Fake LinkedIn emails serve malware
Posted on 19.03.2012
Emails purportedly coming from business-related social network LinkedIn have been hitting inboxes in the last couple of days, ostensibly reminding recipients of invitations they received:


Unfortunately, the offered links take the users to a website hosting the BlackHole exploit kit, and if successful in taking advantage of existing vulnerabilities, it installs the well-known credential-stealing Cridex Trojan on the victims' machine.

"This particular run shares the IP address 41(dot)64(dot)21(dot)71 with various BBB and Intuit spam runs from recent weeks," points out GFI's Chris Boyd.

As always, users are advised not to click on links found in unsolicited emails, but to check their various accounts by visiting the websites via their own bookmarks of by typing the correct URL into their browser's address bar.







Spotlight

Most popular Android apps open users to MITM attacks

Posted on 21 August 2014.  |  An analysis of the 1,000 most popular free Android apps from the Google Play store has revealed a depressing fact: most of them sport an SSL/TLS vulnerability that can be misused for executing MITM attacks, and occasionally additional ones, as well.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  

DON'T
MISS

Thu, Aug 21st
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //