YouTube Fake Creator (You Tube Fake part 2)

Once a user visits the webpage, a fake error message could be displayed saying a video cannot be played as a required codec is missing. The user is then redirected to the malicious website from where the malware is installed.

Read about the thread on McAfeeSecurity

Fake YouTube Infects with Trojans

Seeing one's favorite celebrity in an exclusive video might be temping enough for many people to click on a link that promises to show them precisely this, especially if we're talking a link on a trusted website. Even more, if that website happens to be YouTube, then 90% of the people receiving it will most surely click it. However, security experts warn us that we must be cautious even when we’re dealing with a video allegedly hosted by YouTube.

This happens because, during these past days, hijackers have used the name of Google's property to launch Trojan attacks. By using a legitimate website host that has been corrupted, and applying to it YouTube identification marks, such as the logo and the page layout, hackers have managed to attack unwary victims.

Researchers at the security company Sophos have posted on the official blog the names of some of the files that presumably were YouTube videos. It seems like attackers didn't even bother to manually change the names of the celebrities to match the context they were used in, thus the “videos” contained totally unusual situations, like, for instance, actresses Angelina Jolie, Monica Bellucci or Meg Ryan supposedly singing. Others, more vague, promised “shocking mp3s,” or R-rated clips with the same celebrities.

“The good news is that we’re still detecting this malware as Troj/Injects-CR. But it is scary to think about how many unprotected users would fall for this trick…” says Dmitry Samosseiko from the SophosLabs Canada, assuring users that, as long as they employ a security solution that can detect the trojan, the situation is under control.

The domain hosting the fake YouTube is also being used to distribute the same trojan, this time on pages that resemble the design of the Windows Media Player. In order to see a video, users are advised to download a codec, which is in fact a piece of malicious software. Experts warn that the media player is just a static picture and that no one should fall for the trick.

source:http://praveenkumarg.blogspot.com/

Fake GoogleTalk application

We're still trying to pin down exactly how new this is, but it seems someone has released a fake Google Talk application into the wild.

Compare the fake application on the left with the real thing on the right, and note the differences:



Immediately, we can see that the real thing has a rounded curve at the top - the fake is blocky, and looks like a regular Windows application box. There's an "Inbox" link at the top when you start up the fake application - there isn't a link like that when firing up Google Talk for the first time. The Username / Password box is much lower down on the fake application, and (again) the real "Sign In" button is curved on the real application. Finally, you'll see "Forgot your account / Don't have an account" on the genuine Google Talk program - not so on the fake.

Read how does it work here...

How To Get A Fake IP?

You can be anonymous all over the Net, but be aware of anonymous attackers :).

Fake iPods spotted in Spain

Fake Windows XP bought on eBay

"I've recently built a new PC and needed a copy of Windows XP Professional to load onto it. I found an advert on Gumtree for a copy of XP Pro OEM, exactly what I needed, so I emailed the seller who confirmed he had one available. I sent the cheque and waited for weeks for it to arrive; finally I became fed up with waiting and found a copy on eBay, the listing stated it was genuine (no less than 48 times) so I bid on and won it. The copy bought on eBay arrived within the week and the copy bought via the Gumtree adverts arrived several days after that."

Read the whole article written by the guy who bought this fake copy

Fake Google Page Rank

Crackers have done it again! Didn’t spare Google Pagerank. With fake Pagerank you can get a PR the toolbar displays on your site of your choice. This is good enough to fool an advertiser. You can find the steps how do it below{thanks to black hat seo){But I don’t recommend doing so}

1. Buy a domain{don’t experiment on established one}.

2. 301 Redirect the domain either in you .htaccess, PHP header (anything server side) to a page with the desired page rank. It’s better to redirect to something relevant. For example, if you are doing a mortgage site, redirect to a mortgage site.
for php the code is:
header(”HTTP/1.1 301 Moved Permanently”);
header(”location:http://www.seoblackhat.com”);
exit;
?>

3. Link to the page with the redirect from another of your sites that gets regularly spidered by Google. Since you use the Alexa Toolbar, you should have several sites that are spidered daily by google.

4. Wait for google update. Google Updates happen about every three months.

5.Now you use cloaking software that says:
if(ip is in list) (list of google IPs){
header(”HTTP/1.1 301 Moved Permanently”);
header(”location:http://www.seoblackhat.com”);
exit;}
else
{
header(’Content-Type: text/html; charset=ISO-8859-1′);
//Show your site
};
?>

But still I don’t recommend it as your site will not actually be indexed by Google as long as you are redirecting the Googlebots to your competitors site, so it’s really only good for link selling / trading.
If you don’t want to experiment, Seo dark team {why do they keep such names?}
Have already done so with their site having a PR of 10,9,8,7,6 {for different pages ofcourse}

source:http://webtalks.blogspot.com/2007/08/want-fake-google-pagerank.html

How to Spot a Virus Hoax Identifying Real Virus Warnings

Even if the source of a virus warning seems reliable, you'll still want to look for the red flags that signal a virus message is a fake before you pass it on to others. Senders of hoaxes want to panic you, so they'll play on your fears by threatening such things as the total annihilation of your hard drive. The more exclamation points (!!!) and WORDS IN ALL CAPITAL LETTERS that are in the message, the more likely it is that the warning is false.

