We've now seen several phishing web sites that are using flash-based content instead of normal HTML. Probably the main to reason to do this is to try to avoid phishing toolbars that analyze page content. Two recent examples, both targeting PayPal: and . . These sites look like the real PayPal front page, but they are actually Flash recreations. The link for this article located at F-Secure is no longer available. . These sites look like the real PayPal front page, but they are actually Flash recreations. The link . we've, phishing, sites, using, flash-based, content, instead, normal. . LinuxSecurity.com Team
A woman from Greater Manchester has become a victim of an internet scam in which hackers hijack computer files and blackmail owners to get them back. Helen Barrow, a 40-year-old nurse from Rochdale, is believed to be one of the first victims of the con in the UK. Criminals encrypt files with complex passwords, leaving a ransom note telling victims not to contact police. . Ms Barrow's note said that she would have to buy drugs from an online pharmacy to find out the password. The new phenomenon, known as Ransomware, means victims cannot access any of the files stored in their My Documents folder. . Ms Barrow's note said that she would have to buy drugs from an online pharmacy to find out the passw. woman, greater, manchester, become, victim, internet, which, hackers, hijack. . LinuxSecurity.com Team
FEARS that small online retailers are the weakest link in the fight against internet fraud have prompted MasterCard, the global payment scheme group, to set up secret teams of hackers to test security systems in the sector. The Times has learnt that the project, named Site Data Protection (SDP), will go live in May and will target online outlets that fail to comply with appropriate levels of internet security. SDP teams will be recruited by the banks that have relationships with online merchants whose systems do not come up to scratch. Brian Morris, head of e-business solutions at MasterCard, said that while large online retailers had robust internet security systems, small and medium-size enterprises (SMEs) "could benefit from the assistance". . . .. FEARS that small online retailers are the weakest link in the fight against internet fraud have prompted MasterCard, the global payment scheme group, to set up secret teams of hackers to test security systems in the sector. The Times has learnt that the project, named Site Data Protection (SDP), will go live in May and will target online outlets that fail to comply with appropriate levels of internet security. SDP teams will be recruited by the banks that have relationships with online merchants whose systems do not come up to scratch. Brian Morris, head of e-business solutions at MasterCard, said that while large online retailers had robust internet security systems, small and medium-size enterprises (SMEs) "could benefit from the assistance". Organised criminal gangs are increasingly hacking into the systems of online retailers and stealing subscribers' credit card and personal details. The information can then be used to commit "card-not-present fraud" -- fraudulent buying of goods and services from a remote location, usually by phone or via the internet. Card-not-present fraud is thought to be one of the world's fastest growing crimes. Stolen personal details have also been used by gangs to commit "phishing", sending fake e-mails purporting to be from a bank orretailer to cardholders to trick them into revealing bank account details. MBNA and Barclays were recently victims of phishing. . Visa's covert units strive to improve digital safety for small businesses in response to increasing cybercrime risks.. Online Fraud Prevention, Cybersecurity Solutions, E-commerce Security Testing. . Anthony Pell
Internet use is still growing fast, but so is Internet-based fraud, according to security vendor VeriSign Inc., which examined data from its own infrastructure services between August 2002 and August 2003.. . .. Internet use is still growing fast, but so is Internet-based fraud, according to security vendor VeriSign Inc., which examined data from its own infrastructure services between August 2002 and August 2003. According to VeriSign's study "Internet Security Intelligence Briefing," released yesterday, 6.2% of e-commerce transactions carried out in the U.S. were attempts at fraud. More than half the fraud attempts were made by entities outside the U.S., VeriSign said. Also, the number of security incidents almost doubled between May and August this year, VeriSign said. Standard security attacks and fraud are closely linked, the company said. "Analysis ... showed extremely high correlation (47%) between sources of fraud and sources of security attacks," the study said. "Attackers who gain control of Internet host machines are using these compromised hosts for both security attacks and fraudulent e-commerce transactions." Other findings from the study include the following: Total DNS queries, such as those aimed at finding Web sites and e-mail addresses, grew by 51.4% between August 2002 and August 2003. E-mail-related DNS queries rose by 245% over the same period, partly because of the surge in spam and mass-mailing viruses such as Bugbear. The average number of Internet transactions per online merchant site has grown 17% in the past year. SSL has become the de facto e-commerce