Google Removes .CO.CC Subdomains Over Phishing, Spam Concerns

In a rare and sweeping move, Google has removed all of the sites hosted on .co.cc domains from its search results, saying that because such a large percentage of the sites on that freehosting provider are low-quality or spammy, they decided to de-index all of them. The .co.cc domain is well-known...

Open Redirect Weakness in MBoard

High-Tech Bridge SA Security Research Lab has discovered weakness in MBoard which could be exploited to perform phishing attacks. 1 Open redirect weakness in MBoard The weakness exists due to insufficient validation of the input data in the "url" parameter in go.php when redirecting users to...

Spam Profits Down, Cybercrooks Flock to Targeted Attacks

HED: Report: Spam Profits Down, Cybercrooks Flock to Targeted Attacks DEK: A report from Cisco Systems suggests that cybercriminals are abandoning spamming for targeted attacks, which are more profitable. A new report from Cisco Systems Inc. analyzing illegal activities from spammers and other...

Mozilla Firefox SSL Certificate Spoofing Vulnerability (Windows)

The host is installed with Mozilla Firefox and is prone to SSL certificate spoofing vulnerability. OpenVAS Vulnerability Test $Id: gbmozillafirefoxsslcertspoofingvulnwin.nasl 7024 2017-08-30 11:51:43Z teissa $ Mozilla Firefox SSL Certificate Spoofing Vulnerability Windows Authors: Madhuri D...

Mississippi Flooding Disaster Email Scams, Fake Antivirus, and Phishing Attack Warning

Users should be aware of potential email scams, fake antivirus, and phishing attacks regarding the Mississippi flooding disaster. Email scams may contain links or attachments that may direct users to phishing or malicious websites. Fake antivirus attacks may come in the form of pop-ups that flash...

CVE-2011-1826

Open redirect vulnerability in the Administrative Console in CA Arcot WebFort Versatile Authentication Server VAS before 6.2.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

Open redirect

Open redirect vulnerability in the Administrative Console in CA Arcot WebFort Versatile Authentication Server VAS before 6.2.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2011-1826

Open redirect vulnerability in the Administrative Console in CA Arcot WebFort Versatile Authentication Server VAS before 6.2.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2011-1826

CA Arcot WebFort Versatile Authentication Server (VAS) before 6.2.5 is vulnerable to an open redirect in the Administrative Console due to insufficient filtering of a request parameter, enabling attackers to redirect users to arbitrary sites and facilitate phishing via crafted URLs. Affected prod...

Open redirect

Open redirect vulnerability in HP Proliant Support Pack PSP before 8.7 allows remote authenticated users to redirect other users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2011-1538

Open redirect vulnerability in HP Proliant Support Pack PSP before 8.7 allows remote authenticated users to redirect other users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2011-1538

CVE-2011-1538 describes an open redirect in HP Proliant Support Pack (PSP) prior to version 8.7 . The vulnerability enables remote authenticated users to redirect other users to arbitrary websites, potentially aiding phishing attacks. The HP security bulletin corroborates the issue as URL redirec...

Osama Bin Laden's Death Email Scams, Fake Antivirus, and Phishing Attack Warning

Users should be aware of potential email scams, fake antivirus, and phishing attacks regarding Osama Bin Laden's death. Email scams may contain links or attachments that may direct users to malicious websites. Fake antivirus attacks may come in the form of pop-ups that flash security warnings and...

Insecure Mail Server Offers Chinese Government Accounts To The Masses

A security researcher who identified holes in SCADA software used by utilities in China has issued a new warning to that country’s CERT about insecure Web infrastructure, including an e-mail server that allows any Web user to create their own Chinese government mail account. Dillon Beresford, a...

Expert: Three Quarters of Employees Duped by Phishing Scams

In the wake of the data breach at e-mail marketing firm Epsilon, the specter looms of widespread phishing attacks on hundreds of millions of e-mail users whose information was stolen from the firm. But according to Aaron Higbee, the Chief Technology Officer at Intrepidus Group, organizations had...

Security Threats Increasing in Sophistication and Precision

IBM’s X-Force 2010 Trend and Risk report showed that as vulnerability disclosures hit their highest level ever in 2010, security threats continued to increase in sophistication and precision. Like the term or not, 2010 may well have been the year of the APT, the term has become familiar to nearly...

Microsoft Windows Fraudulent Digital Certificates Spoofing Vulnerability

This NVT has been replaced by NVT gbmswindowsfraudulentdigitalcertspoofingvuln.nasl OID:1.3.6.1.4.1.25623.1.0.801953. The host is installed with Microsoft Windows operating system and is prone to Spoofing vulnerability. OpenVAS Vulnerability Test $Id:...

Sophisticated Attack Yields Data On IEEE Members

IEEE, the world’s leading society for technical professionals, has warned some 800 members that their credit card and personal information may have been stolen. The FBI has been notified of the breach. The group disclosed the November, 2010 breach in a letter to the New Hampshire Attorney General...

Japan Earthquake and Tsunami Disaster Email Scams, Fake Antivirus and Phishing Attack Warning

US-CERT would like to warn users of potential email scams, fake antivirus and phishing attacks regarding the Japan earthquake and the tsunami disasters. Email scams may contain links or attachments which may direct users to phishing or malware-laden websites. Fake antivirus attacks may come in th...

Social networks to be monitored by Mumbai police to keep a check on hate pages !

After observing an increase in the number of phishing attacks and several other cyber crimes, the cyber police have intensified patrolling of the social networking sites. Police, with the help of IT experts, will keep a check on any hate posts or groups created in cyberspace. The action reportedl...