Phishing Without a Lure
90811
While the victims of the latest phishing technique may not have to click on a link to be victimized by the effort to steal information, the attack is similar to traditional phishing scams because
90889
AN ISP CALLED Lycos has come up with a way of fighting spam that attacks the spammers servers. All you have to do is load a screensaver - &quot;Make Love Not Spam&quot; - available from Lycos Europe and it will requests
206312
(InfoWorld) - Software developers like to make installation of their programs simple and quick. So do hackers. Analysts at RSA Security early last month spotted a single piece of PHP code that installs a phishing site on a compromised server in about two seconds, the vendor noted in its monthly online fraud report for June, released on Tuesday. The code contains all of the HTML (Hypertext Markup Language) and graphics needed for the fraudulent Web site, which spoofed a financial institution that RSA did not name in the report. The ".exe" file automatically installs the code and graphics in the right directories, RSA said. It means the hacker did not have to repeatedly access the compromised server to upload graphics or other code for the site, potentially reducing the chance of the computer's security software or network software detecting something awry, RSA said. "By using such kits, fraudsters will be able to further automate the process of hijacking servers and creating new phishing sites," the report said. It doesn't bode well forÂ combatting the problem of phishing, where hackers try to elicit passwords or financial information via look-alike Web sites. Despite efforts to quickly shut sites down, phishing sites averaged a 3.8-day life span in May, according to the Anti-Phishing Working Group, which released its latest statistics on Sunday. Data from market analyst Gartner released last month showed that phishing attacks have doubled over the last two years. Gartner said 3.5 million adults remembered revealing sensitive personal or financial information to a phisher, while 2.3 million said that they had lost money because of phishing. The average loss is $1,250 per victim, Gartner said. Â
767459
Online Impersonations: No Validation Required &gt;&gt; Advertisement &lt;&lt;  ALERT: "How A Hacker Launches A Blind SQL Injection Attack Step-by-Step"!" - White Paper  Blind SQL Injection can deliver total control of your server to a hacker giving them the ability to read, write and manipulate all data stored in your backend systems! Download this *FREE* white paper from SPI Dynamics for a complete guide to protection! https://download.spidynamics.com/1/ad/bsq.asp?Campaign_ID=701600000004c29
128450
Blog: Writer is duped for the first time ever by a phishing attack; feels violated and ashamed.
681097
(InfoWorld) - Spammers have found a way to mine free Web-hosting services for cash. Online scammers have long used free hosting services such as Yahoo Geocities or Tripod as a way to get around e-mail filters that might otherwise recognize their spammy Web sites. But now some enterprising spammers have begun selling each other these free Web pages, according to security vendor McAfee Inc. For US$25 per week a spammer will sell 50 Web-hosting accounts that can be used to redirect Web traffic to sites that normally would be flagged. "These 'link providers' create and maintain thousands of free hosting accounts on behalf of the spammers," wrote McAfee's Nick Kelly in a recent posting to McAfee's Avert Labs blog. That posting can be foundÂ here. "They know that the bigger hosts are unlikely to get blacklisted because they have so many legitimate users," he added. Scammers also use the free Web pages to try to manipulate search engines, by making it look as if their Web sites are widely linked, said Adam O'Donnell, senior research scientist with Cloudmark Inc., an e-mail filtering company. And while the free hosting providers are taking steps to shut down this abuse, they appear to be fighting a losing battle. In late June, Cloudmark researchers were seeing about 1,500 phony URLs (uniform resource locators) on any given day on one of the most abused free hosting services (O'Donnell declined to name names). One month later, that number had jumped to 3,500. Spammers are simply able to out-pace the hosters' security teams, O'Donnell said. "They will gain more hosts for their pages than the company is able to take down," he said. The free hosters have been placed in a tough position because they do not want to shut down legitimate users, but they also do not have the technical resources to mine spam for Web pages that are being misused, O'Donnell said. Lately, however, the hosters have been partnering with security vendors to address the problem. Cloudmark is working with some hosting providers, hoping to sell them "reputation" information that tells them how many times their member URLs are being seen in spam. McAfee has been providing similar information to an undisclosed service provider, Kelly wrote. "This relationship has cut the abuse observed by us on that provider by over 90 percent in less than a week." He added, "let's hope those spammers are buying their new watches from pound$hop rather than Bolex this summer."
24218
A tool that could help in the battle against spam and phishing attacks receives industry approval.
590294
Some websites are now offering surfers the chance to download free &quot;phishing kits&quot; containing all the graphics, web code and text required to construct the kind of bogus sites used in internet phishing scams.
521445
Phishing scams, already one of the main nemesis on the Net, have apparently just become even more sneaky -- and ingenious. Now, it appears phishing authors are borrowing some time-tested tactics
3787
Today's blog post discusses methods with which a non-technical user can secure their own instant messaging conversations such that an attacker is unable to listen in (be they the government or a nosy neighbor sniffing the wireless network from next door).
587711
Hackers could bypass security warnings and download malicious content.
609365
'Alarming' rise in vishing Fraudsters are turning to VoIP systems to craft more convincing phishing attacks. The FBI's Internet Crime Complaint Centre (IC3) warned last week of an "alarming" rise in the volume of so-called vishing attacks targeting US financial institutions and consumers.â¦
418284
GADFLY ALREADY the internet age has given us 'phishing', when criminals use emails to persuade you to give them your bank details.  Now it seems we have the less crooked but nonetheless enraging online experience of 'philfing'  an acronym for 'purposely hiding what I'm looking for'.
319877
From disguising applets to look like part of Windows to co-opting security tools, Web crooks use a variety of methods to bypass your system's safeguards.
704920
Do-it-yourself phishing kits are freely available on the Internet, a security firm said Thursday, and they will lead to more scams sent to online consumers.
417838
New features designed to alert users if the site they are visiting is legitimate or a phishing site.
564403
Most phishing attempts come from about 1,000 compromised "zombie" computers owned by broadband customers, and the phishing attacks are likely generated by less than five phishing operations, according to a survey by CipherTrust Inc.