New entry in the TSC: Script in the middle

Thanks to Virus Bulletin, we have now a new entry in The Spammers’ Compendium:

Script in the middle
UO!Script in the Middle!JavaScript

My company offers consulting on how to prepare for TISAX, ISO27001, NIS2, CSMS and SOC2 audits.
Get in touch with us here: https://www.endpoint-cybersecurity.com/contact/

14 October 2010
Description

The email has an HTML document attached to it that contanis a for. Clicking submit will POST the user’s data to a website controlled by the crooks, which automatically and invisible redirects to a legitimate website. See also The Responsibility Transfer.

Example

The original article with all the juicy details can be found in Avira Techblog: http://techblog.avira.com/2010/09/08/phishing-getting-verified/en/


© Copyright 2010 Sorin Mustaca, All rights Reserved. Written For: Sorin Mustaca - Security & Technology


Want to work with me on this topic?
Check Endpoint Cybersecurity to see the consulting services we offer.

Related Posts

Let there be only one !

One Package Manager for them All The idea of one universal package format for all distributions has been batted around a few times over the years. Developers from RedHat, Fedora, Debian, Ubuntu, openSUSE, Mandriva and Mageia got together last week at the SUSE office in Nürnberg to discuss how they might implement a universal application […]

Added in searchsecurity.de (ISC)2 Corner

http://www.searchsecurity.de/specials/security_corner/isc2/ My company offers consulting on how to prepare for TISAX, ISO27001, NIS2, CSMS and SOC2 audits. Get in touch with us here: https://www.endpoint-cybersecurity.com/contact/ My cooperation with SearchSecurity.de is finally showing something. I was addded on the (ISC)2 Security Corner:                       Sorin Mustaca, Avira Operations […]

The Freemium model

I stumbled on a very good article on TechCrunch written by the contributor UZI SHMILOVICI from the company Future Simple. The article is called “The Complete Guide To Freemium Business Models” and it is located here. My company offers consulting on how to prepare for TISAX, ISO27001, NIS2, CSMS and SOC2 audits. Get in touch […]