Skip to Content

AOL Tech

scam posts

Web, Social Networking

Spam Spreading on Twitter via Direct Messages -- Again


Not to sound like a broken record, but there's a lot of spam on Twitter. Let us illustrate. If the Internet were high school, Twitter would be voted "Most Likely to be Spammed." So, it was no surprise when Mashable reported that a number of users have recently been flooded with spam via direct messages. A quick search on the micro-blogging site proves that people are pretty upset about it, too. There's still not a lot of details on the scam, but you should be on the lookout for any suspicious messages from people you don't recognize. For example, if you receive a message from a half-naked girl asking you about a quiz, don't click the link! We know that sounds obvious, but apparently some people are falling for the scam. After all, it takes hacked accounts to continue spreading the spam.

So what do you do if you become a victim? First, change your password right away. While Mashable has reported this wave of spam to Twitter, it's probably not a bad idea for you to report it to the site, too. Last, don't feel ashamed if your account gets hacked. Remember, this isn't the first time the Twitterverse has been plagued by spam, and we're sure it won't be the last, either. [From: Mashable]

Web, Social Networking

Twitter Hit by Another Direct Message Phishing Scam

It seems like every day that a new phishing scam hits Twitter, and Wednesday was no different. According to CNET News, Twitter warned its users to be on the lookout for a phishing scam that attacks via direct messages. "[If] you've received a strange (direct message), and it takes you to a Twitter log-in page, don't do it!," Twitter warned in a post.

Of course, this isn't the first scam that disguises itself in a direct message. But this message attempts to fool you by posing as a dear friend. According to Sophos, the message reads: "hi. this you on here?" and is followed by a link to the phishing site. The link, if clicked, redirects you to a fake Twitter log-in page, where the phishers intend to steal your user name and password. If you enter both, you'll see a faux over-capacity page that's supposed to make the scam seem more real. When Sophos logged in to the false page, it was directed to the over-capacity page, and then to a blog by someone called NetMeg99. It's unclear as to whether or not that blog is part of the scam, too.

Read more →

Web, Social Networking

Fake Facebook 'Password Reset' E-Mails Hiding Malware


Facebook's good name is being leveraged for yet another brutal round of malware dispersal. The trojan, Bredolab, is being distributed via e-mails with the subject line "Facebook Password Reset Confirmation". The message generally reads:
Hey (insert username),
Because of the measures taken to provide safety to our clients, your password has been changed.
You can find your new password in attached document.

Thanks,
The Facebook Team
The attachment, a .zip file, will have the name "Facebook_Password_" followed by a short sequence of random numbers and letters. Inside, there is an identically named file, except that it's an .exe (or executable) file instead of an archive. Run that file and you'll be kick-starting a torrent of malware downloads, including a fake anti-spyware program. Bredolab is able to hide by injecting its own code into existing Windows components, and by automatically shutting down if it detects another program (such as an anti-virus package) investigating its activities.

Read more →

Web

FDA Warns of Faux Swine Flu Products on the Web


Back a few months ago, swine flu scams and misinformation plagued Twitter accounts. While the hysteria surrounding the disease has calmed somewhat, there are still foul folks out there trying to make a quick buck by capitalizing on fear. According to Newsvine, the Food and Drug Administration (FDA) has discovered and warned creators of more than 140 products that falsely claim to combat H1N1, or swine flu, as it's more commonly called.

These items include sprays that supposedly sterilize surfaces and even the air, dietary supplements that say they boost the immune system, and most disturbing, fake Tamiflu -- one of two drugs recommended for treating swine flu, and also requires a prescription. FDA sites say that new fraudulent Web sites crop up every day, while vaccine shipments continue to be delayed and Tamiflu is prescribed only to the sickest patients.

Read more →

Web, Social Networking

Twitter Lets Users Fight Back as Phishing Scams Spread

As Phishing Scams Proliferate Twitter Fights Back
The pool of phishing scams on Twitter is seemingly bottomless. Every time we turn around, there is a new one popping up, or an old one reemerging, or some other unfortunate development that sends us rushing to the presses only to give users the same advice over and over again: Don't click on that link.

