DomainKeys the answer to e-mail forgery and phishing?
107697
Written by Net 4 Nowt EarthLink has announced plans to become the first major Internet service provider to test DomainKeys, a leading cryptographic e-mail authentication solution introduced by Yahoo!
42651
Internet fraudsters have developed a sophisticated new method of using e-mails to capture internet banking customers&#39; details.
749565
Phishing is a growing form of online fraud that blends old-fashioned confidence scams with innovations in technological trickery. In the second part of our two-part series, washingtonpost.com explores how banks, Internet service providers and other online businesses are trying to make e-commerce safe for their customers.-washingtonpost.com
30755
The latest information on phishing indicates that fraudsters are increasingly using malicious software to direct users to their deceptive sites.The Anti-Phishing Working Group (APWG) said in a new report Thursday that it saw a sharp rise in November in malware that directs users to DNS (Domain Name System) servers controlled by&#160;phishers.DNS servers play a crucial role in locating Web sites. The servers translate a domain name into an IP (Internet protocol) address, enabling a Web site to be located and accessed through a browser.Often, the phishers will set up their own DNS server that works fine most of the time but can redirect to their own malicious site.Tainting a person&#39;s DNS settings is particularly dangerous since the user probably won&#39;t notice the redirection, the APWG said.&quot;The fraudulent server replies with &#39;good&#39; answers for most domains, however, when they want to direct you to a fraudulent one, they simply modify their name server responses,&quot; the report said.Phishers are also employing malware that modifies an internal PC file called the hosts, which is used to match domain names of Web sites with IP addresses.When a person visits a Web site, the browser checks the hosts to see if it has an IP address for a particular domain name. If the hosts file is corrupted or hijacked, the browser can be directed to fetch a different Web page than the one the user intended to go to.Both attacks -- also known as pharming -- are dangerous, since a user may be typing in the correct URL (uniform resource locator) but be directed to the phishing site.The APWG reported that the overall number of unique phishing sites declined in November, but 178 different brands were targeted, a record number. By comparison, 120 brands were used in phishing attacks in October. The highest previous total was in April 2007, when 174 brands were targeted.More Middle Eastern and European financial services companies were spoofed in phishing schemes, APWG said. The financial services industry is the most targeted for fraud, comprising 93.8 percent of all phishing attacks.&#160;
374270
One of the Web&#39;s largest e-mail providers is looking to make its service safer with the adoption of DomainKeys, a cryptographic-based e-mail authentication technology, Monday.
369231
(InfoWorld) - Accounts on Google's Gmail can be easily hacked, allowing any past -- and future -- e-mail messages to be forwarded to the attacker's own in-box, a vulnerability researcher said Tuesday. Dubbed a "cross-site request forgery" (CSRF), the Gmail bug was disclosed Tuesday by Petko Petkov, a U.K.-based Web vulnerability penetration tester who has made a name for himself of late. In the past two weeks, Petkov has publicly posted information about critical, zero-day bugs inÂ Apple's QuickTime, Microsoft's Windows Media Player andÂ Adobe Systems' Portable Document FormatÂ (PDF). According to Petkov, who declined to release details about the vulnerability, attackers can use Gmail's filtering feature to exploit the bug. An attack, he said, would start with a victim visiting a malicious Web site while also still logged into his Gmail account. The malicious site would then perform what Petkov called a "multipart/form-date POST" -- an HTML command that can be used to upload files -- to one of the Gmail application programming interfaces, then inject a rogue filter into the user's filter list. Petkov posted a series of screenshots on the Gnucitizen.org site that illustrated one possible attack. "In the example, the attacker writes a filter, which simply looks for e-mails with attachments and forwards them to an e-mail of their choice," Petkov said. "This filter will automatically transfer all e-mails matching the rule. "Keep in mind that future e-mails will be forwarded as well. The attack will remain present for as long as the victim has the filter within their filter list, even if the initial vulnerability, which was the cause of the injection, is fixed by Google," he added. Google did not immediately reply to questions about whether it had confirmed the vulnerability, and if so, when it would patch the problem. At least one user commenting on Petkov's posting, however, claimed that a Firefox extension could block exploits of the Gmail bug. Giorgio Maone, the creator of the popular NoScript add-on, said that his extension blocks CSRF attacks from untrusted sites, which a malicious page likely would be. (NoScript blocks JavaScript, Java, other scripting and executable content from running from untrusted sites; Firefox users can download it from theÂ Mozilla add-on site.) As he did last week when he disclosed a major bug in Adobe's pervasive PDF file format, Petkov again defended his decision to post information about the Gmail flaw without first reporting the vulnerability to Google. The reasoning, however, was oblique: "Let's say that it is just one of my social experiments." Jeremy Grossman, the chief technology officer at San Jose-based WhiteHat Security, said that the Gmail flaw is "especially scary." In an entry to his blog, Grossman explained further: "Web mail accounts are in many ways more valuable than a banking account because they maintain access to many other online accounts (blog, banking, shopping, etc.). [Attacks exploiting this vulnerability would be] simple, silent and extremely clever." Petkov added his own two cents on the bug's implications. "In an age where all the data is in the cloud, it makes no sense for the attackers to go after your box," he said. "It is a lot simpler to install one of these persistent backdoor/spyware filters. Game over! They don't own your box, but they have you, which is a lot better." Computerworld is an InfoWorld affiliate.
