Browse by Tags

All Tags » Security, safety and privacy on the Internet » Vulnerabilities, viruses and exploits (RSS)

Fake NY Airlines email

  There really isn’t any excuse for being fooled by this stuff when hovering over the hyperlink makes it so obvious that something is not quite right…

Your Photos spam

You don’t want to open that attachment – honest.  

Fake eFax Corporate email…

I don’t remember seeing one of these before… fake, of course.

Fake LinkedIn invitations

I receive LinkedIn emails regularly – this (fake) one looks like realistic, until you hover over the hyperlink…

FTC versus Innovative Marketing and others

Good news.  Remember Innovative Marketing? They were involved in “scareware” years ago, and the scareware and the lawsuit have been featured many times on this blog (scareware names such as WinFixer, WinAntiVirus, WinAntiVvirusPro,  WinAntiSpyware...

Malvertizing and PDFs…

I’m seeing reports of malvertizements automatically opening PDFs. These PDFs use exploits to try and infect a user’s computer. It’s very important to make sure that if you have Adobe Reader (or other PDF apps) installed on your computer that you make...

Fake Federal Tax Payment emails

Hover over the hyperlink; you’ll see it’s fake (I’m feeling a bit like a broken record here…)

Fake Amazon purchase emails

As always, you can tell the email is fake by hovering over most hyperlinks.  The subjectline changes slightly in the emails I have seen: Fwd: HD TV In Progress Now Fwd: Item Processed Now Your HDTV Waiting on delivery Now

Fake LinkedIn emails

Screenshot below – as always, it’s easy to tell that it’s fake when you hover over the hyperlinks

wikia.com–conduit to computer infections *TWICE* in under a week

Google Safe Browsing has picked up that there is a problem too as you’ll see from the screenshot below … the infections I have seen hitting a computer after a user visited wikia.com are win64/Sirefef and win32/obfuscator and win32/winwebsec.  It...

And one more…

  It’s interesting to see the subtle differences between each fake LinkedIn email…                     Here is a screenshot of the real thing…

Fake LinkedIn emails

  Clicking on the links in such emails invariably lead to infection via various exploit kits, so I wouldn’t recommend that you yield to temptation, even if you know the email is fake… As always, hover over the link and it is obvious that the email...

“Wire Transfer Confirmation” spam

It’s not real – honest.  And the email isn’t from LinkedIn.

That which is old is new again–Ecard spam

  You don’t really have a secret admirer, honest…  don’t try this at home unless you have a sandboxed VM that you can trash at will.    

A sophisticated, and detailed (but fake) Amazon Kindle purchase spam

Check it out at the bottom of this post. Interestingly, several different URLs are used in the spam email, scattered around several countries – somebody’s put a nice bit of effort into this one…

Problems at metacafe.com?

Cite: http://www.google.com/safebrowsing/diagnostic?site=metacafe.com   “Of the 15199 pages we tested on the site over the past 90 days, 5944 page(s) resulted in malicious software being downloaded and installed without user consent. The last time...

Users of OpenX versions 2.8.0 - 2.8.8–please read!!

http://blog.openx.org/05/security-update-for-openx-28-users/   “A recent security issue with OpenX versions 2.8.0 - 2.8.8 means users of these versions of the platform should take the following steps: 1. Secure their servers by removing the files...

You don’t want to open that attachment… seriously…

Don’t open the attachment, ok? “Your bought ticket is attached to the letter as a scan document (Internet Exlporer File)…”  {love the mis-spelling}

International Checkout (URL: internationalcheckout.com) hacked

A friend received the email below the other day.  Note that not only do International Checkout advise that “ an intruder accessed and potentially compromised [their] system ”, but the intruder / intruders also “ gained access to part of [their] system...
More Posts Next page »