This week in phishing
446546
As online shopping gets into full swing, phishers are setting up fraudulent e-commerce Web sites and simply waiting for victims using Google and other search engines to find them.
550144
Links to the week's topics from search engine forums across the web: Cloaking for Religious Reasons - Is Link-bait Ruining The Web? - Yahoo To Test Image Advertising On Mobile Phones - Shopping Cart Abandonment Rates - The Reality Of SEO, and more.
430013
Slashdot has a warning posted about the existence of a phishing scam directed toward Red Hat users. Read more to see the post. rixdaffy writes &quot;I just received an email from the &#39;Redhat Security Team&#39; telling
531535
Phisher 'Vladuz' dodges eBay's defenses &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
532476
With one in every 400 emails now a suspected phishing attack, computer users are being encouraged to increase their knowledge, open their eyes, and pay attention.
571745
Two Google site vulnerabilities that could be used to mount phishing attacks have been reported, says the Internet search giant. It already has fixed one, and expects to patch the second shortly.
521445
Phishing scams, already one of the main nemesis on the Net, have apparently just become even more sneaky -- and ingenious. Now, it appears phishing authors are borrowing some time-tested tactics
205321
Reports suggest phishing gangs are turning to automatic tools to mount more attacks than ever.
248211
The online cons known as &quot;phishing&quot; have cost US consumers $500 million, according to a study released Wednesday. In addition, the study found that three-quarters of wired Americans have noticed an increase
111084
Links to this week's topics from search engine forums across the web: How Do I Spot Cloaked Sites? - Geico Takes Aim at Google for Selling Ads Linked to Trademarks - Overture Match Type Changes - SEO: How Do You Separate Truth from Speculation? - How to Emergency Pause your AdWords Campaign
114087
A recent flood of fake Citibank e-mail messages demonstrates the growing arsenal of tricks used by online "phishers."
633181
Gareth Heyes has a new post today talking about one of the vulnerable values in the $_SERVER superglobal - PHP_SELF.   I thought it might be a good idea to gather a few test cases demonstrating the problem. Why PHP allows these URL's is beyond me and it wouldn't take much work to filter out these malicious URL's in the PHP code.   He provides four test cases to show how simple it is to abuse - one using a HTTP header, another pushing XSS through, the third mentions search pages and the fourth a direct code injection.   You can download the code here.
172876
Domains of several new phishing sites are cropping up with known Storm worm domains. F-Secure researchers think phishers are leasing parts of the larger botnet.
461104
Heidi Montag wants to set the record straight about a surprising posting that went up on her Web site Mondayâshe didnât post it.  âMy Web site was hacked last night, so Iâm not sure what was posted up,â she said Tuesday during an event at a Lo...
609365
'Alarming' rise in vishing Fraudsters are turning to VoIP systems to craft more convincing phishing attacks. The FBI's Internet Crime Complaint Centre (IC3) warned last week of an "alarming" rise in the volume of so-called vishing attacks targeting US financial institutions and consumers.â¦
360514
Sophos experts have discovered that do-it-yourself phishing kits are being made available for download free of charge from the internet.
226902
How bad is the Monster.com data breach? Bad enough. Did the crooks get their hooks in deep? Remarkably deep. Gregg Keizer has the details on what has gone wrong so far in the Infostealer.Monstres attack.