Malware Poses as Faux Adobe Flash Update

Cybercriminals are perpetrating a spam campaign by sending out emails with malicious attachments containing a Pony downloader that uploads a Zeus Trojan to victim machines while also leading users to a number of compromised domains housing fake Adobe Flash Player updates in order to dupe the...

Infected Site Spreading SMS Android Malware

The website of a popular watch retailer is reportedly redirecting users that visit the site on Android-based devices to a number of malicious domains serving up premium rate SMS malware. According to a WebRoot report, users that visit the unnamed watch-selling website in Bulgaria are redirected t...

Phishing Attack Leads to Phony Google, Compromised Red Cross Sites

An apparent phishing scam involving fake Google and Red Cross websites is making the rounds according to security firm Sophos, which intercepted a spammy e-mail this morning that tries to send unsuspecting users to less than genuine versions of those sites. An email with the subject line, “Re:...

Attackers Using Fake Chrome Updates to Lure Victims

Google patched nearly two dozen security vulnerabilities in Chrome on Thursday and a day later attackers have begun circulating fake Google Chrome updates that actually are part of a scam related to the Zeus botnet and is designed to steal online banking credentials, among other things. Attackers...

Faux, Hacked Apps Continue to Litter Google Play Marketplace, Developer Alleges

Phony, potentially malicious apps are continuing to make their way into Google’s Play marketplace, triggering debate over whether applications are being properly vetted for adhering to the company’s marketplace policies. Developers at the Root Uninstaller Team have called out another app publishe...

Threat Outbreak Alert: Fake Personal Video Sharing Email Messages on October 9, 2013

Low Alert ID: 27713 First Published: 2013 January 2 15:05 GMT Last Updated: 2013 October 9 18:33 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a video attachment for the recipient. The text in the email message attempt...

[BeEF] Fake Browser Update Exploitation

How to use BeEF Framework for fake browser update exploitation. Fake Browser Update : - In BeEF Framework there is a new feature available in social-engineering called Clippy using this feature we are sending the fake Update notification and if user click on that so obviously he is going to insta...

Spammers Using Fake YouTube Notifications to Peddle Drugs

Spammers are attempting to deceive unsuspecting users into clicking on fake YouTube links that lead to a counterfeit drug website, according to a report yesterday from security firm Webroot. Dancho Danchev writes that pharmaceutical scammers are circulating emails that mimic legitimate Youtube...

Threat Outbreak Alert: Fake Product Order Email Messages on February 26, 2014

Medium Alert ID: 27710 First Published: 2012 December 21 18:20 GMT Last Updated: 2014 February 27 13:02 GMT Version: 79 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order quote for the recipient. The text in the email...

Threat Outbreak Alert: Fake Online Gambling Offer Email Messages on September 9, 2014

Medium Alert ID: 27647 First Published: 2012 December 14 15:33 GMT Last Updated: 2014 September 10 12:57 GMT Version: 2 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain bonus offers from the Roxy Palace Casino for the recipient. The tex...

Threat Outbreak Alert: Fake Product Order Email Messages on March 22, 2015.

Low Alert ID: 27634 First Published: 2012 December 13 15:21 GMT Last Updated: 2015 March 23 12:45 GMT Version: 52 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order quote attachment for the recipient. The text in the email...

Chrome Playing Hard to Get with Blackhole Exploit Kit

Google’s Chrome browser is something of a tough customer for the infamous and widely deployed Blackhole Exploit Kit, according to Blue Coat security researcher, Adnan Shukor. Shukor notes there has been an uptick in the kit’s use of plain HTML files, instead of iframes, to redirect users to explo...

FBI Warns of New Twist to Reveton, Citadel Malware Scams

The cybercrime group behind the Citadel malware and Reveton ransomware has upped the stakes with a new extortion technique, the FBI’s Internet Crime Complaint Center said today. Reveton scams have now co-opted the Internet Crime Complaint Center with a new fake warning to users whose computers ha...

[Wifi Honey] Creates fake APs using all encryption

This is a script, attack can use to creates fake APs using all encryption and monitors with Airodump. It automate the setup process, it creates five monitor mode interfaces, four are used as APs and the fifth is used for airdump-ng. To make things easier, rather than having five windows all this ...

Beware of Fake-Antivirus "Win 8 Security System"

Late in August McAfee Labs discovered a Fake Antivirus program that claims to detect infections, and displays alerts to scare users into purchasing protection. On the contrary, this program is not genuine software and has nothing to do with reliable and effective AV tools. The truth is that this ...

Student hacked into school's computer to obtain a girl's details

Matthew Higgins, now 20 and a university student, hacked into his school computer system to obtain a girl's details and then boasted on a hackers' forum. Matthew is son of a police inspector. Caernarfon Crown Court heard it was the case of a clever young man caught red-handed. The defendant says...

Open-Redirect Vulnerability, Fake Government URLs Duping Users

Spammers have recently taken advantage of an open-redirect vulnerability to phish users and trick them into clicking through links that appear to be coming from government .gov URLs. The scam relies on a malformed series of URLs that appear to be coming from 1.USA.gov, a collaboration between...

Facebook spam messages says WWE Champion Rey Mysterio dies during fight

A spam message is circulating on Facebook that WWE wrestler Rey Mysterio has died in a stunt gone wrong. Social media is now full of spam messages like this. Last week scammers trick users with "John Cena is died" and this week, rumors about the death of Rey Mysterio. The message actually include...

Fake Payroll Confirmation Email Leads to Black Hole Exploit Kit

Criminal hackers launched an attack campaign earlier this week in which they sent a slew of emails purporting to come from the financial software developer Intuit. The emails contained links that led to sites hosting the Blackhole exploit kit in an apparent attempt to infect the machines of...

Phishy Direct Messages Link to Fake Twitter Sign-in Page

A wave of spammy direct messages on Twitter contain URLs leading to what appears to be a Twitter login page, but is actually a phishing site trying to pilfer user login credentials. The ploy from the attackers in this campaign is a familiar one: “hey, someone is spreading nasty rumors about you...