Spyware Sucks

But here is the dirty little secret of browser security: Even if every Internet browser made today were completely bug-free, it wouldn't stop malicious hackers and malware. Why? Because the vast majority of successful malicious exploits today don't exploit buggy browsers, but rather unwitting end-users. That is, Web-based malware is successful because end-users are intentionally installing it! Most exploit code doesn't search for an unpatched vulnerability, but simply asks the user to install. - Roger Grimes, Infoworld

Yet another malvertizement at Yahoo Mail...

Edit: the malvertizement has been removed from circulation

And another one - the URL for this one is:

eur.a1.yimg.com/java.europe.yimg.com/eu/any/yahoonew300x250.swf

Even if you don't get redirected, the malvertizement still let's the bad guys know that it is on display by sending info to adtds2.promoplexer.com/statsa.php?campaign=yahoo and adsraise.com/mbuyers/statistics.html

Yahoo is one of the few companies where I *don't* have a high level contact :o(

Published Sat, Apr 26 2008 20:29 by sandi

Filed under: Vulnerabilities, Security, safety and privacy on the Internet, viruses and exploits

Spyware Sucks

This Blog

Syndication

Search

Tags

Community

Archives

My Web Sites

Internet Explorer Resources

Fighting Malware

SBS Links...

News

Yet another malvertizement at Yahoo Mail...