Hacked MySpace page serves up fake Windows update
546335
A malicious Trojan disguised as a Microsoft update is being served up from a MySpace page for which the name and password appear to have been phished. The problem highlights the trouble to which criminal abuse of MySpace can lead.
236014
A new Trojan horse modifies infected PC's hosts file to replace Google text ads with ads from another source.
743455
A flaw in Mozilla&#8217;s Firefox browser makes it easy for cybercriminals to steal user information on Web sites where users create their own pages, such as MySpace.com.
360592
Exploit code affecting an unpatched flaw in an image uploader used by both Facebook and MySpace is circulating publicly.
95181
There&#39;s now one more reason to be security-conscious while using MySpace.com: fake Microsoft updates.Using a hacked MySpace profile, online criminals are trying to trick victims into downloading a malicious Trojan Horse program by disguising it as a Microsoft update, according to researchers at security vendor McAfee.The attack is certainly not widespread -- McAfee has seen it used on only one MySpace profile -- but it does show how sites like MySpace can be abused by criminals.Web surfers are presented with what appears to be a popup window advising them to download the latest version of Microsoft&#39;s Windows Malicious Software Removal Tool, which was just released this Tuesday. This software is distributed by Microsoft to help Windows users rid their systems of malware.In reality, the popup window is just part of a larger image that takes up most of the computer screen. If the user clicks anywhere on this image, his computer will then begin to download the Trojan program.The Trojan, known as TFactory, is a well-known piece of code that has been used by criminals for well over a year, according to Dave Marcus, a security research manager with McAfee.Hackers were able to launch this attack because they either discovered a flaw in the MySpace code or found a way of taking over user accounts, Marcus said. &quot;Our best guess is [the owner of the one MySpace profile] just got their password and user name phished,&quot; he said.Social networking sites allow their members to use an array of powerful Web programming tools that are increasingly coming under the scrutiny of hackers looking for ways to misuse them.In November, hackers found a way to serve up Web-based attack code from the MySpace profiles of Alicia Keys and a number of other musical artists.
127768
Third-party fix plugs a recently discovered browser flaw that's increasingly being exploited in cyberattacks.
175699
A newly reported security problem in Microsoft&#39;s Internet Explorer (IE) web browser allows attackers to create a fake website that looks exactly like a genuine site.
22770
Unpatched Windows machines are vulnerable to latest adware attack
632521
Better install Microsoft's latest patches--hackers have posted attack code to exploit the flaws in Works.
387184
Ziff Davis - Security researchers have uncovered a spoofing flaw in Internet Explorer that could allow a scammer to display a fake Web site with all the attributes of a genuine, secure site.
740908
Danish security research firm Secunia has reported a vulnerability that occurs in most browsers that can be exploited by hackers looking to spoof the content of Web sites.
128425
A potent new program circulating on the Internet embeds itself on a user's computer and either overwrites saved bookmarks or redirects the victim from the intended banking site to an authentic-looking fake.
3099
Also: Vigilante hackers target the wrong guy. See what people are saying on News.com Extra.
738318
Hackers can wield malicious Windows Media Player files to exploit any unpatched Internet Explorer (IE) vulnerability on a PC, even if IE isn't the browser of choice.
587711
Hackers could bypass security warnings and download malicious content.
195221
Windows XP Service Pack 2 promises to raise the security bar for the sometimes beleaguered operating system. Unfortunately, one of the new features could be spoofed so that it reports misleading information
648888
A bug in Microsoft's registration process for Windows Live ID may have allowed scammers to register false e-mail addresses and use them to deceive other users.