The most recent scam comes in the form of a direct message declaring "you're on this vid!" followed by a link. Click the link and you'll be led to a page that looks an awful lot like the login page for Twitter. But don't be fooled. Check that address bar and you'll quickly see that you are not, in fact, on Twitter. If you make the mistake of trying to log into the fake page, your account will be hijacked and used to send the same message to all of your followers.

Read more →

Web

FBI Busts Up Worldwide Phishing Ring

FBI Indicts 100 in Identity Theft CaseThe FBI has busted up a major spam and bank fraud ring that spanned from coast to coast, and even had ties to Egypt. Fifty-three suspects in Los Angeles, Las Vegas, and Charlotte, North Carolina have been indicted, with dozens of them already in police custody. An additional 47 Egyptian suspects have been named, and authorities there are working to apprehend them now.

The scam centered around phishing spam e-mails, in which the crooks posed as representatives from a bank and asked the victims to update their personal information by following a link. If targets followed the link, they were taken to a bogus banking site that harvested their personal and banking account information. The 100 criminals, working in concert, immediately withdrew money from their victims' accounts, transferring their spoils to fraudulent accounts.

Read more →

Web

After Phishing Attempt, Wife Bans FBI Head From Online Banking

Don't feel bad if you've recently fallen for an e-mail scam. They're not always easy to identify. Just ask FBI Director Robert Mueller. Mueller received an e-mail from his bank asking him to verify some account information. After entering said information, Mueller says he realized that the e-mail was part of a phishing scam. According to CNET News, he immediately changed his passwords and breathed a sigh of relief.

The FBI chief avoided the wrath of phishers, but not his wife (video after the break). She nixed online banking in their household and said, "It is our money. No more Internet banking for you!" During a speech Wednesday in California, Mueller said that he'd tried to explain to his wife, promising that he'd learned his lesson and calling the near slip-up a "teachable moment." He was taught a lesson, alright, and one he should have learned long ago, at that. "If Mama ain't happy, ain't nobody happy." [From: CNET News]

Read more →

Web, Social Networking

FBI Issues Warning Over Friendly Facebook Scams

The disturbing evolution of the 419 scam from e-mails from Nigerian princes to hijacked Facebook accounts is raising serious alarms within law enforcement circles. We originally reported this new tactic in January, but users still haven't caught on. Just last month a Missouri woman was taken for $4,000 by a scammer posing as a friend on Facebook, and the 'Today Show' recently aired a segment about Sister Erma, a nun, whose Facebook was hijacked and used to dupe her friend Debbie Peterson in to handing over $3,000.

The scam starts with spam messages that contain malcious links. People careless enough to click on these links, like the previously mentioned CooooL Video and FBAction messages, are either led to fake Facebook log in pages that steal your e-mail and password, or are infected with a keylogger that captures all of your usernames and passwords across several different sites. Once the scammers have collected this information they begin sending messages to friends and family of the hijacked account claiming to be in trouble -- in most cases stuck traveling abroad. The messages claim that the person has lost his or her wallet or been mugged and needs a loan (of several thousand dollars) to pay off hotel bills.

Read more →

Web, Social Networking

Facebook Hit by Fake Profile Scam

Facebook has been beset by its share of scams, hacks, and attacks. The latest breach of security though is particularly worrisome, with fake profiles containing a link to a supposed home video flooding the site. If you click through, you'll be greeted with a piece of malware posing as an anti-virus program that tries to trick you into handing over credit card information to buy fake security software.

What makes this scam unique is that rather than using hijacked accounts, the malware is spreading through software-generated profiles. The existence of these fake accounts, completely identical outside of the name, indicates that hackers have figured out a way to defeat the Captcha system that is meant to keep bots out.

Read more →

Web

Malware Robs Your Bank Account and Then Covers Its Tracks

You might want to keep a closer eye on those bank statements. Hackers have developed a sophisticated and scary program that quickly alters online bank statements in order to hide exactly how much money cyber-crooks have been siphoning from the account.

