Emposha » Security

A New Type of Phishing Attack

emposha — Tue, 25 May 2010 06:38:33 +0000

The web is a generative and wild place. Sometimes I think I missed my calling; being devious is so much fun. Too bad my parents brought me up with scruples.

Most phishing attacks depend on an original deception. If you detect that you are at the wrong URL, or that something is amiss on a page, the chase is up. You’ve escaped the attackers. In fact, the time that wary people are most wary is exactly when they first navigate to a site. more>>

IPhone SMS Attack Unleashed

emposha — Thu, 30 Jul 2009 23:20:01 +0000

The bug was discovered by noted iPhone hacker Charlie Miller, who first talked about the issue at the SyScan conference in Singapore. At the time, he said he’d discovered a way to crash the iPhone via SMS, and that he thought that the crash could ultimately lead to working attack code.

But still the experts say that “iPhone Security: Latest Hack Not So Scary. So time will show

Mozilla Firefox 3.5 Memory Corruption Vulnerability

emposha — Tue, 14 Jul 2009 19:35:41 +0000

SBerry has discovered a vulnerability in Mozilla Firefox, which can be exploited by malicious people to compromise a user’s system.

The vulnerability is caused due to an error when processing JavaScript code handling e.g. “font” HTML tags and can be exploited to cause a memory corruption.

Successful exploitation allows execution of arbitrary code.

The vulnerability is confirmed in version 3.5. Other versions may also be affected.

Source: http://secunia.com/advisories/35798/

Beware of two critical vulnerabilities in Firefox 3

emposha — Sat, 28 Mar 2009 21:20:41 +0000

The exploit was released Wednesday online. It attacks a vulnerability present on Windows, Mac and Linux versions of the browser and could be used to surreptitiously execute malware on the machines of users who browse booby-trapped websites.