Month: April 2010

Beware of this National Banking Scam

It’s a nice afternoon, you check your e-mail and what do you find? An appealing message – “Accept your payment !” There’s even a space after payment to build up some more excitement about the whole deal. But should you accept it? Of course, getting paid is good, besides what could possibly go wrong with e-mail like this? You have a pending payment “to” … hold up, hold up, they’re telling you up front that you have to pay somebody – didn’t the subject line say “Accept” payment suggesting that you are receiving a payment FROM somebody as opposed to making a payment TO somebody. In case it hasn’t become crystal clear to you by now, you are looking at your typical run of the mill scam message. Still not convinced? Alright then, let’s give it the benefit of the doubt and go a little further. The payment will be sent to my bank account, the message claims – well that’s awfully nice, I LOVE getting money sent to my bank account, much more so than having money taken out of my bank account… Using my bank to “send money”? Pretend there’s nothing wrong with that – A national bank I haven’t ever heard of thanks me for using it and says that by using it , I can pay instantly and “my purchase won’t show up at the...

Read More

iPhone Users Beware of AT&T Wi-Fi Hot Spot

A security researcher has discovered that any wireless network can pretend to be an AT&T Wi-Fi hot spot and thus lure unsuspecting iPhone users to an untrusted network connection. Samy Kamkar, who created a worm that garnered him a million friends on MySpace overnight in 2005, said in an interview this week that he can hijack any iPhone within Wi-Fi range in what is often dubbed a “man-in-the-middle” attack because of the way the devices are configured to recognize AT&T Wi-Fi connections merely by the name “attwifi.” Typically, an iPhone will look for a specific MAC address–the unique identifier for the router–to verify that the wireless network is a device a user agreed to join previously. However, if the iPhone has previously connected to any one of the numerous free AT&T Wi-Fi hot spots (offered at virtually every Starbucks in the U.S., for example) the device will ignore what the MAC address says and simply connect to the network if it has “AT&T Wifi” attached, Kamkar said. “The iPhone joins the network by name with no other form of authentication,” he said. Read the rest of the story...

Read More

iPad Email Update Scam

We knew this would happen sooner than later due to the popularity and the amount of iPad units sold, approximately 1 million. Fraudsters are sending massive amount emails to trick users into taking the bait. The bait – malware and it comes with other surprises. The email instructs users that their device requires an update for iTunes to keep the installed software up to date – this is far from the truth, but this is what some fraudsters want users to believe. Criminals are sending out emails instructing iPad users to download and install a new version of iTunes for Windows. A link in the email takes users to a very realistic fake copy of the iTunes website. According to BitDefender, rather than installing iTunes, the downloaded ‘update’ installs malware, including a back door, Bifrose.AADY, which steals passwords and serial numbers for installed Windows software. The iPad itself is not even involved and does not become infected. The fraudsters’ success rate in infecting Windows PCs, in the face of an estimated 1 million iPad sales to date, is impossible to predict. It wouldn’t take many sets of bank account access data, however, to keep most criminals happy. iPad operating system appears to have inherited a number of security vulnerabilities from the iPhone. iPhone and PS3 hacker George Hotz, also known as Geohot, claims to have jailbroken the iPad, allowing...

Read More

Beware of this Fraudulent Shopping Site

The websites tagline reads; “one goal, one dream.” The goal is to steal your money and personal identification so they can live the dream. The shopping site looks legitimate, but looks can be deceiving. I noticed a couple of things that sure look suspicious and I was 100 percent correct. The site in question is called AE-ShoppingMall dot com. I checked the domain whois record and I was amazed at the lack of information or false information about this so-called online shopping site. You can view the whois information here. It certainly looks like the company is hiding information about who they are. I checked to see if the VeriSign seal they have was real or fake and it’s a fake seal. How to verify the VeriSign Secured® Seal You can help reduce fraud on the Internet by reporting misuse of a VeriSign Secured Seal including: A site that does not employ an appropriate VeriSign service Mismatched information on the seal’s verification page Missing information pop-up when the seal is clicked A modified seal A seal used in Phishing or illegal activities *Includes VeriSign subsidiaries, affiliates, and resellers The VeriSign seal on AE-ShoppingMall dot com doesn’t provide any information when you click on it. I also noticed that they have an unsecured check out process. I hope that no one has fallen victim to this fraudulent online shopping site....

Read More

Win a Free SUPERAntiSpyware Professional License

If you care about your privacy, system performance and overall safety when on your computer, than your focus and mindset are both in the right place. SUPERAntiSpyware is giving away three lifetime Professional licenses to three lucky winners. I would like to thank Mike Duncan (Director of Business Development) over at SUPERAntiSpyware for giving me the opportunity to test their product this past week. If you missed the review, please visit this article here. To enter into the contest: Please leave a comment with your name and a valid email address in the comment form and tell us what security program/s you use and what your overall experience is. All comments will be entered into a random drawing. The contest entry ends on Sunday April 25, at 12:00 pm (midnight) Central time. The odds of winning are based on the number of comments left in this post. The winners will be announced and included in this post on Monday April 26, at 12:00 pm (noon) Central time. All prizes will be emailed with the product license from Mike Duncan at SUPERAntiSpyware along with a link to download SUPERAntiSpyware Professional. About SUPERAntiSpyware Professional: SUPERAntiSpyware Professional will detect and remove thousands of Spyware, Adware, Malware, Trojans, KeyLoggers, Dialers, Hi-Jackers, and Worms. SUPERAntiSpyware features many unique and powerful technologies and removes spyware threats that other applications fail to remove. SUPERAntiSpyware Professional includes...

Read More