According to Wired, the malware, called URLZone, infects a computer when the user visits a compromised site, or a site set up by hackers. Then, the program steals the user's bank account log-in information and begins draining funds that it then sends to other designated accounts. However, the victim doesn't realize the money is missing because the program rewrites the text in the html code. So, when the browser displays the page, it looks like either no money has been stolen or just a small amount has been transferred.

Read more →

Web, Social Networking

Twitter an Easy Target for Scammers, Security Experts Say

Twitter scam stories are pretty easy to ignore these days; after all, they've become commonplace. Unsurprisingly, security experts say this trend isn't going away anytime soon, especially with the holidays just around the corner. According to USA Today, attacks that targeted trending topics and scams that were spread via direct messages swamped the site last week.

The scams continue to plague the micro-blogging site because it's simple to create a fairly anonymous account, tweets instantly appear all across the Web, and links frequently appear in shortened form, making it hard to know the link's true destination. Gerry Egan, director of Symantec's security response team, says it's not Twitter's fault. "This is simply another case where malicious attackers are using neutral technology as a means to their deceptive ends," he told USA Today.

Read more →

Web

Hackers Steal Half a Million Dollars Using Direct Deposit

We always say that the best defense against cyber-security threats is a little due diligence. If you watch out for warning signs, most major breaches are avoidable. That advice applies not only to individual PC users, but to businesses, as well, and to banks, most importantly. Unfortunately, just like regular users, many banks and businesses fail to carefully guard their systems.

Hackers used this lack of careful observation to their advantage when they withdrew $588,000 in one week from the account of a small, family-owned, construction company called Patco. According to the New York Times, the cash was withdrawn from an account with People's United Bank, or Ocean Bank of Delaware, that was reserved for payroll purposes. The hackers exploited the ACH (Automated Clearing House) Network, which is used for direct deposits, to make faulty payments to accounts, causing the bank to draw on Patco's line of credit to cover the $223,237 in overdrafts.

Read more →

Web, Social Networking

New Twitter Worm Hijacks Your Account via Direct Message

Another day, another Twitter worm. The latest worm (or Tworm, if you please) to hit the micro-blogging site is even sneakier and more dangerous than others we've warned you about. That's because it's being spread via direct messages (DM) from users you know, not random spam accounts.

Let's keep it simple. If you receive a DM with the link pictured above, don't click on it. Delete the message immediately. According to Mashable, this link will direct you to a fake (but apparently pretty believable) log-in page, where, if you enter your account information, the worm will infect your account and set about infecting others by sending the link. If you already clicked on the link and your account has been hacked, simply change your password and report the problem to Twitter. Mashable says that Twitter is aware of and is handling the problem. As usual, avoid any suspicious links, even if they're from friends. [From: Mashable]

Computers, Web

'Chat-in-the-Middle' Phishing Scam Tricks You With Instant Messages

The RSA FraudAction Research Lab has uncovered a sophisticated and tricky new phishing scheme. Dubbed the 'Chat-in-the-Middle' scam, the new attack targets the online customers of a specific U.S. financial institution and begins, as many scams do, as an apparently innocent log-in screen.

The new twist, though, appears after the marks have entered their log-in information. Typically, once phishing victims enter their ID and password, they're redirected to a dummy Web site created by the grifters. The Chat-in-the-Middle scheme, though, incorporates a fake real-time support chat window (even if you don't have an IM service installed), through which the scammers try to dupe their targets into divulging pertinent personal information like names, addresses, and phone numbers.

Read more →

Computers, Web

Short-Lived Spam Blast Scams Plaguing E-Mail Accounts

A new IRS-inspired e-mail phishing scam emerged last week and hit accounts across the nation, USA Today reports. Unlike previous IRS-related scams, which enticed people with promises of free stimulus money, last week's spam blast attempted to ensnare targets with scare tactics.

