Beware of 419 scam emails delivered via CNNís "Email This" feature
Posted on 19 September 2013.
Email spammers often try to take advantage of current news and to impersonate legitimate news sites (usually CNN) in order to bypass spam filters and convince recipients to click on a malicious link or open a malicious attachment.

In a recently spotted spam run, 419 advance fee scammers have taken this approach to another level: they are misusing CNN.com's ďEmail ThisĒ feature.

As an added bonus, they are tying the request (made allegedly by the "financial minister of Syria") with a legitimate article about the volatile situation in that country:


To do this is easy as inserting the email of the victim, the email of the sender, copy-paste the scammy text into the appropriate form, and solve the CAPTCHA:


Perhaps they even managed to get their hands on a tool that fills out part or all of these fields automatically.

"This isnít the first time weíve seen them abusing a legitimate Web siteís 'Email This' feature," says Webroot's Dancho Danchev.

"Followed by the most recent abuse of Google Calendar, weíve also observed 419-ers abusing legitimate Web sites back in 2009 (Dilbert.com and NYTimes.com), and we believe weíll continue seeing such type of abuse, taking into consideration the fact that 419-ers are constantly seeking for new and pragmatic ways to bypass anti-spam filters."









Spotlight

USBdriveby: Compromising computers with a $20 microcontroller

Posted on 19 December 2014.  |  Security researcher Samy Kamkar has devised a fast and easy way to compromise an unlocked computer and open a backdoor on it: a simple and cheap ($20) pre-programmed Teensy microcontroller.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  
DON'T
MISS

Fri, Dec 19th
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //