Phishers use DNS tricks to direct users to bad sites
30755
The latest information on phishing indicates that fraudsters are increasingly using malicious software to direct users to their deceptive sites.The Anti-Phishing Working Group (APWG) said in a new report Thursday that it saw a sharp rise in November in malware that directs users to DNS (Domain Name System) servers controlled by&#160;phishers.DNS servers play a crucial role in locating Web sites. The servers translate a domain name into an IP (Internet protocol) address, enabling a Web site to be located and accessed through a browser.Often, the phishers will set up their own DNS server that works fine most of the time but can redirect to their own malicious site.Tainting a person&#39;s DNS settings is particularly dangerous since the user probably won&#39;t notice the redirection, the APWG said.&quot;The fraudulent server replies with &#39;good&#39; answers for most domains, however, when they want to direct you to a fraudulent one, they simply modify their name server responses,&quot; the report said.Phishers are also employing malware that modifies an internal PC file called the hosts, which is used to match domain names of Web sites with IP addresses.When a person visits a Web site, the browser checks the hosts to see if it has an IP address for a particular domain name. If the hosts file is corrupted or hijacked, the browser can be directed to fetch a different Web page than the one the user intended to go to.Both attacks -- also known as pharming -- are dangerous, since a user may be typing in the correct URL (uniform resource locator) but be directed to the phishing site.The APWG reported that the overall number of unique phishing sites declined in November, but 178 different brands were targeted, a record number. By comparison, 120 brands were used in phishing attacks in October. The highest previous total was in April 2007, when 174 brands were targeted.More Middle Eastern and European financial services companies were spoofed in phishing schemes, APWG said. The financial services industry is the most targeted for fraud, comprising 93.8 percent of all phishing attacks.&#160;
189807
Browser flaw may leave you vulnerable to phishing attacks.
724391
Security experts warn of banner ads with a bad attitude--and a link to malicious code. Also: Phishers, be gone.
532476
With one in every 400 emails now a suspected phishing attack, computer users are being encouraged to increase their knowledge, open their eyes, and pay attention.
263846
Honeypot project shows more than adult sites contain malicious threats.
196490
Web villains post do-it-yourself phishing kits to help any amateur become an online con artist.
84253
Scammers are sending out fake security bulletins that attempt to install malicious software on victim's PCs.
99945
Attackers could use hole in small-business software to trick personal information out of people.
666009
Good-guy sites, like CastleCops.com, are suffering Web site outages from distributed denial-of-service attacks.
703214
Online crooks are constantly switching tactics in an attempt to invade your PC. Be on guard for these latest sneaky tricks.
693092
Junk e-mailers are using free Web pages to disguise spam sources, manipulate search engines.
239180
User-generated Web content is becoming a target for hackers and cross-site scripting attacks on Web sites can lead to malware taking over the browsers of machines that use the sites.
114087
A recent flood of fake Citibank e-mail messages demonstrates the growing arsenal of tricks used by online "phishers."
758956
Hole could allow remote attackers to access your local search results.
57973
A massive hack of several hundred legitimate Web sites is spreading malware to visitors' PCs using a new tack that makes detection "extraordinarily difficult,"  security experts said today.
759946
Researchers in the U.S. say they've successfully shown how attackers could compromise a network designed to make it harder to trace Web sites they are viewing.
259358
Malicious hackers tout a site with an strip show download to entice victims to download malware.