So far, we have seen many fake pages of sites like PayPal, eBay etc. which were used for phishing purposes. Now, here are some Google-like sites - www.google-find-it.com and www.qooqqle.com - which offer fake/irrelevant search results.
Here's a screenshot of www.google-find-it.com: read more »
I followed a link back to the site of Dave Naylor where he talks about Youtube who reveals FTP login credentials. My first impression was: Wow! cool find and excellent Google dork! I really rolled over the floor laughing just now. So yet again, and I cannot say this enough: never send the referrer!Try it out: http://www.google.com/search?q=site%3Ayoutube.com+%22clicks+from+ftp+%40%22
Gromozon is a new rootkit in the block. It installs a spyware called LinkOptimizer, giving the rootkit power to the spyware. Gromozon is a user mode rootkit and uses the AppInit_DLLs Registry key to load its DLL into memory. Moreover it hides this Registry key and hence it can not be viewed by "normal" tools like Regedit or HijackThis. Along with this, it also uses a host of other techniques like - randomly named DLLs, using Windows reserved names, hiding as ADS in NTFS systems etc. The DLL registered in the AppInit_DLLs key is responsible for the rootkit like behavior of Gromozon. read more »
Get SecGeeks Feeds in your email:
add me on gtalk: secg33k@gmail.com
