<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>TechPunk &#187; ClickJacking</title>
	<atom:link href="http://www.techpunk.net/category/security/clickjacking/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.techpunk.net</link>
	<description>Tech Opinions,  Reviews and News  - Fighting IT Anarchy</description>
	<lastBuildDate>Sun, 24 Jul 2011 02:42:47 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3</generator>
		<item>
		<title>Haiti Earthquake Link Manipulation</title>
		<link>http://www.techpunk.net/2010/01/18/haiti-earthquake-link-manipulation/</link>
		<comments>http://www.techpunk.net/2010/01/18/haiti-earthquake-link-manipulation/#comments</comments>
		<pubDate>Mon, 18 Jan 2010 16:03:04 +0000</pubDate>
		<dc:creator>TechPunk</dc:creator>
				<category><![CDATA[ClickJacking]]></category>
		<category><![CDATA[Exploits]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Operation Aurora]]></category>

		<guid isPermaLink="false">http://www.techpunk.net/?p=23</guid>
		<description><![CDATA[Craig Schmugar at McAfee Lab Blog went looking for Operation Aurora exploits from the earthquake crisis over the weekend and found something interesting. He shows just how easy it is to use the tragedy in Haiti to commit a little clickjacking:]]></description>
			<content:encoded><![CDATA[<p><a title="Craig Schmugar - McAfee Lab Blog" href="http://www.avertlabs.com/research/blog/index.php/2010/01/16/went-looking-for-ie-exploits-in-haiti-found-something-else/" target="_blank">Craig Schmugar</a> at <a title="McAfee Labs Blog" href="http://www.avertlabs.com/research/blog/index.php" target="_blank">McAfee Lab Blog</a> went looking for Operation Aurora exploits from the earthquake crisis over the weekend and found something interesting. He shows just how easy it is to use the tragedy in Haiti to commit a little clickjacking:</p>
<blockquote><p>I figured a good place to look for attackers is by Googling the most popular search terms of the day.  It’s been a while since <a href="http://www.avertlabs.com/research/blog/index.php/2009/09/17/search-engine-manipulation-evolves-as-trust-abuse-grows/">I last researched search engine manipulation</a>.  As expected it was quite easy to find high ranking search results for Haiti-related terms; the vast majority led to rogue antivirus malicious sites, similar to <a href="http://www.avertlabs.com/research/blog/index.php/2009/09/09/searching-for-malware-data-likely-to-lead-to-more-malware/">earlier blogs</a>.  I did not come across any sites exploiting the recent zero-day IE vulnerability.  However, I did come across plenty of <a href="http://www.avertlabs.com/research/blog/index.php/2008/10/15/clickjacking/">Clickjacking</a>, but not just Clickjacking, they have incorporated Google Trends, Digg.com, Blackhat SEO, and Clickfraud as well.</p></blockquote>
<p>Go read the whole thing to see how easy it is to get yourself duped.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.techpunk.net/2010/01/18/haiti-earthquake-link-manipulation/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
	</channel>
</rss>

