A wave of fake email Twitter invitations carry a mass-mailing worm, Symantec researchers said Thursday. The invitations look like they've come from a Twitter account, except the URL that would ordinarily be part of the standard text is missing. What is included is an attachment named "Invitation Card.zip." Clicking it installs a mass-mailing worm that gathers email addresses from the compromised computer and spreads via removable drives. — CAM
Researchers at a web security firm have discovered what they term the latest milestone in the evolving cybercriminal underground: a one-stop-shop for hackers.
A new threat dubbed "Nine-Ball" has compromised up to 40,000 legitimate websites that are now infecting users with an information-stealing trojan, according to security vendor Websense.
One of three conspirators in a computer-fraud scheme that used trojans to steal funds from brokerage accounts has pleaded guilty to federal charges in New York..
The Federal Trade Commission announced Friday that it has created a Father's Day e-card to offer tips on how to avoid becoming a phishing victim. The animated fish-themed card gives examples of typical phishing emails and warns fathers against giving up personal or financial information and to be wary of opening suspicious attachments. The card is available at: https://www.ftc.gov/dad. — AM
The URL hosting the Gumblar attack, which has compromised thousands of legitimate websites with code that silently redirects users to a single Chinese domain, heads its list of Top 10 malware sites, according to Google.
A new attack targeting Outlook users has morphed from trying to retrieve login credentials to attempting to infect users with fake anti-virus products.