Language Selection

English French German Italian Portuguese Spanish

Phishers Sinking to New Lows

Filed under
Security

Don't get me started on spam. But the other day, scanning the dregs of my spam filter, there was this one that stood out from the hundreds of unsolicited commercial e-mails that pitch porn, get-rich-quick schemes, cheap pharmaceuticals, urgent business proposals and sure-thing investments. All no-brainer deletes. Click, click, click.

But this one stopped me cold. It raised images of stressed-out and distraught military families stunned by the message that their bank accounts had been breached (all the more troubling after last week's news that someone had indeed hacked an Air Force nonfinancial database containing 33,000 Social Security numbers). Recipients could follow the message's instructions, click on a link to a Web site, and divulge their passwords and confidential information.

Only, that urgent notice isn't from their bank. It's from a crook.

You probably knew that already. Those daily spams, supposedly from eBay, AOL or PayPal? Saying your account has been corrupted? If you don't have eBay, AOL or PayPal accounts, they're easy rip-offs to recognize. Click, click, click. Gone.

But if your thoughts are halfway around the world, in a war zone where every day is a life-or-death matter for a loved one, and your bank is the Armed Forces Bank, then just maybe you get fooled this one time. Just takes once. Low-life scammers count on it -- all the way to the bank.

Full Story. Free registration may be required.

More in Tux Machines

USB stick brings neural computing functions to devices

Movidius unveiled a “Fathom” USB stick and software framework for integrating accelerated neural networking processing into embedded and mobile devices. On April 28, Movidius announced availability of the USB-interfaced “Fathom Neural Compute Stick,” along with an underlying Fathom deep learning software framework. The device is billed as “the world’s first embedded neural network accelerator,” capable of allowing “powerful neural networks to be moved out of the cloud, and deployed natively in end-user devices.” Read more

ImageMagick Security Bug Puts Sites at Risk

  • Open Source ImageMagick Security Bug Puts Sites at Risk
    ImageMagick, an open source suite of tools for working with graphic images used by a large number of websites, has been found to contain a serious security vulnerability that puts sites using the software at risk for malicious code to be executed onsite. Security experts consider exploitation to be so easy they’re calling it “trivial,” and exploits are already circulating in the wild. The biggest risk is to sites that allows users to upload their own image files. Information about the vulnerability was made public Tuesday afternoon by Ryan Huber, a developer and security researcher, who wrote that he had little choice but to post about the exploit.
  • Huge number of sites imperiled by critical image-processing vulnerability
    A large number of websites are vulnerable to a simple attack that allows hackers to execute malicious code hidden inside booby-trapped images. The vulnerability resides in ImageMagick, a widely used image-processing library that's supported by PHP, Ruby, NodeJS, Python, and about a dozen other languages. Many social media and blogging sites, as well as a large number of content management systems, directly or indirectly rely on ImageMagick-based processing so they can resize images uploaded by end users.
  • Extreme photo-bombing: Bad ImageMagick bug puts countless websites at risk of hijacking
    A wildly popular software tool used by websites to process people's photos can be exploited to execute malicious code on servers and leak server-side files. Security bugs in the software are apparently being exploited in the wild right now to compromise at-risk systems. Patches to address the vulnerabilities are available in the latest source code – but are incomplete and have not been officially released, we're told.

Canonical to Offer Snappy Ubuntu 16 Images for Raspberry Pi 2, DragonBoard 410c

As you may know (or not), the Ubuntu Online Summit for Ubuntu 16.10 (Yakkety Yak) is taking place these days, between May 3 and May 5, on the Ubuntu On Air channel, where the Ubuntu devs are laying down plans for the future. We've already reported the other day that the next major release of the popular Linux kernel-based operating system, Ubuntu 16.10, which has been dubbed by Canonical and Ubuntu founder Mark Shuttleworth as Yakkety Yak, won't ship with the long-anticipated Unity 8 desktop interface as the default session. Read more

Beautiful Simplicity Linux 16.04 OS Arrives, Based on LXPup and the LXDE Desktop

The guys over at Simplicity Linux, a simple and beautiful GNU/Linux desktop-oriented operating system, have had the great pleasure of announcing the release of Simplicity Linux 16.04. Simplicity Linux 16.04 is distributed in three main editions, namely Desktop, X, and Mini. The distribution has been in development for the past three months, since February, when it was initially released as Simplicity Linux 16.01. Read more