Spyget > Rock Phishers Up the Ante with More ”Digital Certificates
[TrendLabs | Malware Blog - by Trend Micro] Traditional phishing involves phishers sending out email messages that lead users to a fake Web site resembling login pages of certain institutions or companies. This time they’ve made sure they can get sensitive user information even without getting users to log in to some fake page.
[Previous] Copyrighting Malware...
[Next] Zeus malware tool's authors using a software licence agree...
Some related posts from Technorati and Google.
[usrlocal.com] White House Must Resolve E-Mail Backup 'Ambiguity': In the report, Judge Facciola cited what he called an apparent contradiction by Theresa Payton, CIO in the Executive Office of the President, in statements about whether the White House has tapes backing up e-mail messages sent between March 2003 and October 2003. In a document filed with the court in January, Payton stated that prior to October 2003 the White House regularly overwrote its backup tapes.
[Wordout] Fake IRS Rebate EMails: Those who have received a questionable e-mail claiming to come from the IRS may forward it to a mailbox the IRS has established to receive such e-mails, phishing@irs.gov, using instructions contained in an article titled “How to Protect Yourself from Suspicious E-Mails or Phishing Schemes.” Following the instructions will help the IRS track the suspicious e-mail to its origins and shut down the scam. Find the article by visiting IRS.gov and entering the words “suspicious e-mails” into the search box in the upper right corner of the front page.
[Malware Diaries] Gone Phishing”¦: Meanwhile, a hacker has received a valid email address that he can use for spam, not mentioning that he can log into the Facebook account at any time. However, there is something even better he can get access to, with a bit of luck.
[Data Storage Today] Fake Subpoenas Drive the Latest Phishing Attack: Bambenek described the attack as a "click-the-link-for-malware" typical spammer stunt. His immediate advice: First and foremost, don't click on such links.
[[SecurityRatty] Lattest Articles] Fake Yahoo Greetings Malware Campaign Circulating: The botnet which I assesed in February, the one that was crunching out phishing emails and using the infected hosts for hosting the pages, and parking the phishing domains, is still operational this time starting a fake Yahoo Greetings .
[TrendLabs | Malware Blog - by Trend Micro] Phishing-Malware Bait: Brazilian Income Tax Return: Jose Lopez Tello, Trend Micro Virus Coordinator in Latin America, notes that it is not certain if the IP addresses contained in the mentioned text file are from online users or just a fake list, but what is interesting is that all of the IPs are located in Brazil.
[New York Supreme Court Criminal Term Library] Spear-Phishing Attack Uses Fake Subpoenas to Steal from CEO's: Spear-Phishing Attack Uses Fake Subpoenas To Steal From CEOs "iDefense estimates that the attack went out to about 15000 to 20000 executives, resulting in about 1800 confirmed malware victims."
[Lillees Blog] Identity Theft - Nine Threats & Nine Steps To Protection: Beware of e-mail scams like Phishing and Pharming. Phishing is an e-mail that looks like it came from a bank or business claiming you need to take care of a problem or your account will be closed down.
[The Phishers Blog] Tips For Protecting Your Identity Online: The link is disguised so that you can’t tell you’re going to a completely different site. At the site, they’ll ask you to login or to confirm your personal information.
[TrendLabs | Malware Blog - by Trend Micro] Blended, Targeted Attack in Mexico: Now a DNS Changer and A Botnet: Virus Coordinator for Trend Micro Latin America, Jose Lopez Tello, recently discovered a very interesting malware attack that seems to be (at first blush) related to the previous Banamex phishing e-mails reported last January and .
[My Weblog] Criminals Hack CEOs With Fake Subpoenas: The U.S. federal court system heavily relies on e-mail messages to help lawyers communicate with each other and the court throughout cases, and IT staff in legal firms have traditionally had to work hard to make sure that these messages are not blocked by spam filters. Now they’ll have one more thing to worry about: whether the court notices they’re getting are legitimate notices or an online attack.
[bMighty Blog] CEO Spam Scam: Phishing For Big Fish: Unfortunately, not all of the CEOs were as sharp as Anastassiadis, nor, evidently, were their IT teams: the malware involved in the campaign exploits known vulnerabilities that could -- and, dammit, should -- have been patched.
[BBB Consumer Education Blog] Watch Out for Fake Email Grand Jury Subpoenas: The IC3 warns consumers of recently reported spam email containing a fraudulent subpoena notifying recipients they are commanded to appear and testify before a Grand Jury. The e-mail attempts to appear authentic by containing a court case number, federal code, name and address of a California federal court, court room number, issuing officers’
[SecurePCNews Blog] Citibank Member eMail Phishing Scam: You may have received the following email fraudulently claiming to be from Citigroup financial institution. If so you are the target of an eMail Scam, commonly called a "Phishing" scam.
Reflected tags on Technorati: Blog, Sci-Tech Today | Fake Subpoenas Drive The Latest Phishing Attack, TrendLabs | Malware Blog - By Trend Micro[FeedShow RSS Reader], CRM Daily | Fake Subpoenas Drive The Latest Phishing Attack, CRM Daily | Fake Subpoenas Drive The Latest Phishing Attack, Phishing Attacks Internet Security Phishing Software Certificates, Spyget