Jump to content

Yet Another Phishing Trip


Scarecrow Man
 Share

Recommended Posts

Antivirus firms are warning of a truly nasty phishing scheme filling inboxes in South America. Unlike the more familiar emails which attempt to trick people into filling out their bank log-in information on a scammer's site, this new virus doesn't require the victim to so much as open the email.

If the targeted computer has not been updated with security patches, the virus will exploit an ActiveX control to run a script. The script will rewrite the computer's HOSTS file, causing all connections to certain Brazilian banks to be redirected to the scammer's site. Unfortunately, since Outlook and Outlook Express enable the preview pane by default, all you have to do is click the email for it to launch the script. You don't even have to open it. Just attempting to delete the email may cause it to be activated.

It probably won't be long before this virus begins to target European and North American banks. I strongly advise disabling the preview pane in your email program as well as having it use the restricted zone settings.

An alternative would be to switch to a different email program altogether. I have been using Thunderbird for a long time and I love it. It has its quirks and annoyances but I prefer it to Outlook Express. It has the best spam filter I have ever seen.

If you cannot switch to another program, a filtering program such as Benign might be the answer. Filtered through Benign, this virus and others like it would be unable to execute.

Most importantly, make sure you have installed every available security update for your computer.

Source

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue. Privacy Policy