Spam to exploit?
One of our team members received an unsolicited but interesting email recently confirming his new account at a certain website, and containing the login username and password. The email was addressed to him personally using his full name so undoubtedly his details were mined from somewhere on the Internet.
Using a secure computer he investigated by going first to the root directory of the domain in the email, and found that it appeared to be a legitimate site. However upon then moving to the directory which was part of the login URL contained in the email, he discovered exploit code targeting the Microsoft Windows Media Player Plugin Buffer Overflow Vulnerability (BID 16644).
[ Read more ]
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.