security standard at more than 400,000 sites, with growth of 6% in certificates issued over the past year. Security incidents per device rose 99% this year between May and August, with the Blaster worm contributing most of the increase in August. The trend in viruses and worms is toward more sophisticated, potent and coordinated attacks along the lines of Blaster, Nachi and Sobig.F, which was the first virus todirect itself at the Internet's root servers. Security incidents were principally generated in the U.S. (81%), but the percentage of fraud attempts made from the U.S. was much lower (48%). One reason for the difference is the weak policing of the Internet outside the U.S., according to VeriSign. "International criminals can essentially commit fraud with impunity, given that jurisdiction issues make policing international fraud near impossible," the report said. Following the U.S. in the fraud stakes was the U.K. (5.25%), while in third place was Nigeria (4.81%), where the 419, or advance-fee, fraud epidemic rages unchecked. All of article The link for this article located at ComputerWorld is no longer available. . Digital connectivity is on the rise, but so are scams. Uncover the relationship between cyber attacks and e-commerce activities.. E-commerce Growth, Fraud Attempts, Internet Security. . LinuxSecurity.com Team
Technology is a real time-saver for criminals. They can scam thousands of less-savvy Internet users by sending legitimate-looking PayPal or AOL queries. Mail promising recipients incredible mortgage rates must rake in piles of Social Security numbers, driver's license numbers, and bank . . . . Technology is a real time-saver for criminals. They can scam thousands of less-savvy Internet users by sending legitimate-looking PayPal or AOL queries. Mail promising recipients incredible mortgage rates must rake in piles of Social Security numbers, driver's license numbers, and bank account information. The height of criminal gall was the message I received earlier this month. It warned that some of my Internet provider's customers had been victims of identity theft, and I was directed to a well-crafted Web site ostensibly set up by my provider. I checked it out through a cloaking gateway. The site walked me through a maze of harmless questions and "please wait -- checking our records" delays to gain my trust, then it asked for my SSN for account verification. InfoWorldreaders wouldn't fall for this, but we all have countless family members and co-workers who would. For them, an Internet-connected computer is an inherently trustworthy appliance. They're typing, not speaking. Nobody can listen in, therefore it must be safe. I can't succinctly explain certificates, signed e-mail, triple DES, and reverse DNS to people who don't know how modems work. I tell them they can't trust the Internet sometimes. But I can't explain when to trust and when not to. So, they either have too much faith or too much suspicion. How can I say, "E-mail that looks like it's from me might be forged," and "Don't open e-mail that has such-and-such for a subject line," and expect them to go online at all? As much as the tech elite likes to make fun of average Internet users -- including nontechnical corporate users -- average users don't live in straw huts and communicate with drums. Most have flush toilets, cell phones, satellite TV, andcaller ID, and use them appropriately. They're buried in technology, most of which is -- as it all should be -- invisible. But computers need constant care to keep their users safe. And just to get this out of the way, it is not Microsoft's fault that the Internet is turning into a den of pickpockets. It isn't Gates' and Torvalds' duty to make the Net a safe place. The link for this article located at InfoWorld is no longer available. . Fraudsters leverage digital tools to deceive innocent individuals, highlighting the dangers of online personal information breaches.. Identity Theft Risks, Online Scams, Personal Data Safety. . LinuxSecurity.com Team
Ralph Nader has taken up a new cause: Guarding Internet users from online fraud and invasion of privacy. And he's proposed a bill of rights that would guarantee their protection. Tuesday, Nader endorsed the proposal in Santa Monica, Calif. The proposal's . . . . Ralph Nader has taken up a new cause: Guarding Internet users from online fraud and invasion of privacy. And he's proposed a bill of rights that would guarantee their protection. Tuesday, Nader endorsed the proposal in Santa Monica, Calif. The proposal's aim is "to provide across-the-board protection for all e-commerce transactions and rigid prohibitions against sharing personal information," according to a statement. It originated from opposition to the Third Millennium Digital Commerce Act passed by the U.S. House of Representives in late 1999. Internet fraud is on the rise, according to a recent FBI report, and California is the breeding ground. About 20 percent of business fraud and 17 percent of individual fraud originates there, and 15 percent of all known Internet fraud victims live in the state. The link for this article located at TechWeb is no longer available. . Ralph Nader has taken up a new cause: Guarding Internet users from online fraud and invasion of priv. ralph, nader, taken, cause, guarding, internet, users, online, fraud, invasion. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.