Take a close look at this image. You can click to enlarge it. It looks like the PayPal login page, but some things are off. For one, the title is "Login - PayPal Phishing Proof of Concept". That is because this isn't the PayPal login page at all, but a Phishing proof of concept. It was...

by Rossano Ferraris Another interesting case I would like to bring to your attention is the effect of the so-called “fake-codec” trojans. Here is what I figured out after searching the phrase “daily dawn” on the Google search engine. The screenshot reflects a blogspot webpage from the search results...

by Rossano Ferraris The other day spammers spread two interesting emails to users throughout the Internet and attempted to make users believe these emails originated from Microsoft. The emails contained an alert that advised users of an undiscovered vulnerability in the Kodak Image Viewer and a new 0...

A famous quotation from the The Art of War is "If you know both yourself and your enemy, you will come out of one hundred battles with one hundred victories." A malware author following the principles of Sun Tzu might say "If you know both yourself and your victim and use social engineering...

The day after I got back from a 16 day trip to Europe, I opened a letter from an unknown company who informed me that information about my bank account had been removed by one of their employees. The employee sold the information to a data broker who then sold the data to some direct marketing companies...

A chill ran up my spine when I came to my front door and it was already open. A USB cable lay strewn across the doorway. I could hear a stereo speaker eerily buzzing inside. I pushed the swinging door aside and confirmed my fear. I was robbed! After a wonderful weekend of camping and fishing, I returned...

After trials, US operator T-Mobile USA has released two new handsets that enable users to communicate either over its cellular infrastructure or over WiFi. The technology behind this new service called HotSpot@Home is Generic Access Network (GAN), formerly known as Unlicensed Mobile Access (UMA). In...

It appears that the website pocketpcmag.com has been hijacked. At the time this article is written, webpages for articles dated June 2006 and May 2005 contain JavaScript code that lead to another page and script. The script uses an iFrame to redirect the browser to a website of the .cn domain known to...

A few days shy of one of the most important days of the year for sports fans across America, the website for the venue of Super Bowl XLI had a little surprise for its visitors. Earlier today, dolphinstadium.com, dolphinsstadium.com and proplayerstadium.com were compromised by malicious code . A link...

The last monthly Microsoft security bulletin release for 2006 is out today, bringing the total number of bulletins for 2006 to 78. Microsoft published 45 bulletins in 2004, and 58 in 2005, so the upward trend is clear. Open issues Two recently reported vulnerabilities (advisory 929433 and MSRC blog post...