Does That Web Site Look Phishy?
370901
WholeSecurity's new software claims to identify fraudulent sites.
145645
InfoWorld - The latest information on phishing indicates that fraudsters are increasingly using malicious software to direct users to their deceptive sites.
466055
A newly reported security problem in Microsoft's Internet Explorer (IE) Web browser allows attackers to create a fake Web site that looks exactly like a genuine site.
371886
By Anne Krishnan, The News & Observer, Raleigh, N.C.  Feb. 14--Q: I have discovered a Web site that allows free downloads of programs such as WinZip. How do I find out if sites like this are legitimate and if the software is safe?   T.W.
90995
Also: Mysterious stone slab bears ancient writing. Read these stories and more from around the Web on News.com Extra.
729334
(InfoWorld) - A vulnerability in Microsoft Internet Explorer (IE) browser could help fraudsters make phishing Web sites appear legitimate, a security researcher reported Wednesday. The flaw lies in the way IE7 processes a locally stored HTML (Hypertext Markup Language) error message page that is typically shown when the user cancels the loading of a Web page, said Aviv Raff, a security researcher based in Israel. The error message tells the user that "navigation to the webpage was cancelled," and offers the user the opportunity to "refresh the page." If the refresh link is clicked, IE can be tricked into displaying the wrong Web address for a page. Raff has published proof of concept code that shows how IE can be made to display a Web page on his Web site as if it is from the cnn.com domain. This flaw could be exploited by phishers who want to make their spoofed Web sites appear legitimate, Raff said. "I can inject a script that will display anything I want in the page when the user clicks the 'refresh' link," he said via instant message. "Combining this with the design flaw, an attacker can render in the browser whatever he wants with whatever URL he wants in the address bar." This type of bug is known as a cross-site scripting vulnerability. It affects IE 7 on Vista and Windows XP, Raff added. Microsoft could not immediately confirm Raff's findings, but the company issued a statement saying that it is investigating the issue and is "not aware of any attacks attempting to use the reported vulnerability or of customer impact at this time."
44261
An obscure government website that became an Internet conflagration
457997
The Internet is pretty scary these days. I wish I could say that it was always a treat, but more often than not, you encounter plenty of tricks while surfing the Web.
36812
In a twist, security researchers have discovered a group of hackers who are exploiting a new category of victims -- aspiring Internet scammers.A Moroccan group called &quot;Mr. Brain&quot; is offering free phishing kits on a Web site hosted in France, said Paul Mutton, Internet services developer at Netcraft, a security company in Bath, England.The software packages make it easy to quickly set up a fraudulent Web site mimicking a known brand in order to trick people into divulging credit card details or bank account numbers. Templates for spam e-mail are also included, targeting brands such as Bank of America, eBay, PayPal, and HSBC.Mr. Brain&#39;s Web site lists the kits and what kind of details each one is capable of collecting, such as usernames, passwords or Social Security numbers. Netcraft posted screenshots on its Web site.But what the aspiring scammer doesn&#39;t know is that the phishing kits are designed to send any sensitive information that&#39;s collected back to e-mail accounts controlled by Mr. Brain, Mutton said.&quot;Obviously, that&#39;s why they are offering this stuff for free,&quot; Mutton said. &quot;I was impressed by it.&quot;Mr. Brain hides the special e-mail function in a blend of PHP scripts, one of which is encrypted, Mutton said. Just in case someone decrypts it, Mr. Brain has written at the top of the file &quot;Don&#39;t need to change anything here. Created by Mr. Brain Morocco Team.&quot;The scheme seems to be targeted at new phishers, Mutton said. Mr. Brain benefits since other wannabe scammers shoulder the cost and risk of finding an ISP (Internet Service Provider) to host the phishing site, Mutton said.&quot;Essentially, they&#39;re exploiting all these novice phishers -- basically getting them to do all the hard work,&quot; Mutton said.It&#39;s difficult to tell without further research how many of the free phishing kits linked with this latest scam are live on the Internet, but Mutton said Netcraft noticed one earlier this month targeting Bank of America.&quot;Clearly, these are actively being used in phishing attacks,&quot; Mutton said.
37006
By Laura Hancock Deseret Morning News  EAGLE MOUNTAIN -- A Web site formerly used by Pony Express Elementary's PTA became entangled in a phishing scam.  Sometime recently, hackers got access to software that parent Gerald Banks used for www.ponyexpresselementary.org.
461104
Heidi Montag wants to set the record straight about a surprising posting that went up on her Web site Mondayâshe didnât post it.  âMy Web site was hacked last night, so Iâm not sure what was posted up,â she said Tuesday during an event at a Lo...
347238
Hole allows attackers to create fake Web sites that look genuine.
642537
By Staff Reports  Adults users should protect their personal and financial information from 'phishing.'   Many older users may be leery about safety when using MySpace.
221084
A newly reported security problem in Microsoft&#39;s Internet Explorer (IE) Web browser allows attackers to create a fake Web site that looks exactly like a genuine site.
480693
Popular Web sites like MySpace and Photobucket has banner ads containing malicious code that could lead to the compromise of a computer.
571745
Two Google site vulnerabilities that could be used to mount phishing attacks have been reported, says the Internet search giant. It already has fixed one, and expects to patch the second shortly.
130878
Blog: Web directory is light on content and features.