146885
(InfoWorld) - Usernames and passwords for more than 100 e-mail accounts at embassies and governments worldwide have been posted online. Using the information, anyone can access the accounts that have been compromised. Computer Sweden Â has verified the posted information and spoken to the person who posted them. The posted information includes names of the embassies and governments, addresses to e-mail servers, usernames and passwords. Among the organizations on the list are the foreign ministry of Iran, the Kazakh and Indian embassies in the U.S. and the Russian embassy in Sweden. Freelance security consultant Dan Egerstad posted the information. He spoke openly about the leak when Computer Sweden contacted him. "I did an experiment and came across the information by accident," he said. Egerstad says he never used the information to log in to any of the compromised accounts in order not to break any laws. Computer Sweden confirmed that the login details for at least one of the accounts is correct. Egerstad forwarded an e-mail sent on Aug. 20 by an employee at the Swedish royal court to the Russian embassy. The person who sent the e-mail, in which she declines an invitation to the Russian embassy, has confirmed that she sent the e-mail. "Yes, that is right. We did decline the invitation. As far as I can remember I did send the e-mail," she said. Computer Sweden has not been able to confirm the authenticity of any of the other information that has been posted. "When something like this happens you usually contact people and ask them to fix it. But in this case it felt too big for that, calling to other countries," Egerstad said. Of the compromised accounts, 10 belong to the Kazakh embassy in Russia./p> Around 40 belong to Uzbeki embassies and consulates around the world. Login details for e-mail accounts at the U.K. visa office in Nepal were also posted. Login details for the foreign ministry of Iran, the Kazakh and Indian embassies in the U.S. and the Russian embassy in Sweden were also posted. "I hope this makes them take action. Hopefully, faster than ever before, and I hope they become a bit more aware of security issues," Dan Egerstad says. Computer Sweden has contacted both the Russian and Indian embassies in Stockholm for comment. The Russian embassy confirmed the leaks and says that logins have now been changed. The Indian embassy declined to confirm the information and give comment. Computer Sweden has not published where the login details can be found. The information in this story has been verified by Computer Sweden without using any of the published login details. Computer Sweden is an InfoWorld affiliate.
352387
nazarijo writes &quot;In an article entitled Spammers using sender authentication too, study says, Infoworld reports that a study by CipherTrust shows that SPF and Sender ID (SID) aren&#39;t nearly as effective as we expected them to be when combatting spam.
405731
A security researcher demonstrates a way to use cross site scripting to remotely spam an internal network printer.
419370
Google has fixed a flaw in its high-profile webmail service, Gmail, which created a possible route for hackers to gain full access hackers full access to a user&#39;s email account simply by knowing their user name.
531535
Phisher 'Vladuz' dodges eBay's defenses &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
185150
Plus: Most email over holidays will be spam. [News.com Extra]
455089
Clever e-mail can fool you into giving your info to thieves. Find out how not to fall prey.
430013
Slashdot has a warning posted about the existence of a phishing scam directed toward Red Hat users. Read more to see the post. rixdaffy writes &quot;I just received an email from the &#39;Redhat Security Team&#39; telling
558542
Easy-peasy-sleazy: A new piece of PHP code making the malware rounds can install a phishing site on a compromised server in about two minutes.
468115
Yahoo on Monday implemented its own sender authentication scheme, dubbed DomainKeys, for its free Web-based mail service. DomainKeys is one of several authentication technologies that hope
759884
Yahoo (Nasdaq: YHOO) has beefed up e-mail storage for users of its free e-mail service from 100 megabytes to 250 MB. The Internet giant also unveiled an anti-spam authentication technology called DomainKeys, which curtails messages sent from spoofed addresses.