A now-closed Facebook exploit took advantage of cross site scripting to inject malicious code into Yelp. Normally such an attack wouldn’t have particularly broad implications for Facebook users, but Yelp is one of the three sites that have been deemed fit for Facebook’s highly controversial Instant Personalization feature. Read the full article. [TechCrunch]
A deceptive “help” message invites recipients to check their PCs’
compatibility with Windows 7 by downloading and running an altered
version of the Windows 7 Upgrade Advisor concealing a Trojan. Read the full article. [Help Net Security]
A joint investigation by federal agencies leads to the conviction of several individuals trading in counterfeit Cisco network hardware. Read the full article. [eWEEK]
On the heels of a worm that
was installing backdoors on Windows systems via Yahoo Instant Messenger
comes a new worm that is even more sophisticated in its social
engineering and payload, researchers have discovered. Read the full article. [CNet]
In the past few days a number of websites created using WordPress have been hacked. While the attack initially appeared to be limited to web sites hosted by American ISP DreamHost, it has since become apparent that blogs hosted at GoDaddy, Bluehost and Media Temple have also been affected. Read the full article. [The H Security]
Visa is warning financial institutions that it has
received reliable intelligence that an organized criminal group plans to
attempt to move large amounts of fraudulent payments through a merchant
account. Read the full article. [KrebsonSecurity]
This week, the Electronic Privacy Information Center filed a 38-page complaint against Facebook with the Federal Trade Commission, demanding it cancel new features introduced in mid-April that compel users to share more information than before. Read the full article. [Computerworld]
A small internet service provider has been awarded nearly $2.6m in a
lawsuit it filed against a company that sent just under 25,000 spam
messages over an 18-month period. Read the full article. [The Register]
Already under fire for taking liberties with users’ privacy, Facebook
was outted on Thursday as a distributor of unwanted applications, some
of which install adware or are added to user profiles without
permission. Read the full article. [The Register]
The latest of the series of Apple-related scams involves a phishing site for checking
Apple gift cards. Read the full article. [Help Net Security]
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
