Nov182010

Facebook exploits

Published by dave at 9:24 PM under computers | Current Threats | Malware | Internet | Daily Tips | Facebook

You may have read this week how Facebook had disabled a number of accounts of people in an attempt to weed out spam accounts (particularly targeting "female" user accounts).   In what appears to be an attempt to exploit the fact many legitimate accounts were inadvertently disabled, hackers have spammed an attack pretending to be from Facebook notifying you that your account password has been changed.  While there are a number of subject lines associated with the spam, they all carry a ZIP file with malicious payload known as Mal/BredoZp-B, and the Trojan horse contained within as Troj/Agent-PLG.

Once again this is an attempt to cause havoc through social engineering and deception.  Do not open the attached file or any attachment that seems suspicious.  Here is sample text of the email you may receive:

Good afternoon.

A spam is sent from your Facebook account.
Your password has been changed for safety.

Information regarding your account and a new password is attached to the letter.
Read this information thoroughly and change the password to complicated one.

Thank you for your attention,
Facebook Service.

 

 



[KickIt] [Dzone] [Digg] [Reddit] [del.icio.us] [Facebook] [Google] [StumbleUpon] [Twitter]

Tags: , , , , ,

E-mail | Permalink | Trackback | Post RSSRSS comment feed 0 Comments

Nov182010

Black Friday and the looming Google Instant Security threat

I have previously warned that "Google Instant" may pose serious risks.   Now news from Pandalabs of some serious malicious code that could well spoil your holidays ahead.

Though mundane, this is "Must Read" material.



[KickIt] [Dzone] [Digg] [Reddit] [del.icio.us] [Facebook] [Google] [StumbleUpon] [Twitter]

Tags: , , , , ,

E-mail | Permalink | Trackback | Post RSSRSS comment feed 0 Comments

Sep282010

The evolving “LinkedIn” threat

A couple of days ago I posted a warning about false communications pretending to be from LinkedIn.  That threat continues and evolves with a variation on the threat arriving in my email today.  See the screen capture below.  Everything about this email on the surface looks legitimate, except of course for the fact my name is not “Dawn”, nor am I expecting any payment from any of my LinkedIn connections.

As always, your best defense is your own common sense.  If anything arrives in your email that just doesn’t “smell right”, chances are it’s not right and potentially carrying a nasty payload just like the ZIP file attached in this email.

Always make sure your system has the latest critical updates from Microsoft.  Always make sure you have current AntiVirus and other malware detection systems active and most importantly, CURRENT and up to date with the latest threat definitions.  The Internet is a seedy place, browse safely and trust no one.

 

Email carrying malicious payload



[KickIt] [Dzone] [Digg] [Reddit] [del.icio.us] [Facebook] [Google] [StumbleUpon] [Twitter]

Tags: , , , , , ,

E-mail | Permalink | Trackback | Post RSSRSS comment feed 0 Comments

Sep252010

New “LinkedIn” threat

Published by dave at 11:43 AM under Current Threats | Malware | social media | Daily Tips

Lately I’ve been receiving a lot of email “invitations” to connect with people on LinkedIn, a popular career networking site.  There are three glaring problems which should raise your suspicion immediately: 1) the emails are arriving at an email address that I have not associated with LinkedIn, 2) I've never heard of the person "making the request", and 3) the URL to accept the invitation is to a phishing site. 

This is a classic case of social engineering to either scam you or damage your computer.  Notice how in this photo when you hover over the “link” to connect, it is directing you to a site other than LinkedIn?  Best bet anytime you receive a message like this is delete delete delete.  Don’t let curiosity get the better of you.

 

LinkedInScam



[KickIt] [Dzone] [Digg] [Reddit] [del.icio.us] [Facebook] [Google] [StumbleUpon] [Twitter]

Tags: , , ,

E-mail | Permalink | Trackback | Post RSSRSS comment feed 0 Comments