Zone-H Cross Site Scripting

. | | \ / \ / / \ | | \ / \ / \ / | \ / // | Y \ // \ | | \ / /|| /\ || / \ | / / / / / / / Cross Site Scripting Vulnerability Author: Sora Contact: vhr95zw at hotmail dot com Website: http://greyhathackers.wordpress.com/ ———————— 1. INFORMATION | ———————— Site: http://www.zone-h.com.cn/...

Fake American Express Emails Circulating

Emails purportedly coming from American Express are making the rounds of inboxes this month. The link in the email takes them to an AmEx website lookalike, where if they enter the requested information, it gets sent to cybercriminals. Read the full article. Help Net Security...

Windows Users Targeted in Anti-Malware Scam

A rogue anti-malware product called DefenceLab redirects infected PCs to Microsoft’s Support portal, but modifies the HTML content as it returns so as to appear as if Microsoft is endorsing the worthless software. Read the full article. The Register...

Google Sues Work@Home Scam Co.

Google filed a lawsuit Monday against a U.S. company it alleges runs work-at-home scams that unnecessarily charge people’s credit cards and spoof Google’s brand name. Read the full article. Computerworld...

Web Admins Targeted in Phishing Attack

Scam e-mail artists have launched a massive campaign to trick webmasters into giving up the credentials needed to administer their Web sites, targeting site owners at more than 90 online hosting providers. Read the full article. Washington Post...

Fake H1N1 E-mail Alerts Lead to Malware

Malicious hackers are using fake alerts around H1N1 Swine Flu vaccines to trick end users into installing malware on Windows computers, according to warnings issued by computer security firms. The latest malware campaign begins with e-mail messages offering information regarding the H1N1...

New Mac Phishing Attack

An email which purports to relate to a recent Apple retail transaction and asks for details of any recent orders is out there. The email also carries a stuffed file. This contains an ‘exe’ file which will only launch on a Windows machine. The email reads: “We recorded a payment request from ‘Appl...

UK Police Warn Job Seekers to Avoid Being Money Mules

The Serious Organised Crime Agency Soca says websites are currently being used to recruit “money mules”. The “mules” are ordinary people who send and receive payments through their bank accounts to facilitate business. But in reality, the cash has been laundered from crime, leaving unwitting mule...

U.S. Takes Down $9 Million RBS WorldPay Hacking Ring

U.S. and international prosecutors have taken down a criminal ring that they allege was responsible for an ATM scam last year that stole about $9 million from RBS WorldPay. The criminals were able to evade the company’s encryption system used on payroll debit cards and withdraw money from ATMs in...

Fake Conficker Alert Drops Scareware Threat

An ongoing spam campaign is once again attempting to impersonate Microsoft’s security team by mass mailing Conficker.B Infection Alerts that drop a sample of the Antivirus Pro 2010 scareware scam. Here’s a sample of what the text looks like: “Dear Microsoft Customer, Starting 18/10/2009 the...

Zeus Trojan Part of New Outlook Web Access Phishing Scam

The attackers behind the Zeus Trojan have unleashed a new phishing scam that is specifically targeted at users of the popular corporate webmail tool Outlook Web Access. The phishing emails include the recipient’s actual email address and appear to be an update to the OWA application. The mail...

Citing Cybercrime, FBI Director Doesn't Bank Online

The head of the U.S. Federal Bureau of Investigation has stopped banking online after nearly falling for a phishing attempt. FBI Director Robert Mueller said he recently came “just a few clicks away from falling into a classic Internet phishing scam” after receiving an e-mail that appeared to be...

iPhone SMS Used as Bait in Rogue AV Scam

Cyber-criminals are using interest in MMS or SMS on the iPhone to trick users into downloading rogue antivirus software. According to security company Websense, attackers are abusing Google’s search engine to get users to click on links leading to a malicious page pushing scareware. Read the full...

Rogue AV Scam Targets Google PageRank

An ongoing attack on Google users is sending victims to rogue anti-virus software sites, researchers said this week. The attack takes advantage of Google’s page-ranking feature, according to researchers at eSoft’s Threat Prevention Team. The scam works like this: An attacker hacks a site, but...

Facebook Scam: I'm Stranded In London. Send Money!

From DarkReading Gadi Evron Facebook users are facing a new threat, 419 scams in chat form, masquerading as friends. I know because it just happened to me think: 419 scam. An “acquaintance” sent me a message using Facebook chat that said, “Hi.” Easy enough. I replied in kind. Then she told me a...

Security alert: Twitter porn names scam

From PC World Aurora Dizon The “Twitter porn names” game, currently Twitter’s top trending topic, may be a fun distraction that gives you and your friends something to tweet about. But it also has a security hole–one that is no technical snafu. It could be simple human error, but it’s also possib...

Firefox < 3.0.9 Multiple Vulnerabilities

The installed version of Firefox is earlier than 3.0.9. Such versions are potentially affected by the following security issues : - Multiple remote memory corruption vulnerabilities exist that can be exploited to execute arbitrary code in the context of the user running the affected application...

URL spoofing with box drawing character — Mozilla

Bjoern Hoehrmann and security researcher Moxie Marlinspike independently reported that Unicode box drawing characters were allowed in Internationalized Domain Names IDN where they could be visually confused with punctuation used in valid web addresses. This could be combined with a phishing-type...

GMail, GTalk phishing scam underway

Attention GMail and GTalk users: There’s a major spam run underway with social engineering lures to steal your login cretentials. This image shows a GMail message that purports to be an account termination warning from Google but, if a user is tricked into clicking on the link, he/she is redirect...

Using MS08-0 5 8 attack Google-bug warning-the black bar safety net

From: 80sec Vulnerability description:Google is the largest search engine. While Google owns the other large WEB application product line, to EMAIL, BLOG, online documents, personal home pages, electronic maps, discussion forums, RSS, etc. the Internet almost all of the application services. 80se...