phishing

(get it in RSS or Atom)

Microsoft Windows Update emails try to steal your Gmail, Yahoo, AOL passwords...

by Graham Cluley on September 24, 2012 | 8 Comments

Beware any emails which claim to come from privacy@microsoft.com - it could be that you're being targeted in an attack designed to steal your AOL, Gmail, Yahoo or Windows Live password.

Facebook glitch lets spear phishers impersonate users' friends and family

by Lisa Vaas on August 31, 2012 | 9 Comments

Facebook blames a "temporary misconfiguration" for allowing spammers to get their hands on users' personal details and then pose as trusted friends to lure victims into clicking.

But is the problem properly fixed yet?

Phishing without a webpage - researcher reveals how a link itself can be malicious

by Paul Roberts on August 31, 2012 | 13 Comments

Can you phish without a phishing page? Research by a student at the University of Oslo in Norway finds that, with the help of a trusty URI, ‘Yes, you can.’

Exploits posing as messages from payroll company ADP

by Lisa Vaas on August 8, 2012 | 2 Comments

The bogus messages contain links to Java exploits that some anti-virus products struggle to detect.

O2 phishing emails pose as network disruption apology

by Graham Cluley on July 31, 2012 | 3 Comments

Phishers have taken advantage of the network disruption suffered by the O2 mobile network earlier this month.

BlackHat conference in giant phishing gaffe

by Paul Ducklin on July 22, 2012 | 9 Comments

The annual BlackHat conference in Las Vegas prides itself as "the best and biggest event of its kind, unique in its ability to define tomorrow's information security landscape."

That may well be. But this year's event has kicked off with a giant security boo-boo.

Is security training futile?

by Lisa Vaas on July 20, 2012 | 8 Comments

Phishing attacks succeed against even those who should know better.

Which all begs the question, "Why bother with security training?"

Prison for phishers who targeted university students to the tune of £1.5 million

by Graham Cluley on July 10, 2012 | 4 Comments

Two British men have been sent to prison for their involvement in a criminal scheme that targeted students and managed to steal £1.5 million.

What you need to know about Facebook sneakily swapping users' default email addresses to @facebook.com

by Graham Cluley on June 26, 2012 | 23 Comments

Have you checked the contact information you list on your Facebook profile? Chances are that it's now listing an @facebook.com email contact address for you.

Learn how to change your settings to make the email address invisible, and to control who can message you.

Twitter account hack epidemic - Don't fall for "CNBC" spam!

by Joshua Long on June 20, 2012 | 9 Comments

Throughout the month of June, Twitter accounts have been getting hacked and have subsequently been sending spam that links to fake CNBC news articles. Be cautious about links in direct messages or tweets, even if they're sent from a friend's account!