Thursday, March 31, 2011

Scam Email - Pretends to be Adobe Upgrade Offer, Steals Credit Card Information

There's an email going around purporting to be from Adobe Systems that is in fact a phishing scam. The URLs in the email have "adobe" in them, but are not actual Adobe Systems domains.

Once you click on the link you are taken to a site that will ask for personal information, including your credit card.

As always, my advice is that if you get an email with an offer that interests you, either go to the company's website on your own (without using links in the email) or call the company directly to verify that the email is legitimate.

Tuesday, March 29, 2011

Hacker Group Discloses Vulnerability on McAfee Webstite

Here's an interesting story, over the weekend the YGN Ethical Hacker Group publicly disclosed a vulnerability on the mcafee.com website. It's nothing to panic about if you are a customer of Network Associates or McAfee, however it is interesting that it is taking so long for McAfee to address the issue.

YGN originally reported the discovery to McAfee almost two months ago, and as of Sunday it had not been fully addressed. The vulnerability could be exploited to "spoof" the mcafee.com domain.

If you use McAfee products, I don't recommend changing anything, just be careful and don't click on any links you receive that purport to go to the mcafee.com website.

There's a good article on this on CNET. Interesting reading if you have some time.

Wednesday, March 23, 2011

Comodo Certificate Hack - Microsoft Releases Patch

Last week one of the root certificate authorities, Comodo, issued some fraudulent certificates for some very high-traffic and popular domains (including google.com, live.com, and yahoo.com.) The risk is that someone will use these certificates for nefarious purposes.

Microsoft deemed the risk bad enough that they released an out-of-band patch that will revoke the bad certificates. You can download this patch here. I highly recommend that if you are on a Windows machine you apply this patch.

More information about this problem can be read here. A good article about this story is available on cNet.