No-Click Phishing On The Way

An anonymous reader writes "MessageLabs has discovered a pretty nasty - though fairly crude - phishing scam which doesn't even require recipients to click on a link in order to hand over personal data. Simply opening the email is enough to activate a script which 'lies in wait for its victim' according to one report. The script rewrites the host files of the machine and directs users to a fake web page the next time they legitimately attempt to access an online banking page. ... However, this will only affect users who have Windows Scripting Host enabled and certain ActiveX controls, according to MessageLabs."

Comments

Law enforcement?

[DogDude]

I find it hard to believe that our gov't is willing to spend $200 Billion to bomb the living fuck out of a country for no good reason, but can't get their shit together enough to start arresting people for the avalanche of fraud online.