtouch.com

May 6, 2010

Google birthday scam: The email features standard scam elements but what caught our collective eye is that the huge "winnings" are distributed by Google themselves in honor of their 12th anniversary.

According to our calculations the 12th anniversary will actually be in September this year. Google typically celebrates anniversaries by changing the search logo on the day - see 11th birthday logo below. We will be watching for Google birthday spam closer to the time.

How can they misuse thee Google - Let us count the ways.. (Part 2)

blog.commtouch.com

May 5, 2010

In Google's words, "Google Sites is a free and easy way to create and share webpages". Of course there are loads of spammers seeking free webhosting for the usual pharmaceuticals, replicas and porn sites.

How can they misuse thee Google - Let us count the ways.. (Part 1)

blog.commtouch.com

May 4, 2010

Being the number one name on the Web and also offering so many useful services naturally attracts misuse by the shadier side of the Internet.

We've written in the past about the abuse of google docs and spreadsheets. And in our Q1 trend report we discussed the high percentage of spam emails with forged sender addresses showing Gmail. But wait... there's more. In this series we discuss 3 more examples where the legitimacy and trust conferred by the Google name has been misused...

Spammers aren't Tinkerbell; Identity Theft Takes the Disney Magic Out of the Magic Kingdom

blog.commtouch.com

April 27, 2010

Scammers aren't above using the most trusted brands to con you out of money. This scam allows spammers to whistle while they work - all the way to the bank. This time, they are offering "free" Disneyland tickets.

The email explains that the free tickets you signed up for a few months ago were shipped to the wrong address. It directs you to a URL requesting your name, address, and many other personal details. Once you submit these you are informed that your information is being processed (it sure is...). Of course, you don't get the tickets, and they do get a vacation, thanks to your trust in the Disney brand.

CNN redirect exploited by scammers

blog.commtouch.com

by Avi Turiel

April 6, 2010

By now you know not to believe those emails promising overnight wealth with very little effort - right? Seriously.

These spam campaigns apparently still attract enough clickers. The subjects in a recent outbreak were typically bold and the emails featured short one-liners promising work-from-home riches. The clever touch was providing a link that exploits redirect functionality supported by CNN's ad servers.

Spammers have given up!

blog.commtouch.com

by Avi Turiel

March 4, 2010

No, not really - but a recent outbreak seems to use no technique at all to get recipients to click on a link to a malware-hosting site.

The links lead to sites requiring "the latest version of Macromedia Flash Player". Clicking on the download link or simply loading the page gets you free malware and an all-expenses-paid trip to the nearest botnet. Serves you right for not knowing that Macromedia was acquired by Adobe over 4 years ago.

MP3 spam spreads holiday cheer

blog.commtouch.com

December 25, 2009

Commtouch Labs reported a recent attack involving MP3 messages. The email body and subject line were blank, as seen below, and each message had an MP3 attached

While the emails were all subject-less, the MP3s were creatively named. File names include: beauteously, unsecularise, sporicide, cookshack, teentsier, muftis, zoogeography and squishiness.

Sourceforge Wiki Demonstrates User Generated Content Threat | Commtouch Café

blog.commtouch.com

July 9, 2009

Sourceforge.net is one of the most well-respected technology download sites on the Internet, as evidenced by its Google page rank of 9 (out of possible 10), and the fact that it is ranked among the top 200 sites according to Alexa. However, recently Sourc

One of Sourceforge's subdomains is a wiki that allows users to add their own relevant content. Apparently some spammers saw this as an opportunity to do some search engine bombing. They filled up pages of the wiki with pornographic keywords, with links to their pornography pages (see screenshot below). The keywords and links are designed to leverage a highly ranked site (e.g. Sourceforge) to provide inbound links to their pornography site, causing it to rank highly in search engines as well.

5 things to do today to keep your data private

blog.chron.com

February 4, 2013

Today is Data Privacy Day, a global "holiday" aimed at raising awareness about online security and privacy.

However, it's hard not to be aware of the constant threats that hammer on our digital doors. The joy of the Internet is that we're all connected to each other, making it easy to share information and commerce. But there's also a dark side: Just as in the "real" world, the Net is full of evildoers who want to take advantage of the less-than-vigilant among us. Don't be one of them. On Data Privacy Day, take some time to secure your virtual borders. Here are five things you can do right now that will give you peace of mind and make it little harder for the jerks who want to steal your data, your identity and your cash.

[First]  [Previous] |    160     161     162     163     164     165     166     167     168     169    | [Next]  [Last] of 172 page(s)