Abuse of social networking sites misused among youth in Kochi !

while engaging in online social networking sites seemed to have yielded little results, if the statistics and current trends are any indication. The Cyber Cell of the City Police has received more than 40 complaints of abuse of social networking sites like Orkut and Facebook this year itself. In...

FBI Uses Facebook to Catch Baltimore Terrorist

Gathering evidence on Facebook has become a standard legal practice, so a social sting operation was inevitable. This method led the Federal Bureau of Investigation FBI to apprehend a would-be terrorist in Baltimore. An FBI informant initially contacted 21-year-old Antonio Martinez after he...

Fake Amazon Receipt Generator Dupes Merchants

A new scam has been circulating the internet lately that aims to swindle Amazon sellers by generating fake receipts. Amazon Receipt Generator, an executable file, has been making the rounds on hacking forums for the last few months. The program allows scammers to input an array of fake informatio...

CA Internet Security Suite 2010 - KmxSbx.sys Kernel Pool Overflow

CA Internet Security Suite 2010 - KmxSbx.sys Kernel Pool Overflow / Exploit Title: CA Internet Security Suite 2010 KmxSbx.sys Kernel Pool Overflow 0-day Exploit Date: 2010-11-28 Author: Nikita Tarakanov CISS Research Team Software Link:...

New Google service could be a godsend to scammers !

The Instant Previews service that Google launched last week allows users to click on the magnifying glass icon next to a result's title or on its background in order to see a preview of that result. There is no doubt that this feature is very helpful when it comes to skimming through legitimate...

Image of the Day: Fake Angry Birds Android App

Security researcher Jon Oberheide wrote a fake extension to the popular Angry Birds mobile game and put it in the Android Market as a demonstration of how an attacker could exploit a vulnerability he’d found in Android. The phony app didn’t do anything malicious, but it had permissions on Android...

Facebook Glitch Locks Out Accounts

A bug in an account verification system used by Facebook resulted in a wave of account suspensions Tuesday that had users locked out of the world’s largest social network and scratching their heads over the reason. Facebook discovered a bug in a system designed to detect and disable fake accounts...

Wyse Rapport Hagent Fake Hserver Command Execution

Wyse Rapport Hagent Fake Hserver Command Execution. CVE-2009-0695. Remote exploits for multiple platform $Id: hagentuntrustedhsdata.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the...

Injecting Fake Updates: Evilgrade

Evilgrade is a modular framework that allows the user to take advantage of poor upgrade implementations by injecting fake updates. It comes with pre-made binaries agents, a working default configuration for fast pentests, and has it’s own WebServer and DNSServer modules. Easy to set up new...

Midterm Election Buzz Fuels Rogue AV Attacks

Interest in the U.S. midterm elections is being used to lure Web surfers to malicious Web pages that are pushing rogue antivirus programs, according to security firm Websense. With voter interest running high in the U.S., Web searches for hot terms like “midterm election polls,” “2010 midterm...

Hackers Target Halloween Costume Searches with Fake Anti-Virus Trojans

Attackers are targeting people searching for last-minute Halloween costume ideas, reported CyberDefender on Oct. 29. The Internet security vendor, along with other firms like Blue Coat and BitDefender, warned users about the dangers of searching online for Halloween-related topics. "Popular searc...

Stuxnet Media Storm Now Feeding SEO Attacks?

How do you know when a computer virus has officially jumped the fence to become a media sensation? Probably when scammers start using popular interest in it as bait for their own malware. So it is with the Stuxnet worm, which was identified in July, but has become the focus of intense media...

LinkedIn Members Targeted by Botnet Malware

Members of LinkedIn who clicked on fake connection requests sent users to a Website that displayed “PLEASE WAITING…4 SECONDS” before redirecting them to Google. During those 4 seconds, the Website downloaded Zeus data-theft malware onto their PCs. Read the full article. eWEEK...

Nearly 60,000 Fake Websites Created Weekly

Every week, hackers are creating 57,000 new Web addresses which they position and index on leading search engines in the hope that unwary users will click them by mistake. Read the full article. Help Net Security...

Survey Scam Offers False Shelter From Surveys

Scammers are offering prospective marks an application that supposedly shields them from exposure to survey scams. Naturally, you first have to fill in a survey to install the script, which is punted through Userscriptsdotorg. Read the full article. The Register...

Gumblar Crew Starts Monetizing Compromised Servers

It looks like the group behind the Gumblar mass Web-site infections is beginning to get serious about making some money from all of the servers that the attacks have compromised in the last 18 months. The group has begun using some of its compromised servers in spam operations that are pushing th...

TweetDeck Scam Uses Fake Update As Lure

Compromised Twitter accounts have been used to post links to an exploit portal that poses as a download site for an update to TweetDeck, the popular micro-blogging client software package. Read the full article. The Register...

Opera Browser Address Bar Spoofing Vulnerability

Opera 是独一无二的网络浏览器, 功能强大，使您上网更高效、更安全、更极速 Opera浏览器地址栏存在欺骗漏洞 Opera 10.60 and lower 厂商补丁： opera ---- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.opera.com script language="javascript" function pausepd date = new Date; var curDate = null; do var curDate = new Date; whilecurDate-date pd;...

Design/Logic Flaw

Opera before 10.60 allows remote attackers to bypass the popup blocker via a javascript: URL and a "fake click."...

CVE-2010-2662

CVE-2010-2662: Opera before 10.60 allows remote attackers to bypass the popup blocker using a javascript: URL and a fake click. Affected product is the Opera browser; vulnerability details and CVE references are documented in multiple sources. Mitigation per Gentoo GLSA 201206-03 recommends upgra...