Both real and fake virus warnings threaten the loss, corruption, or misuse of your data. Some may sound less realistic than others -- for example, chances are slim that any virus would send all of your personal financial files to the attention of the IRS. But virus programmers can be clever folks. So, how do you know for sure if a virus warning is fake?

Read about virus hoaxes here

Protect yourself from fake login pages

Using fake login pages is the easiest way to hack passwords. Identifying a fake login page is very easy but many people neglect to do some small checks before entering the login details and fall in the trap. I have seen a person paying 500$ for a fake login page of paypal. This proves that there are still people falling in this trap. This is just an example, there are many fake websites of banks, yahoomail, gmail,orkut,myspace etc …
This post is an attempt to show what a hacker does to hack your password using fake login pages and how to protect yourself from those fake logins.I will try to keep this post as simple as possible, there may be some technical details which you can safely skip.
Warning: I strongly advice you not to try this on anyone it may spoil your relation with the person on whom you are trying it and you may even end up behind the bars.

What goes on behind when you enter your login details in login form??

When you enter your login details in any login form and hit enter they are submitted to another page which reads these login details and checks the database if you entered the correct username and passowrd, if yes then you will be taken to your account else you will get an error page.

What an hacker does??

A hacker creates a fake page which looks exactly same as the original page and some how tricks you to enter your login details in that page. These login details are then submitted to a file.At this stage the hacker has two optionsHe can either store the login details on his server or he can directly get them mailed to his email id. All the above said things happen behind the scenes, you will have no clue of it. When you enter you login details for the first time your details are submitted to the hacker and you will be directed to a error page ( this is the original error page). When you enter ur login details again you will be logged in to your account. It’s quite common for us to enter the login details wrongly sometimes so you will not become suspicious when you get the error page.

How to identify fake login page traps ?

1. Never enter you login details in unknown sites.
2. Always type the address directly in to the browser.
3. Do not follows the links you get in mails and chatting even if they are from your friends
4. Always have a keen look in the address bar and verify if the address is correct. Check the screen shot below. Some people buy doamins which look simliar to the original site example: 0rkut for orkut, pay-pal for paypal,yahooo for yahoo. Some times you may over look these small differences and fall in trap.
5. Please do report to the hosting site or the original site owner when you find a fake login page.
6. If you feel like you entered your details in a fake login page change your password immediatley.

Fake Paypal email and Paypal website

Be aware of phishing sites!

"Look at this screen shot of the Paypal website… or more precisely a fake Paypal website. How clever is the thief? The website looks exactly the same as the authentic Paypal website except the URL.



In this case the URL is so much longer and has a folder called “paypal.com” in it. Luckily Firefox is smart to sense that this is a fake or the so called phishing website and warned me just in time before I tried to sign in. If I was foolish or careless to enter my real Paypal username and password, those people who operate the phishing sites will have access to my account and all the money from my checking account and credit cards. Think about it also make me sweat!"

source: kongtechnology

Man-in-the-Middle Attack

Also Known As:
Web Site Spoofing, Spoofed Web sites, Faked Web sites, Pharming


Description:
The phrase "Man-in-the-Middle Attack" is used to describe a computer attack during which the cyber criminal funnels communication between a consumer and a legitimate organization through a fake Web site. In these attacks, neither the consumer nor the organization is aware that the communication is being illegally monitored. The criminal is, in effect, in the middle of a transaction between the consumer and his or her bank, credit-card company, or retailer.

The man-in-the-middle server electronically “eavesdrops” on every keystroke, giving the criminal username, password, and account information. Criminals perpetrate this scam in a number of ways. They trick the consumer into clicking a link to the fake Web site in Phishing and Pharming email messages. They employ Spyware and other Malware that when loaded on the consumer’s computer redirects the Web browser to the fake site. The most technically competent manipulate the real Web site so that visitors are directed to the fake site.


How to Recognize This Threat:
Be extremely wary of any official sounding unsolicited email or text message that asks you to click on a link and log onto a Web site to clear up a major problem. Scare tactics are used to lure the unsuspecting into the Man-in-the-Middle trap.


What Should I Do:
Never click on a link or open an attachment in an unsolicited email or text message. Delete the email or message. If you are concerned, call the organization or open your Web browser and type in the address. If the site has changed since your last visit, be cautious. Maintain up-to-date anti-virus and anti-Spyware programs on your computer and install a firewall. These precautions will reduce the likelihood that a virus will redirect you to a criminal’s Web site. Also, look for the lock or key icon at the bottom of the browser when entering a site that purports to be secure.