[Mag] Insecure Issue 33 -Feb 2012

Comments

Post a Comment

Để lại góp ý của bạn để blog của mình hoàn thiện hơn :))

Popular posts from this blog

[Test post] Toiphammaytinh.blogpsot.com

Image
Giao diện Toiphammaytinh với cải tiến của Blogspot :)). Xem chi tiết tại đây: http://toiphammaytinh.blogspot.com/view/sidebar/3590348064072717962/2011/02/about-me.html http://css-tricks.com/downloads/css-stuff/ Where I work... Wufoo is an online form builder that makes building even the most complex forms so easy, it's fun! Book I co-authored... Digging Into WordPress is a book and blog I co-author with Jeff Starr about the world's #1 publishing platform. Words I collect... Quotes on Design is a collection of design related quotes. With an API for your integration ideas! Lorem ipsum dolor sit amet, consectetur adipisicing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. Excepteur sint occa
Read more

[Security] Compromised Chrome Plugin Forum

Image
This morning Websense® ThreatSeeker® Network alerted us that if a user enters the term "Download Chrome" in Google Search, the 36th result would result in potentially malicious content being downloaded to the user's machine. I'll briefly describe the attack vector in which the content is sent to the user. Web Search Search for "Download Chrome": The 36th result leads to a compromised, unofficial Google Chrome plugin Web page: Compromised Web site The 36th result leads to to this website: The above site: is a legitimate, unofficial Google Chrome plugin forum Web page which is pulling in content from two malicious Web sites. We believe this Web page was compromised. One indicator that this is a compromised site, as opposed to a site set up for strictly malicious purposes, is that the whois registration information, which helps indicate the reputation, is registered in 2008. The registration details also seem to indicate that real inf
Read more