Hi there,

this might not be relevant and please tell me if not, but thought you should 
see this.

Kay

----- Original Message ----- 
From: "Parker at Vip conduit" <[EMAIL PROTECTED]>
To: "The Conduit" <[EMAIL PROTECTED]>
Sent: Monday, August 18, 2008 8:03 PM
Subject: [The Conduit] Beware of Bogus MSNBC and CNN E Mails


This article is worth reading.
BBC NEWS
Clipboards hijacked in web attack
Computer security firms are warning about an attack that hijacks the 
clipboard where
copied text is stored.
The attack puts a hard-to-delete weblink into the clipboard that, if 
followed, leads
people to a website selling fake security software.
The code that inserts the link has been found in flash-based adverts seen on 
many
legitimate websites.
The attack on the clipboard has hit both Windows and Mac users of the 
Firefox web
browser.
Fake software
The attack has come to light as victims log reports in discussion forums of 
a weblink
that appears in the clipboard in place of text they thought they had placed 
there.
It seems to work by exploiting Adobe Flash files used to make display 
adverts in
such a way as to endlessly flush the clipboard of other text and constantly 
re-insert
the malicious link in its place.
Getting rid of the link has proved problematic. Some report resorting to 
re-booting
their machine to free themselves of it but others stopped it by killing the 
Firefox
process thread.
"It's an interesting attack, but doesn't seem to be very widespread at the 
moment,"
said Mikko Hypponen, chief research officer at security firm F-Secure. "I 
don't remember
seeing this before."
"It is a pretty clever technique," he said. "Our work would be so much 
easier if
our enemy would be stupid."
Chris Boyd, director of malware research at Facetime Security, said he had 
been following
the attack for several days.
Mr Boyd said he had seen many spam e-mails being sent out that had links to 
sites
hosting the booby-trapped adverts.
"There's been quite a rash of rogue antivirus hijacks lately related to the 
fake
CNN/MSNBC spam," he said.
Those following the link get taken to a page advertising a bogus anti-virus 
security
program that erroneously tells people their machine is riddled with 
malicious software.
Story from BBC NEWS:
http://news.bbc.co.uk/go/pr/fr/-/2/hi/technology/7567889.stm
Published: 2008/08/18 11:29:06 GMT
© BBC MMVIII
To unsubscribe from The Conduit list, simply copy the line below.  Paste it 
in the to line of a blank message and send it. Follow the directions in the 
confirm message.
[EMAIL PROTECTED]
To post to the list send the message to.
[EMAIL PROTECTED]
Note: In an effort to help control SPAM this list will reject any message 
that contains
other addresses, either in the CC or BCC line.
No warnings are to be posted to this list unless approved by VIP Conduit 
first.


--~--~---------~--~----~------------~-------~--~----~
Access the Recipes And More list archives at:

http://www.mail-archive.com/recipesandmore%40googlegroups.com/

Visit the group home page at:

http://groups.google.com/group/RecipesAndMore
-~----------~----~----~----~------~----~------~--~---

Reply via email to