Nearly 60,000 Fake Websites Created Weekly

Every week, hackers are creating 57,000 new Web addresses which they position and index on leading search engines in the hope that unwary users will click them by mistake. Read the full article. Help Net Security...

Survey Scam Offers False Shelter From Surveys

Scammers are offering prospective marks an application that supposedly shields them from exposure to survey scams. Naturally, you first have to fill in a survey to install the script, which is punted through Userscriptsdotorg. Read the full article. The Register...

Gumblar Crew Starts Monetizing Compromised Servers

It looks like the group behind the Gumblar mass Web-site infections is beginning to get serious about making some money from all of the servers that the attacks have compromised in the last 18 months. The group has begun using some of its compromised servers in spam operations that are pushing th...

TweetDeck Scam Uses Fake Update As Lure

Compromised Twitter accounts have been used to post links to an exploit portal that poses as a download site for an update to TweetDeck, the popular micro-blogging client software package. Read the full article. The Register...

Opera Browser Address Bar Spoofing Vulnerability

Opera 是独一无二的网络浏览器, 功能强大，使您上网更高效、更安全、更极速 Opera浏览器地址栏存在欺骗漏洞 Opera 10.60 and lower 厂商补丁： opera ---- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.opera.com script language="javascript" function pausepd date = new Date; var curDate = null; do var curDate = new Date; whilecurDate-date pd;...

Design/Logic Flaw

Opera before 10.60 allows remote attackers to bypass the popup blocker via a javascript: URL and a "fake click."...

CVE-2010-2662

CVE-2010-2662: Opera before 10.60 allows remote attackers to bypass the popup blocker using a javascript: URL and a fake click. Affected product is the Opera browser; vulnerability details and CVE references are documented in multiple sources. Mitigation per Gentoo GLSA 201206-03 recommends upgra...

CVE-2010-2662

Opera before 10.60 allows remote attackers to bypass the popup blocker via a javascript: URL and a "fake click."...

Fake DNS Service

This module provides a DNS service that redirects all queries to a particular address. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'resolv' class MetasploitModule 'Fake DNS Service', 'Description' = %q Thi...

Fee Scam By Fraudsters Went Unnoticed

According to the FTC, the fraudsters charged 1.35 million credit cards a total of $9.5 million, but only 78,724 of these fake charges were ever noticed. Typically they floated just one charge per card number, billing on behalf of made-up business names such as Adele Services or Bartelca LLC. Read...

Fake Government Email Spam Hides Zbot

Attention-piquing malicious spam emails purportedly coming from the DHS, the Pentagon or the Transportation Security Administration have recently been spotted by researchers. Read the full article. Help Net Security...

GoDaddy's WordPress, PHP Sites Hacked Again

WordPress users whose websites are hosted on GoDaddy servers have been targeted by fake AV peddlers yet again. Read the full article. Help Net Security...

SMS Crime Ring Busted in Malaysia

Malaysian cops have busted an alleged text message spam scam ring thought to have fleeced locals for hundreds of thousands of dollars. The group are suspected of raking in RM6.4m $1.9m between 2006 and April 2010 using fictitious lottery winnings as a bait for an advanced fee fraud. Read the full...

Facebook 'Like-jacking' Scams Expand

Facebook attacks that force users to unwittingly endorse scam pages keep spreading, researchers say. Attacks have now circulated that cause users to recommend pages promising naked pictures of alternative rock diva Hayley Williams or the phone number of heart-throb singer Justin Bieber. Read the...

CAPTCHAs Get the Botnet Beatdown

Botnets increasingly are creating phony online accounts on legitimate websites and online communities in order to steal information from enterprises. Merrick Furst, botnet expert and distinguished professor of computer science at Georgia Tech, says bots are showing up “en masse” to customer-facin...

Research: 1.3 Million Malicious Ads Viewed Daily

The true extent of the malvertizing scourge became much clearer this week with the release of new research by Dasient which shows that about 1.3 million malicious ads are being viewed online everyday, most pushing drive-by downloads and fake security software. Dancho Danchev sums up the findings...

Watch for Fake Twitter Support Malware

Almost a week ago, Twitter began warning its users about fake Twitter Support emails. Since then, a couple of variants of the email have surfaced, with small differences in the text “unreaded messages”, “information messages”. Read the full article. Help Net Security...

Fake AV Using Domain Rotation To Blast Users

In a report being released today, Google said that between January 2009 and the end of January 2010 it found some 11,000 malicious or hacked Web pages that attempted to foist fake anti-virus on visitors. Read the full article. KrebsonSecurity...

Trojan Malware In Fake Google Chrome Email

Miscreants have created a Trojan that poses as a Google Chrome extension. Spammed messages attempt to dupe prospective marks into trying an add-on that “helps you better organise your documents received in your email”. Read the full article. The Register...

Google to Release Findings on Fake AV

New research from Google underscores the breadth of fake antivirus operations on the Web. An analysis of 240 million Web pages collected by Google’s malware detection infrastructure over a 13-month period discovered more than 11,000 domains involved in the distribution of rogue antivirus AV. Read...