NOVELL GROUPWISE BUG THREATENS MASS EMAIL THEFT

A mole’s dream

Security researchers have identified two critical holes in Novell’s GroupWise WebAccess, the web front end for the company’s email and employee collaboration package, that allow malicious hackers to steal user messages with ease. All supported versions of the program are vulnerable.

One vulnerability allows an attacker to forward all of a user’s email simply by sending a specially crafted email, according to Adrian Pastor, an employee for ProCheckUp, a penetration testing firm based in London. The cross-site request forgery bug allows attackers to add new forwarding rules simply by tricking a user into opening the email, no clicking of links necessary.

Keep reading “Novell GroupWise bug threatens mass email theft” »

Popularity: 2% [?]

“Your craigslist posting” email

411-Spyware, a website that seems to be a magnet for every scam email out there, has posted a warning about a fake Craigslist email.

“Your Craigslist Posting” email reads:

From: noreply@craigslist.org
Subject: Your craigslist posting “SONY PLAYSTATION 3 METAL GEAR SOLID 4 PS3 80GB BUNDLE !”
Reply-To: noreply@craigslist.org
Confirmation for Posting ID# 921869828

Your ad, titled “SONY PLAYSTATION 3 METAL GEAR SOLID 4 PS3 80GB BUNDLE !,” has been posted as follows:

http://singapore.craigslist.com.sg/ele/921869828.html (electronics)
Posts will appear in the list of postings and in search results in about 15 minutes. If you have trouble finding them, please check our help page at http://www.craigslist.org/about/help/where.html

Please login into your account if you need to edit or delete your posting:
https://accounts.craigslist.org/login

If you did not post this ad please change your account password asap:
https://accounts.craigslist.org/login/chgpwd

For your protection please check our list of common scams: http://www.craigslist.org/about/scams.html

Thanks for using craigslist!

Attempting to log into Craigslist using any of links provided in the email takes you to a fake Craigslist website where any information you enter will go straight to the scammers.

411-Spyware has list of websites you should block concerning this email however I tested them all and they are inactive. The scammers will change the email links in the “Your craigslist posting” email from time to time so just delete the email as soon you get it.

Popularity: 14% [?]

WWB 2.0RHEA HACK MISTAKEN FOR END OF UNIVERSE

Much aTwitter about nothing

Fail and You  Kids these days. Used to be, when you were mad at your parents or your professors, you’d write an email worm in Visual Basic and spread it around via Outlook clients.…

Hacks like that didn’t take a lot of talent, but they had some comic value. As a tech person, it’s entertaining to watch someone who’s not savvy work a machine that they think is “infected with a virus.” The more industrious evildoers wrote self-propagating worms that exploited vulnerabilities in common services, like the SQL Slammer worm that slowed internet traffic to a crawl on a Friday night when I was in college. Many of us nerds had to go outside and party instead of playing video games until 4AM. I know of several pregnancies that were a direct result of this vulnerability in Microsoft SQL Server.

Keep reading “Web 2.0rhea hack mistaken for end of universe” »

Popularity: 1% [?]

Coca-Cola and McDonalds Email Malware

I’m not loving it. Spyware Techie is reporting that Coca-Cola and McDonalds emails containing malware are being sent to inboxes around the world.

The Coca-Cola spoofed spam message appears to come from the coca-cola company and includes a zip file attachment named promotion.zip. The email message may look legitimate as it states the attachment has details about a new online game and a chance to win Coca-Cola drinks for life. That may sound like a great deal too many computer users as some may choose to download and open the zip file attachment. Unfortunately, if the attachment is opened and the executable file is access it can then infect your system with a Trojan dropper that could have the ability to download or install malware.

It could be malware. On the other hand, free Coke for life…..

No, I and everyone else must remain strong and delete these emails.

Read Spam Alert: Coca-Cola and McDonalds Spoofed Holiday Spam Messages Contain Malware for more information as well has tips to detect these emails.

Popularity: 2% [?]

Switch Your Default Mail Client from Outlook

Your Windows-based PC probably launches Microsoft’s Outlook mail as a default, whenever you clicky click a link for email online.

But you don’t dig Outlook.

Let’s edit your registry and change your default mail app to whatever the hell you like better.

Read more

Popularity: 2% [?]