tabnapping, latest phishing scam
in [Freeware]
|
Prev: alt.comp.freeware links at Mon Jul 12 21:20:01 2010
Next: MultiBootISOs Boots Multiple Operating Systems from a USB Drive
From: jak bute 82.5.94.219 on 12 Jul 2010 09:11 Uh. If I ...uh ...close all my unused browser tabs ...uh ...doesn't that mean that ...uh ...browsers with tabs are a security risk? Should I ...uh ...go back to ...uh... an early version of Opera? uh uh. Something by Wagner might be nice. uh ...just asking ...uh. -jak bute- beware phishing wrote: >According to Scroogle, the recent malware visit they are suffering from >may be caused by "tabnapping": http://www.scroogle.org/botnote.html >(see latest footnote). >Even if it's not the case for Scroogle, tabnapping is best avoided. > >-lots of links about tabnapping here: >https://ssl.scroogle.org/cgi-bin/nbbwssl.cgi?Gw=tabnapping > >-more here: >http://www.darknet.org.uk/2010/07/tabnapping-attack-on-the-increase/ >http://preview.xrl.in/5tjn (Computerworld) > >*The solution is to always close unused browser tabs when not in use* >to prevent a tab being hijacked, especially if the tab is to a site >where you log on (online banking, Facebook, webmail accounts etc etc >etc). -- Franklin Stubbings-Internet Terrorist coming to you with socks from the super-secret IP Address <82.5.94.219>
From: beware phishing on 13 Jul 2010 16:13
beware phishing wrote: >According to Scroogle, the recent malware visit they are suffering from >may be caused by "tabnapping": http://www.scroogle.org/botnote.html >(see latest footnote). >Even if it's not the case for Scroogle, tabnapping is best avoided. > >-lots of links about tabnapping here: >https://ssl.scroogle.org/cgi-bin/nbbwssl.cgi?Gw=tabnapping > >-more here: >http://www.darknet.org.uk/2010/07/tabnapping-attack-on-the-increase/ >http://preview.xrl.in/5tjn (Computerworld) > >*The solution is to always close unused browser tabs when not in use* >to prevent a tab being hijacked, especially if the tab is to a site >where you log on (online banking, Facebook, webmail accounts etc etc) There is a Firefox extension which highlights the Top Level Domain in the address bar in a user-defined color to make it more visible to the user which site he is connected to. This can help prevent a user entering logon details in a tab browser which has been hijacked by scam artists while its lying idle. Details here: <http://malektips.com/locationbar2-domain-subdomain-url-gray.html> Link to the actual extension: <https://addons.mozilla.org/en-US/firefox/addon/4014> I can confirm this FF extension works just fine. |