Posts Tagged: ‘phishing’
I read an interesting post on Graham Cluley’s blog over at Sophos this morning. Cluley is a professional security expert. Today, he wrote about a security flaw on the Twitter Web site that could cause big problems. The flaw allows users to post messages using onMouseOver JavaScript code. The code prompts a pop-up window to appear if you scroll your mouse over the tweet. It’ll also automatically direct you to a Web page if there’s a link included in the message. Can you see where this could be a huge problem?
Are you evil or willing to learn? Do you wish to profit off of the suffering of others? Do you have no scruples, morals, ethical boundaries or decency? Then come on down to CyberCrime Incorporated!
I’m guessing that the actual ads targeting potential cyber criminals aren’t quite that transparent. But according to this report in Reuters, at least two companies that promote criminal activities are placing ads for work-at-home jobs. Employees must take company-provided code and link it to something — anything — on the Web that will guarantee lots of clicks. The employee receives a payment for every 1,000 downloads generated by the link.
Come join us at 1:00 p.m. Eastern today to see if Chris and I have recovered from the psychological damage we endured while covering the Apple iPad announcement last week. Today we’ll be talking about some mysterious botnet activity, rumored products from Microsoft and an obligatory segment on the aforementioned iPad. Plus you don’t want to miss our special effects extravaganza known as the Tweet of the Week!
You can watch us right here or grab our handy-dandy Facebook application.
Keylogging Attack May be to Blame for Compromised E-mail Accounts
by Chris Pollette | October 8, 2009
In Tuesday’s episode of TechStuff Live, Jonathan and I discussed the discovery that user names and passwords from Google, Yahoo and Hotmail accounts had been posted online where anyone could see them. At the time, only people with user names in the As and Bs had been posted, and we conjectured that there would be more. Not only have more been posted, but it appears that the scam is spreading.
The reaction many people have when something like this happens is that someone has hacked into the providers. But it appears that that’s not what happened here. Instead, it’s a phishing scheme — a scam where people trick users into revealing important personal information, including names, credit card numbers, Social Security numbers and more.
According to an article I read last night at the BBC, this phishing scam is spreading. People are using the compromised accounts to send e-mail to address-book contacts.
Brad Stone, blogger for the New York Times reported yesterday that a list of 8,000 Comcast customer user names and passwords was on the Web site Scribd. Scribd is a site that allows users to share documents with others. More than 300 people had viewed the list before it was removed. A representative from Comcast responded to the story and explained that the list contained several duplicate entries, cutting the number of affected customers in half. According to the representative, the list did not originate from within Comcast and was likely the result of a phishing scam.
It’s very important to be aware of phishing tactics. The New York Times story mentions that Kevin Andreyo, the man who discovered the list and reported it to journalists and the authorities, admits to using the same password for multiple accounts. I’m sure many of us are guilty of the same thing…
Phishers send emails to strangers, hoping to swindle them out of thousands of dollars. From the notorious Nigerian email scams to fake hard-luck stories, phishing scams depend on the greed of online victims. Learn more in this HowStuffWorks podcast.
Recent Postings by Category
BrainStuff
- Thank You and Best Wishes to Marshall Brain
- Contest – Design a $300 house and win $25,000
- How the Philtrum works – the place under your nose where your face comes together
The Coolest Stuff on the Planet
- Traveling on the Orient Express
- Deep-fried Goodness at Carnival
- The Colors of the Running of the Bulls
Keep Asking
- Why can a 5 foot 8 inch man dunk a basketball on a 10 foot rim while some people of taller stature can’t?
- What happens to our sun once it runs out of fuel?
- How do we know the age of the universe?
Stuff Mom Never Told You
- Who invented the Christmas card?
- How the Kinsey Report Fueled Whiskey Sales
- How to Get Your Wedding Announcement into The New York Times
Stuff to Blow Your Mind
- Blow Your Mind: In the Lair of the Rat King
- Mandala: Memory Palace, Inception and Simulated Worlds
- Virgin Galactic: $200,000 Ticket to Ride
Stuff You Should Know
- The Southern Death Cult, the Maya and Georgia
- Deformed Baby Spider Brains
- Amazing Medical Conditions: Maple Syrup Urine Disorder
The Stuff of Genius
CarStuff
- Was Chrysler’s “It’s Halftime in America” Super Bowl commercial a little too political?
- Why is NASA studying car safety?
- Tips for in-car Navigation Systems
How-to Stuff
- How to Make the Most of a Gallery Crawl (When You’re on a Shoestring Budget)
- How to Swim with Dolphins (When Deep Water Terrifies You)
- How to Cure a Homemade Cookie Craving Without Turning on the Oven
PopStuff
- PopStuff Show Notes: Episode 40: Did movies ruin love?
- PopStuff Show Notes: Episode 39: Urban Legends
- PopStuff Show Notes: Episode 38: Defending Disney Princesses?
Stuff They Don't Want You To Know
Stuff to Change the World
- Who will own the Arctic?
- Obesity: The New Global Crisis
- Bill Gates Makes For A Pretty Decent Cartoon
Stuff You Missed in History Class
- Butch Cassidy: Should we read between the lines?
- Are we rooting for D.B. Cooper?
- Party Time: A Look at Unconventional Politics

