Yahoo Greetings e-cards used to infect thousands of computer users with malware

[mandy]

As e-tailers prepare for a booming online shopping season, e-scammers are already making moves to gather stolen identities.

Researchers at Exploit Prevention Labs recently uncovered a major cyber criminal ring operating in Australia using what appear to be Yahoo Greetings e-cards to infect thousands of computer users with malicious keylogger malware. Attackers used the malware to steal credit card numbers, bank account usernames and passwords and other personal information.

Accounts at nearly every Australian bank were affected, according to Exploit Prevention Labs. The criminals did not stop there, though. Researchers have discovered further evidence that the malicious e-card spammers have expanded their operations with confirmed targets in North America, Europe and Asia using a variety of e-card supplier accounts.

"I've never seen anybody using an exploit via an exploit server," Roger Thompson, Exploit Prevention Labs' CTO, told TechNewsWorld. "This scam is slick because victims don't see the redirective from Yahoo to the phishing site. If you are not patched, you get nailed."...

full article: http://ecommercetimes.com/story/7ujrbusW...tics.xhtml

[Kristijntje]

A related article:

E-mail greeting card scams popular during the summer months seem to have lost their luster for information highwaymen.

"We've seen an awful lot of greeting card malware in the last couple of months, but scammers have moved on to new techniques, simply because there was so much of it about that it stopped being a very effective way to infect people," ...

"Normally, it's a very good way of fooling people into being infected," he added. "Who doesn't want to receive a letter out of the blue, particularly if you don't know who it's from? People are curious. Natural curiosity killed the cat and it may very well kill your computer."...

full article: http://ecommercetimes.com/story/Ax5c2luA...Over.xhtml

[regic]

I'm waiting for the flood of PDF spams to slow.  :