Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Computing > Computer Security > CardStealer.

Reply
Thread Tools

CardStealer.

 
 
Plompetta
Guest
Posts: n/a
 
      06-05-2004
I don't really understand what is being said below by Mcaffee about this
virus. Are they saying that it is not a virus, but somehow McAfee detects
the page is fake and alerts the user accordingly?



JS/CardStealer

This detection is for HTML pages which claim to be a legitimate billing page
that the user must enter their credit card and other personal information
into. For example the page may masquerade as an AOL or Paypal related page.

When the user enters information into the page and submits it, the data is
sent to the author of the trojan page (not AOL or PayPal etc). This is often
achieved by using remote Formmail scripts to send form data to a specified
email address.

Before sending your credit card information over web, always check to
confirm the address of the web page. Also confirm that the information will
be encrypted by checking that the lock icon in the status bar is closed. If
the lock icon is on the HTML page instead of the status bar, that can be
faked; if it's not on the status bar, it's not secure.


 
Reply With Quote
 
 
 
 
Colonel Flagg
Guest
Posts: n/a
 
      06-05-2004
In article <c9tfc8$qli$>,
says...
> I don't really understand what is being said below by Mcaffee about this
> virus. Are they saying that it is not a virus, but somehow McAfee detects
> the page is fake and alerts the user accordingly?
>
>
>
> JS/CardStealer
>
> This detection is for HTML pages which claim to be a legitimate billing page
> that the user must enter their credit card and other personal information
> into. For example the page may masquerade as an AOL or Paypal related page.
>
> When the user enters information into the page and submits it, the data is
> sent to the author of the trojan page (not AOL or PayPal etc). This is often
> achieved by using remote Formmail scripts to send form data to a specified
> email address.
>
> Before sending your credit card information over web, always check to
> confirm the address of the web page. Also confirm that the information will
> be encrypted by checking that the lock icon in the status bar is closed. If
> the lock icon is on the HTML page instead of the status bar, that can be
> faked; if it's not on the status bar, it's not secure.
>
>
>




yes.



--
Colonel Flagg
http://www.internetwarzone.org/

Privacy at a click:
http://www.cotse.net

Q: How many Bill Gates does it take to change a lightbulb?
A: None, he just defines Darkness? as the new industry standard..."

"...I see stupid people."
 
Reply With Quote
 
 
 
 
Plompetta
Guest
Posts: n/a
 
      06-06-2004

"Colonel Flagg" <> wrote in
message news:.. .
> In article <c9tfc8$qli$>,
> says...
> > I don't really understand what is being said below by Mcaffee about this
> > virus. Are they saying that it is not a virus, but somehow McAfee

detects
> > the page is fake and alerts the user accordingly?
> >
> >
> >
> > JS/CardStealer
> >
> > This detection is for HTML pages which claim to be a legitimate billing

page
> > that the user must enter their credit card and other personal

information
> > into. For example the page may masquerade as an AOL or Paypal related

page.
> >
> > When the user enters information into the page and submits it, the data

is
> > sent to the author of the trojan page (not AOL or PayPal etc). This is

often
> > achieved by using remote Formmail scripts to send form data to a

specified
> > email address.
> >
> > Before sending your credit card information over web, always check to
> > confirm the address of the web page. Also confirm that the information

will
> > be encrypted by checking that the lock icon in the status bar is closed.

If
> > the lock icon is on the HTML page instead of the status bar, that can be
> > faked; if it's not on the status bar, it's not secure.
> >
> >
> >

>
>
>
> yes.
>

So what type of things does McAffee look for in the web page then? How can
they distingush between phishing webpages, and ones that use JS/ActiveX,
etc?
>
> --
> Colonel Flagg
> http://www.internetwarzone.org/
>
> Privacy at a click:
> http://www.cotse.net
>
> Q: How many Bill Gates does it take to change a lightbulb?
> A: None, he just defines Darkness? as the new industry standard..."
>
> "...I see stupid people."



 
Reply With Quote
 
Jim Watt
Guest
Posts: n/a
 
      06-06-2004
On Sun, 6 Jun 2004 14:27:41 +0100, "Plompetta" <>
wrote:

> So what type of things does McAffee look for in the web page then? How can
>they distingush between phishing webpages, and ones that use JS/ActiveX,
>etc?


why not ask them?
--
Jim Watt
http://www.gibnet.com
 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off




Advertisments
 



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57