Slashdot Mirror
Attack Targets LinkedIn Users With Fake Contact Requests
wiredmikey writes "On Monday morning, cybercriminals began sending massive volumes of spam email messages targeting LinkedIn users. Starting at approximately 10am GMT, users of the popular business-focused social networking site began receiving emails with a fake contact request containing a malicious link. According to Cisco Security Intelligence, these messages accounted for as much as 24% of all spam sent within a 15-minute interval today. If users click, they are taken to a web page that says 'PLEASE WAITING.... 4 SECONDS..' and then redirected to Google, appearing as if nothing has happened. During those four seconds, the site attempted to infect the victim's PC with the ZeuS Malware via a 'drive-by download' – something that requires little or no user interaction to infect a system."
NoScript is an absolute must have for anyone who knows what they are doing.
However, for the tech luddites it can *really* mess things up for them. The solution of course is to have the non-techy always browse at absolute minimum permissions so at least some of the damage can be mitigated when IE engages in its hopelessly condom free visits to the porn sites.
I wonder if it has a 'stop most bad things' type of stuff that some web and google click preventers have?
People in cars cause accidents....accidents in cars cause people
we just don't visit shitty sites in the first place
Really? You never click on URLs with non-obvious destinations? And even if you don't, are you sure that no site you visit will ever have a security hole allowing people to post arbitrary HTML?
You're not nearly as safe as you think you are.
Exactly. I might be tempted to waste my money if I did.
They are potentially harder to ignore.
Or you could grow a spine. Or a brain. Or perhaps some common sense, if such a thing were possible.
Any of these will help much better with your involuntary spending disorder.
Slashdot social media options: AIM, ICQ, Yahoo, Jabber and Mobile Text. Why no MySpace?
No, it's how your brain is going to work. If you have a page full of technology information then it is easy to subconsciously filter out the "mom discovers teeth whitening magic". But if you have a page full of technology information then you have to think twice about the "article on Xyzzy's Security awareness programme."
Desiring targeted ads is just a way of admitting that you are lazy, that you want the person who pays the most money to take your money rather than the one offering the best service, and that you are prepared to do your part in the erosion of privacy for a modicum of convenience. The only relief is that the ad you click on is ultimately paid for by you, the consumer, when you pay for the sponsors' service.