SEARCH RESULTS
 
Showing 1-8 of 8 records
1
 
Expand article

Hacking ISP Error Pages

2008-04-24 06:43:52 by schneier in Schneier on Security
 
...subdomain of a real website, such as http://webmale.google.com, where the subdomain webmale doesn't exist (unlike, say, mail in mail.google.com). In this case, the Earthlink/Barefruit ads appear in the browser, while the title bar suggests that it's the official Google site As a result, all those subdomains are only as secure as Barefruit's...
 
Tags: server, dns server tells, official google site, site, dns, real paypal page, paypal, google, logged-in user
 
 
 
 
Expand article

Phishing Using FasterFox Prefetching

2008-01-03 16:18:15 by RSnake in ha.ckers.org web application security lab
 
...subdomain testing.bitsploit.de But why I asked myself I looked into your HTML source to find a hidden image or something like this, but I didnt found anything but the link. I havent clicked on the link, so why does it pop up ? Than I figured out, that the FasterFox-Extension for Firefox prefetches that link and thats why the HTTP-Auth dialog...
 
Tags: fasterfox, firefox prefetches, trick fasterfox-users, http-auth dialog pops, link, http-auth dialog immediately, firefox, email, people
 
 
 
 
Expand article

MySpace Phishers Now Targeting Facebook

The Article has images
2008-01-07 19:20:52 by HASH0x898bea0 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...subdomain serving malware for instance - facebook-login.vylo.org (209.160.73.132) redirects to iscoolmovies.com/movie/black/0/2/541/1/ which attempts to load 209.160.73.132/download/502/541/1/ where 209.160.73.132/dw.php is the adware in this case - Adware:Win32/SmitFraud. And yet another one - facebook-login-61248sf1.krantik.info...
 
Tags: facebook, site facebook, facebook users, genuine facebook link, login details, login, myspace, facebook-login, malware
 
 
 
 
Expand article

The Continuing .Gov Blackat SEO Campaign

The Article has images
2008-02-18 15:23:38 by HASH0x8bf8e28 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...subdomain freeporn.eee.bridger-mt.gov is pointing to another netblock, in this case 66.49.238.80 , exactly the same approach was used in a previous such assessment that was however serving malware to its visitors. Here are some of the very latest such examples listed by directory Cobb County Government - cobbcountyga.gov/css - over 2,240...
 
Tags: gov, pages, gov domains, bridger, gov responds, bridger-mt, cobb county government, freeporn, subdomain freeporn
 
 
 
 
Expand article

Clouding and Confusing the CEP Community

2008-04-20 11:16:38 by Greg Reemler in The Complex Event Processing Blog
 
...subdomain of the CEP space as defined by both Dr. Luckham and the CEP community-at-large Whats the big deal? Stream processing is a perfectly respectable professional David, along with theevent processing community defined the term event cloud as follows Event cloud : a partially ordered set of events (poset), either bounded or unbounded,...
 
Tags: event cloud, event, event relationship, event data, event stream, event types, event streams, streamof market data, market data
 
 
 
 
Expand article

Ethical Phishing to Evaluate Phishing Awareness

The Article has images
2008-05-06 17:26:25 by HASH0x8af66c4 in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...subdomain. However, with the ongoing commoditization of phishing pages , the localization and segmentation of phishing campaigns , the next logical development would be the public release of a point'n' click web interface for managing real phishing campaigns Or perhaps a public leak, given that someone out there might have already came up...
 
Tags: awareness, interface, click web interface, employees awareness, web interface, employees, susceptible employees, phisher, susceptible
 
 
 
 
Expand article

ShoutPro Vulnerability Currently Causing Issues For Websites

The Article has images
2008-06-26 10:22:27 by Christopher Boyd in SpywareGuide Greynets Blog
...subdomain, he was only able to actually access files within [URL REMOVED], though he was able to view file lists of files from any directory on my site, and maybe view them using shell commands ouch. You can see an example of NSTView at work here , complete with screenshots (scroll down). As for the type of Shoutbox used, the version number...
 
Tags: shoutpro, shoutbox, shoutbox recently due, shoutbox attacks, access, access files, files, shoutpro code, version
 
 
 
 
Expand article

Lazy Summer Days at UkrTeleGroup Ltd

The Article has images
2008-07-22 07:12:02 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
...subdomain structure, and IP, stat.antivirusxp2008 .com (85.255.118.172), stat.antivirxp08 .com (85.255.118.172), stat.antivirusxp08 .com (85.255.118.172) in order to phone back home winifixer .com , a well known rogue software, is entirely relying on UkrTeleGroup's hosting services hosted at 85.255.117.163; 85.255.118.171; 85.255.120.115;...
 
Tags: ukrtelegroup, codecs, fake codecs simultaneously, rogue security software, ukrtelegroup ukrtelegroup, fake codecs, home, home stat, scammy ecosystem
 
 
 
 
 
Showing 1-8 of 8 records
1
 
TOP SEARCH
Expand / MinimizeClose Widget
  •  
RECENT SEARCH
Expand / Minimize
  •  
RELATED VIDEO
Expand / Minimize
SecurityRatty FAQ
Sergey Zarubin, 31yo
CISSP, CCSP
Moscow, Russia