Crazy Privacy Policy

The following is fake site getting MSN user information

hxxp://thatzparty.com/login.php

Here is the Privacy Policy

“We may temporarily access your MSN account to do a combination of the following: 1. Send Instant Messages to your friends promoting this site. 2. Introduce new entertaining sites to your friends via Instant Messages.”

 

what they do is spam, site is registered by  CSS Management Inc, this also have 23 other domains all the same spamming the net.

Counter-eCrime Operations Summit (CeCOS III)

The third annual Counter-eCrime Operations Summit (CeCOS III) will engage questions of operational challenges and the development of common resources for the first responders and forensic professionals who protect consumers and enterprises from the ecrime threat every day. This year's meeting will focus on the development of response paradigms and resources for counter-ecrime managers and forensic professionals. Presenters will proffer case studies of national and regional economies under attack, narratives of successful trans-national forensic cooperation as well as models for cooperation and unified response against ecrime and data resources for forensic activities.

Fake Orkut Login

Following link was posted to a profile , which redirects to a Fake Orkut Login.

hxxp://orkutnew2009fastorkutwelcomeoekut2009.tk/

User information was captured by

hxxp://rajroxx.blackapplehost.com/run.php

also same information was posted to Orkut login page, so it can prompt for right user name and password.

Beware for such sites.

Secure by Prevention

Now there are program to prevent malware to cause damage the OS and other user information.But very less taken in protecting the data which were been attacked.

example there are detection against mass mailer , which uses the address book information to spread itself. but good protection of address book information will block any undetected malware from using it ?!

Idea presented here will not give 100% protection , but this will prevent more damage then detecting a malware.

fake youtube

there rise of fake you tube targeting Miss Universe 2008

here is one ,beware

AXIS Bank Phished

Got this Phish link

http://www.esb-news.org/ktmlpro100/includes/ktedit/help/india/index.php?bank=www.axisbank.com


its reported @ phish tank

http://www.phishtank.com/phish_detail.php?phish_id=468187

Pay Pal Phishing

The most prominent Phishing attack is on paypal most of the time.I am sure most of them who get spam message would get this once.

here is a classic one

Information Regarding Your account:
Dear PayPal Member:

Attention! Your PayPal account has been limited!

As part of our security measures, we regularly screen activity in the PayPal system.We recently contacted you after noticing an issue on your account.We requested information from you for the following reason:

Our system detected unusual charges to a credit card linked to your PayPal account.

Activate your account
PayPal Email ID: 5138-8872





Sincerely,

PayPal Accounts Review Department.

Copyright 1999-2008 PayPal. All rights reserved

it actually links to

ichrak.biz

the above link redirects to phishing site

it gets all information , even the pin number for your credit card. here is the reason they give.

By adding VeriSign Payment Services industry-leading tools such as Payflow Link and Payflow Pro to PayPal's suite of payment solutions, we're now able to offer online merchants even more choices for their businesses.

Requiring PIN Signatures is the latest security measure against: identity theft, credit card fraud and unauthorized account access. PayPal will verify it with your bank records for your own protection.


If you provide a wrong PIN your account will be suspended for unauthorized account access.