Nowadays, a lot of people are shopping online. To do that, they greatly rely on internet banking. What precautionary steps or systems are used to make sure users have a secure transaction? The most important thing to do is to make sure that your computer is not infected with malicious software. For this, you will […]
I received the following email from BusinessWire.com which makes me think that they got somehow hacked and are forcing all users to change their password. I couldn’t see anything on their website, also Google didn’t provide anything useful. We will be requiring all Businesswire.com users to change their password in the next few days. This maintenance is […]
We wrote last year a couple of times about Facebook likejacking scams. A likejacking scam is an attempt to lure Facebook users to click on a post in order to see something very interesting. For example, “Dad walks in on Daughter… Embarrassing” , „This spider is brutal“, “Who visited your Facebook Profile”, “I Will NEVER TEXT Again After […]
Original: http://blog.isc2.org/isc2_blog/2013/01/vulnerability-disclosure-a-new-business-model.html We all see in the mass media every day that software is vulnerable and that this is bad. But, few know what is happening behind the scene, until the news get out. There are two ways to disclosure a vulnerability: the most common one is to make a “full disclosure”, but there is […]
The so called “BKA Trojan” (BKA stands for German Federal Criminal Police) malware which is also known as the Ransom trojan in other countries, has found a more convincing way to fool computer users to pay. Now, together with other eight possible misdeeds, the user is accused of hosting and distributing child pornography materials from his computer. […]
Apple has released a new version of iOS, the operating system that powers the iPhone, iPad, iPod. The new version fixes 20 security flaws related to the Safari browser. Some of the vulnerabilities were allowing bypassing of authentication, cross-site scripting attacks, privilege escalations, arbitrary code execution, memory corruptions. Last but not least, the compromised Türktrust certificates were revoked. […]
We wrote last week about Malware delivered with fake Craigslist fax-to-email notifications.This week’s malware delivery mechanism is a fake email notification from the well-known online hotel reservations portal booking.com. The malware is delivered when you click on “Print Booking Details” via an archive which should contain the form with the reservation details. In order […]
Cybercriminals are using a combination of social engineering tactics to trick users into opening malware-spreading emails. Avira experts have come across emails that appear to come from Craigslist, but sent via eFax Corporate. The messages, which have nothing to do with either Craigslist or eFax, inform recipients that they’ve received a 24-page fax. However, researchers […]
http://www.searchsecurity.de/specials/security_corner/articles/391962 This is my first article on SearchSecurity.de’s Security Corner, but definitely not the last one. I will publish soon the English version as well.
If you receive such a message containing an HTML page attached, don’t open it. The email pretends to come from “craigslist – automated message, do not reply <robot@craigslist.org>” and has the subject ”Efax Corporate”. What I find interesting is that the fraudsters didn’t even bother to write JS code to detect if the script runs in […]
You must be logged in to post a comment.