arthurfrdent
04-06-2005, 11:26 AM
http://www.computerworld.com/securitytopics/security/story/0,10801,100874,00.html
So I am figuring you may have gotten an ecard once in a while... so here is one more thing to worry on...
Web postcards hide Trojan horse programs
Beware of Web postcards bearing greetings. That's the advice from the SANS Institute's Internet Storm Center (ISC), which is warning about e-mail messages that pose as Web postcards, then direct recipients to a Web site that installs a Trojan horse program. The new attacks use sophisticated social engineering techniques to trick users into installing Trojan remote access programs that can fool antivirus and firewall software by appearing to be authorized applications like Internet Relay Chat (IRC) software, the ISC said. Victims receive e-mail messages with subject lines such as, "You have received a virtual postcard from a family member," with a link to a pickup site that installs the Trojan horse, according to a post on the ISC Web site. Users are advised to be cautious when opening unexpected e-mail from unknown sources, ISC said. When links to legitimate Web sites are provided in HTML-format e-mail messages, users should note the address, then type it into the address field of their Web browser, rather than clicking on the link provided in the message. Clicking on the link can often trigger the installation of malicious code or take the user to a Web site that will install unwanted programs. (Computerworld 04/05/05)
AFD :rolleyes:
ETA...
they say social engineering is far more a threat than anything else... because people generally need to find some level of trust in each other. So social engineering will work for a while. When people get to the level of 'once bitten' then society as a whole suffers because we have to have a more suspicious nature... it has already gone on for some time, in our general lives, it is starting to take over the online as well...
So I am figuring you may have gotten an ecard once in a while... so here is one more thing to worry on...
Web postcards hide Trojan horse programs
Beware of Web postcards bearing greetings. That's the advice from the SANS Institute's Internet Storm Center (ISC), which is warning about e-mail messages that pose as Web postcards, then direct recipients to a Web site that installs a Trojan horse program. The new attacks use sophisticated social engineering techniques to trick users into installing Trojan remote access programs that can fool antivirus and firewall software by appearing to be authorized applications like Internet Relay Chat (IRC) software, the ISC said. Victims receive e-mail messages with subject lines such as, "You have received a virtual postcard from a family member," with a link to a pickup site that installs the Trojan horse, according to a post on the ISC Web site. Users are advised to be cautious when opening unexpected e-mail from unknown sources, ISC said. When links to legitimate Web sites are provided in HTML-format e-mail messages, users should note the address, then type it into the address field of their Web browser, rather than clicking on the link provided in the message. Clicking on the link can often trigger the installation of malicious code or take the user to a Web site that will install unwanted programs. (Computerworld 04/05/05)
AFD :rolleyes:
ETA...
they say social engineering is far more a threat than anything else... because people generally need to find some level of trust in each other. So social engineering will work for a while. When people get to the level of 'once bitten' then society as a whole suffers because we have to have a more suspicious nature... it has already gone on for some time, in our general lives, it is starting to take over the online as well...