The e-mail message, which appeared to be from the IRS, alerted people to the supposed fact that earnings had been under-reported and, in order to resolve the matter, the intended target needed to download a special government form. With the download, though, the perps could take over their mark's computer and continue to distribute the message to everyone in the victim's contact list. The compromised computers could then become part of a botnet (a network of infected computers that scammers remotely control) in order to continue blasting spam and stealing personal information.

Read more →

Switched Video

Follow Switched on Twitter

Deals of the Day

Latest Reviews from CNET.com

CNET provides the latest tech news, unbiased reviews, videos, podcasts, software, and downloads, making tech products easy to find, understand and use.

Top Product Reviews

  • Home Audio Reviews

    9.0 out of 10

    Definitive Technology BPX
    Works great with Dolby Pro Logic and Dolby Digital. Full Review

    9.0 out of 10

    Denon AVR-4306 (black)
    Incredibly well-featured 7.1-channel receiver; excellent sound quality; three HDMI inputs; converts analog video to HDMI output; upconverts analog video to 720p/1080i HD resolution; iPod and USB MP3 player connectivity; Internet radio and MP3/WMA streaming audio via built-in Ethernet port; XM Satellite Radio compatible; touch-screen remote; multizone, multisource operation; browser-based control via home network; accurate autocalibration routine. Full Review

    8.8 out of 10

    KEF KHT3005 (black)
    The KEF KHT-3005 is one compact, beautifully designed speaker package with solid aluminum satellites that feature unique driver technology to produce incredible clarity. Meanwhile, the equally astounding dual 10-inch, 250-watt powered subwoofer delivers ultradeep bass. Full Review

  • Cell Phone Reviews

    8.7 out of 10

    SignalBoost Mobile Professional Amplifier Kit
    The Mobile Professional Amplifier delivers a powerful signal boost to your cell phone. Also, it offers a compact design and easy setup. Full Review

    8.6 out of 10

    Wi-Ex zBoost YX510-PCS-CEL cell phone signal extender
    The Wi-Ex zBoost YX510-PCS-CEL significantly boosts your cell phone reception and is easy to operate. Also, it uses a wireless connection to your phone. Full Review

    8.3 out of 10

    LG VX6000 (Verizon Wireless)
    Compact and stylish; impressive battery life; solid audio quality; sharp color screen; built-in camera; USB ready; affordable. Full Review

  • Digital Camera Reviews

    9.3 out of 10

    Canon EOS 1D Mark III
    Extremely fast, 10-megapixel continuous shooting; very low noise; highly customizable; well-designed body with weather sealing; 3-inch LCD; abundant optional accessories. Full Review

    9.3 out of 10

    Nikon D3 (body only)
    Full-frame sensor; well designed, pro-level weather-sealed body; very low noise, even at extremely high ISOs; fast. Full Review

    9.0 out of 10

    Canon EOS-1Ds Mark III
    Very low noise, high quality images; 21.1 megapixels; live view shooting; pro-level build-quality and performance. Full Review

  • Desktop Reviews

    8.9 out of 10

    Velocity Micro Edge Z30 (Intel Core i7)
    Best value among midrange gaming PCs; Velocity Micro's consistently high build quality; compact case makes few sacrifices; second graphics card slot previously uncommon at this price. Full Review

    8.5 out of 10

    Apple iMac (24-inch, 2.8GHz)
    A minor specification update results in some significant performance gains; graphics upgrade an option on this 24-inch model; sleek, polished design didn't receive an update, but we won't start clamoring for a new design until the current one is at least 12 months old. Full Review

Featured Galleries

Nissan Land Glider
Vintage Keyboards
Retro Computer Logos
Vintage Computer Festival
Motorola CLIQ
iPod touch
iTunes 9
Video iPod Nano
The Beatles: Rock Band

 

Switched Desktop

Get the New Switched Desktop

Latest tech news, Switched mail, and more.

AOL Tech Network

Resources

Autoblog

Daily Finance

Download Squad

Engadget

Joystiq

Urlesque

Fanhouse Main

WalletPop

Gadling