----- Original Message ----- From: "Parker at Vip conduit" <[EMAIL PROTECTED]> To: "Accessible Devices" <[EMAIL PROTECTED]> Sent: Monday, August 18, 2008 11:38 PM Subject: Accessible Devices Beware Of Bogus MSNBC and CNN E mails
Reading the following article could be time well spent. BBC NEWS Clipboards hijacked in web attack Computer security firms are warning about an attack that hijacks the clipboard where copied text is stored. The attack puts a hard-to-delete weblink into the clipboard that, if followed, leads people to a website selling fake security software. The code that inserts the link has been found in flash-based adverts seen on many legitimate websites. The attack on the clipboard has hit both Windows and Mac users of the Firefox web browser. Fake software The attack has come to light as victims log reports in discussion forums of a weblink that appears in the clipboard in place of text they thought they had placed there. It seems to work by exploiting Adobe Flash files used to make display adverts in such a way as to endlessly flush the clipboard of other text and constantly re-insert the malicious link in its place. Getting rid of the link has proved problematic. Some report resorting to re-booting their machine to free themselves of it but others stopped it by killing the Firefox process thread. "It's an interesting attack, but doesn't seem to be very widespread at the moment," said Mikko Hypponen, chief research officer at security firm F-Secure. "I don't remember seeing this before." "It is a pretty clever technique," he said. "Our work would be so much easier if our enemy would be stupid." Chris Boyd, director of malware research at Facetime Security, said he had been following the attack for several days. Mr Boyd said he had seen many spam e-mails being sent out that had links to sites hosting the booby-trapped adverts. "There's been quite a rash of rogue antivirus hijacks lately related to the fake CNN/MSNBC spam," he said. Those following the link get taken to a page advertising a bogus anti-virus security program that erroneously tells people their machine is riddled with malicious software. Story from BBC NEWS: http://news.bbc.co.uk/go/pr/fr/-/2/hi/technology/7567889.stm Published: 2008/08/18 11:29:06 GMT © BBC MMVIII -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mail.accessible-devices.com/pipermail/a-d_accessible-devices.com/attachments/20080818/fbb6ea58/attachment.html This is an Announce only list. Subscribers are not able to post to this list. To unsubscribe from the Accessible Devices list copy the line below. Paste it in the To: line of a blank message and send it. [EMAIL PROTECTED] Please feel free to pass this message on to a friend who might like to subscribe. To subscribe to Accessible Devices send a blank e mail to: [EMAIL PROTECTED] Just follow the directions in the confirmation message when it comes. Please Note: Accessible Devices is not able to provide tech support for software or products that we supply information about. _______________________________________________ A-d mailing list [EMAIL PROTECTED] http://mail.accessible-devices.com/mailman/listinfo/a-d_accessible-devices.com Join Access India convention: For updates on it visit: http://accessindia.org.in/harish/convention.htm Registration is now open! To unsubscribe send a message to [EMAIL PROTECTED] with the subject unsubscribe. To change your subscription to digest mode or make any other changes, please visit the list home page at http://accessindia.org.in/mailman/listinfo/accessindia_accessindia.org.in
