Strange spoofing technique evades antiphishing filters
14074
Targets include PayPal, eBay and others A Reg reader has produced screen shots that demonstrate a powerful phishing technique that's able to spoof eBay, PayPal and other top web destinations without triggering antiphishing filters in IE 7 or Norton 360. Plenty of other PayPal users are experiencing the same ruse, according to search engine results.â¦
55540
Two-way filtering is touted as a new security feature, but Preston Gralla discovers it's impossible to practically configure outbound filtering.
94093
An intruder could manipulate a flaw in how the browsers handle image files to see where the user has been surfing.
229644
Services try different approaches to sender authentication to halt spam.
387750
Hackers have come up with a way to get around one of Microsoft's antipiracy mechanisms for Vista.
703214
Online crooks are constantly switching tactics in an attempt to invade your PC. Be on guard for these latest sneaky tricks.
14529
Blog: Feature designed to dial Web page phone numbers is subject to cross-site scripting attack.
347238
Hole allows attackers to create fake Web sites that look genuine.
5949
Handling of images could allow an attacker to take over your PC.
36812
In a twist, security researchers have discovered a group of hackers who are exploiting a new category of victims -- aspiring Internet scammers.A Moroccan group called &quot;Mr. Brain&quot; is offering free phishing kits on a Web site hosted in France, said Paul Mutton, Internet services developer at Netcraft, a security company in Bath, England.The software packages make it easy to quickly set up a fraudulent Web site mimicking a known brand in order to trick people into divulging credit card details or bank account numbers. Templates for spam e-mail are also included, targeting brands such as Bank of America, eBay, PayPal, and HSBC.Mr. Brain&#39;s Web site lists the kits and what kind of details each one is capable of collecting, such as usernames, passwords or Social Security numbers. Netcraft posted screenshots on its Web site.But what the aspiring scammer doesn&#39;t know is that the phishing kits are designed to send any sensitive information that&#39;s collected back to e-mail accounts controlled by Mr. Brain, Mutton said.&quot;Obviously, that&#39;s why they are offering this stuff for free,&quot; Mutton said. &quot;I was impressed by it.&quot;Mr. Brain hides the special e-mail function in a blend of PHP scripts, one of which is encrypted, Mutton said. Just in case someone decrypts it, Mr. Brain has written at the top of the file &quot;Don&#39;t need to change anything here. Created by Mr. Brain Morocco Team.&quot;The scheme seems to be targeted at new phishers, Mutton said. Mr. Brain benefits since other wannabe scammers shoulder the cost and risk of finding an ISP (Internet Service Provider) to host the phishing site, Mutton said.&quot;Essentially, they&#39;re exploiting all these novice phishers -- basically getting them to do all the hard work,&quot; Mutton said.It&#39;s difficult to tell without further research how many of the free phishing kits linked with this latest scam are live on the Internet, but Mutton said Netcraft noticed one earlier this month targeting Bank of America.&quot;Clearly, these are actively being used in phishing attacks,&quot; Mutton said.
267695
New technology can trick a caller ID box into displaying the name and phone number of an entirely different person or company than the one actually calling.
683385
Many popular browsers are affected by a vulnerability that makes it easy to spoof the content of websites, security firm Secunia warns.
441123
A new hacking method is causing concern for the lengths it goes to avoid detection by security software and researchers.
80272
Tool that identifies sites pretending to be connected to banks, eBay and more could help leave "phishing" scammers dead in the water.
215938
Researchers show how objects with multimedia attributes within Second Life can unleash malware on unsuspecting users.
654913
The popular skinning feature in Nullsoft&#39;s WinAmp media player has left the door wide open for malicious attackers to hijack PCs.
758518
InfoWorld - A new hacking method is causing concern for the lengths it goes to avoid detection by security software and researchers.