MySpace page serves up fake Microsoft security update
53629
Clicking the fraudulent update could install malicious code on your desktop.
285360
Blog: Researcher shows how URLs can be spoofed and content arbitrary within Safari 3.0 beta.
91495
An e-mail disguised as a Red Hat patch update is a fake designed to trick users into downloading malware, the Linux vendor warned in a message on its Web site.
562547
Fake patches, rogue invoices make the rounds as spammers continue trying to fool people into installing Trojans on their PCs.
29234
Security researchers have uncovered a spoofing flaw in Internet Explorer that could turn out to be the perfect holiday gift for scammers.
464490
MySpace.com is under attack by an extremely effective worm that steals log-in credentials and spreads spam promoting adware sites.
42644
(InfoWorld) - With Microsoft's monthly patch release expected on Tuesday, scammers are sending out fake security bulletins that attempt to install malicious software on victim's computers. The e-mail messages claim to describe a "Cumulative Security Update for Internet Explorer" that fixes a critical security flaw in the browser. It comes with a link entitled "Download this update." When users click on this link, they are taken to a server that attempts to install malicious software known as Trojan-Downloader.Win32.Agent.avk. This Trojan software then attempts to reach out to other computers on the Internet in order to install more programs on the victim's computer. The SANS Internet Storm Center received its first and only report of the scam on Thursday night, but a second sample has also been posted to the Chinese Internet Security Response Team blog. SANS volunteer Lenny Zeltser believes that the criminals behind this scam may be gearing up for more activity. The trojan looks for three different servers, and two of them have domains that haven't yet been registered. He suspects the authors of the scam may be planning to register those domains before embarking on a more widespread campaign. The two e-mail samples contained obvious errors that would be caught by technically savvy users. For example, although the patch Zeltser examined claimed to have been issued in June 2007, it was entitled MS06-4 instead of the more-plausible MS07-004. Still, these scams need to fool only a small percentage of victims in order to be successful, said Zeltser, information security practice leader at Gemini Systems in New York. "You wonder, does it really matter that there are these strange discrepancies in the way the fake security alert is written," he said. "People who would notice probably would be the kind of people who wouldn't click on the link." Another tip-off: Microsoft does send out notification e-mail when it publishes security bulletins, but the links in these alerts take users to the bulletins themselves, not to executable downloads
510165
Social-networking site MySpace has shut down hundreds of user profiles to prevent further infection by a worm that directed users to phishing sites. Discovered late last week, the worm exploited a JavaScript feature in Apple's QuickTime plug-in.
466055
A newly reported security problem in Microsoft's Internet Explorer (IE) Web browser allows attackers to create a fake Web site that looks exactly like a genuine site.
490340
Browser beware Security experts are crying foul over a new supposedly secure browser application.â¦
142251
DECEMBER 20, 2004 (IDG NEWS SERVICE) - SAN FRANCISCO -- A newly reported security problem in Microsoft Corp.&#39;s Internet Explorer Web browser allows attackers to create a fake Web site that looks exactly like a genuine site.
467779
The social networking site MySpace.com is under what one computer security analyst calls an &#8220;amazingly virulent&#8221; attack caused by a worm that steals log-in credentials and spreads spam that promotes adware sites.
213499
Update to "critical" Internet Explorer patch repairs a serious security flaw introduced by the original version.
90088
Social network MySpace is to allow third-party developers to build applications for the site.
671749
Hackers are using MySpace to download Trojan Horse software disguised as a Microsoft download.
166415
Microsoft has released an update to Internet Explorer to fix a security flaw that was discovered a month ago and has since been exploited to attack users.
493162
InfoWorld - Just one day afterÂ Microsoft issued a massive set of security patches for its software, hackers have begun posting code showing how to exploit one of the flaws.