TechPunk.net

Archive for the ‘Exploits’ Category

Craig Schmugar at McAfee Lab Blog went looking for Operation Aurora exploits from the earthquake crisis over the weekend and found something interesting. He shows just how easy it is to use the tragedy in Haiti to commit a little clickjacking:

I figured a good place to look for attackers is by Googling the most popular search terms of the day.  It’s been a while since I last researched search engine manipulation.  As expected it was quite easy to find high ranking search results for Haiti-related terms; the vast majority led to rogue antivirus malicious sites, similar to earlier blogs.  I did not come across any sites exploiting the recent zero-day IE vulnerability.  However, I did come across plenty of Clickjacking, but not just Clickjacking, they have incorporated Google Trends, Digg.com, Blackhat SEO, and Clickfraud as well.

Go read the whole thing to see how easy it is to get yourself duped.

Wired is reporting a sophisticated attack on Google and Adobe networks exploiting a vulnerability in Internet Explorer:

Google announced Tuesday that it had been the target of a “highly
sophisticated” and coordinated hack attack against its corporate
network. It said the hackers had stolen intellectual property and sought
access to the Gmail accounts of human rights activists. The attack had
originated from China, the company said.

Minutes later, Adobe acknowledged in a blog post that it discovered Jan.
2 that it also had been the target of a “sophisticated, coordinated
attack against corporate network systems managed by Adobe and other
companies.”