Phishing

Desperate Phishing Attempt

Somebody is trying to pose as us. If you see an email like the one below, please ignore it:

     From: security@f-secure.com
     Reply-To: securitysupport@hotxf.com
     Subject: Security Maintenance.F-Secure HTK4S
     Date: Fri, 5 Mar 2010 18:11:05 -0000
     To: undisclosed-recipients:;
     
     Dear Email Subscriber,
     
     Your e-mail account needs to be improved with our new
     F-Secure HTK4S anti-virus/anti-spam 2010-version.
     Fill in the columns below or your account will be

This you?? What's the point of phishing a Twitter account?

We've received some questions regarding recent phishing attacks conducted against Twitter.com.

Mobile Browsing Protection and Anti-Theft

There are new features in our latest release of Mobile Security. And one that affects the lab directly, is Browsing Protection.

With version 6 of Mobile Security, users will be protected from phishing sites.

Harmful web sites are blocked like this:

Mobile Security Browsing Protection


worldrofwarcraft.com

World of Warcraft

The World of Warcraft online game has over 10 million players around the world.

World of Warcraft also has hundreds of phishing websites targeting it, trying to steal end-user login credentials.

Like these:

World of Warcraft

Gmail Phish

Just a quick note to readers to be aware of e-mails purportedly from Gmail administrators.

One of our Fellows recently received a message from "The Google Mail Team" asking users to verify their account details to combat "anonymous registration of accounts":

Gmail Phishing

Twitter as a Professional Tool

I've never been a fan of social networks.

Twitter LogoI'm not on Facebook. Or Myspace. Or LinkedLn.

But last year I decided to take a look at this Twitter thingy.

I gave myself a trial period of couple of months, until the end of 2009 to decide if Twitter is useful or not. And if I wouldn't find it useful, I would quit using it.

2010 and a Fresh Study

There is an infinite number of ways to calculate 2010, here is a fairly fun list of some of them.

The past year showed massive numbers of malware being run on systems across the globe. Behind the malware was an active malware marketplace, often with forums full of services for hire, advice on distributing and maintaining crimeware, and devious ways to hire money-mules.

Steam Phishing

Steam from Valve is the largest digital distribution network in the world, with over 20 million active users.

This is how people today buy their PC games and other content.

In many ways, Steam is a competitor for iTunes.

Steam

And just as there are phishing attacks to steal iTunes accounts, there are phishing attacks against Steam as well. After all, they both have money in them.

"You are signing in from an unfamiliar location."

I recently took a sudden and unexpected trip to Norway. During my time there I needed to quickly update my family and friends as to my situation. How does one do that when one's family and friends span the globe?

I use Facebook.

Sure, I can use my phone to contact my most immediate family. But that's a challenge due to time zone differences.

Europe, America, Australia, who the heck can keep track of what time it is when you're in the middle of something urgent and haven't slept in two days?

Why would anybody phish for XBOX accounts?

Here's an example of a YouTube video that is used to drive traffic to a "XBOX" phishing site.

live.xbox.co.uk.tp

The actual phishing site looks like this:

live.xbox.co.uk.tp

The URL is fairly convincing. Turns out .TP is the country code for East Timor.


Syndicate content