A scareware purveyor has brazenly advertised for recruits on a
mainstream job market website. A job ad on Freelancer.com offers work for a coder prepared to turn his hand to the creation of fake anti-virus website redirection scripts. Read the full article. [The Register]
A researcher has developed a new type of phishing attack that takes advantage of the way that browsers handle tabbed browsing and enables an attacker to use a script running in one tab to completely change the content in another tab. The attack, demonstrated by Aza Raskin of Mozilla, could be used for highly targeted attacks against customers of a specific bank, Webmail service or credit-card company.
Nearly one-third of all identity theft victims
say they are unable to completely clear up damaged credit or criminal
records in the aftermath of their identities being abused. But the good
news is they’re spending much less time and money cleaning up the fraud
perpetrated against them in their names, according to a newly released
report. Read the full article. [Dark Reading]
After more than two years, Apple’s Safari browser for Macs remains
vulnerable to attacks that allow websites to litter a user’s hard drive
with thousands of malicious files. The “carpet bomb” vulnerability was publicly disclosed in May 2008 after members of Apple’s security team said they didn’t consider the quirk a security issue. Read the full article. [The Register]
For the second month in a row, Microsoft has tried to eradicate a
mutating rootkit that has blocked some Windows users from installing
security updates. Read the full article. [Computerworld]
Today’s attackers care less about the browser you use and more about
whether your third-party browser add-ons and plugins are out-of-date and
exploitable. Read the full article. [KrebsonSecurity]
Shifty sorts have created a new worm which spread rapidly on Facebook. The malware, for now at least, does nothing more malicious than
posting a message on an infected user’s Facebook wall that point to a
site called fbhole.com. Nonetheless, the speed of its spread on the
social networking site has net security experts worried. Read the full article. [The Register]
This was an amazingly busy news week in the security world, with a lot of major stories competing for your attention: Microsoft sharing pre-patch vulnerability data with foreign governments, IBM handing out certified pre-owned USB keys, Google spying on Wi-Fi users. If you missed anything, never fear, we’ve got a quick review of that matters from the last week. Read on.
Two developers have refined techniques for rummaging through browser
histories to the extent that web sites can now find out what articles a
user has recently read on news sites, their exact postcode and which
search terms that have entered into search engines. Read the full article. [The H Security]
For the second year in a row, attendees at the AusCERT conference in Australia got an ugly surprise from USB keys handed out at a vendor booth.The company wiping eggs from its face this year is IBM Australia. According to an e-mail sent to AusCERT attendees, USB sticks distributed at the IBM booth contained malware that infected Windows computers.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
