Bits from Bill

Technology thoughts leaking from the brain of "Bill Pytlovany"

Monday, November 17, 2008

Photo From Your IPAddress Has Been Uploaded

It starts with an innocent message that you think comes from one of your Facebook friends. Below is a classic example of social engineering designed to steal your password.  It didn’t take a brilliant hacker to come up with this scam. It just took someone with evil thoughts and no life.


Facebook message from NOT a friend


I noticed this message on a friends Facebook page this morning and my experience told me right away that something smelled funny. When I cautiously went to the web page listed via my test machine it all become clear.


Bogus error message
First, they try and scare you.


 


Here's where you close your browser with Ctrl-Alt -Del
It might seems safe because they only want your Email right?


DO NOT ENTER YOUR PASSWORD!
If you entered your password, it’s time to go to Facebook
and other sites listed before and change it now.


There's more


Next Step


Here's where they finally get you so they know which password you gave them.
Now, they want to know where to use your name and password.



Final Screen
And finally, you get the final let down.


If you fell for this, you’re not alone.  Like most social engineering scams they use fear to throw you off.


 


 


 

Labels: , ,

Share on Facebook


Wednesday, February 06, 2008

Beware the Valentines Day Storm

No, I’m not talking about your spouses reaction if you forget a gift on Thursday, February 14th. Like many past holidays the well known “Storm” Trojan is using the upcoming theme of love to trick users into clicking on malicious sites.

Typical Email subject lines that I’ve already looked into include:
  • Our Love is Free
  • Happy Valentines day
  • I Would Dream
  • Hugging My Pillow
  • Inside My Heart
  • Sending You My Love
  • The Dance of Love
  • Eternal Love
  • A Rose for my Love
You get the idea right? As always, I recommend against clicking on links you’ve received in E-mails. It’s also important that you download new Windows security updates in a timely manner. Most Trojans like Storm depend on security holes which haven’t yet been patched.

Just to be sure it’s clear, this kind of Trojan is a bad thing.
Many of you may think of a Trojan as something that protects you against disease and untimely new family members. A computer Trojan is analogous to the legend of the large wooden horse used by the Trojan army to conquer the city of Troy.


Labels: , , ,

Share on Facebook