Break CAPTCHA by Watching Striptease DancerBest Security Tips offers daily news, information, advices and tips about spyware, adware, viruses, trojans, web vulnerabilities, hackers, other threats    | Register now | Login
   
TIPS NEWS TOOLS DOWNLOADS MALWARE FORUM BOOKS FREE MAGAZINES FREE WEBCASTS & VIDEOS
Internet security & monitoring for networks - Dld trial!  Bookmark and Share 
Best Tips
Security Scanner
Security Categories
Advertise With Us!
Latest Viruses / Threats
Our Partners
Downloads
Security Incidents : Break CAPTCHA by Watching Striptease Dancer
Posted by Max on 2007/11/2 15:54:29 (2263 reads)
Security Incidents

All of the sudden, a beautiful blonde pops up and she promises to remove her lingerie if you help her. Of course you will. It’s human nature to enjoy a strip show. Especially when it’s free. Unfortunately, there is no free beer and the blonde is interested in your brain. The one on your shoulders.

The creation of online scammers, she's trying to trick unsuspecting internet users into helping the scammers break the online barriers that banks and e-mail services set up to thwart crooks.

The striptease is the latest attempt to defeat so-called CAPTCHA systems, which is short for "completely automated public Turing test to tell computers and humans apart." Those safeguards require users to prove they are human by reading oddly shaped jumbles of letters and numbers that appear in an image and typing them out.

In the new scam, an icon of an alluring woman suddenly appears on a Windows computer infected by a virus. After clicking on the icon, the user sees a photo of the woman who vows to take off an article of clothing each time the jumble of figures next to her is entered.

But the woman never fully undresses, and after several passwords are entered the program restarts, possibly enticing unsuspecting users into trying again.

Trend Micro researchers said the scam appears to be isolated for now to spammers trying to register bogus e-mail addresses and flood chat rooms with unwanted pitches. But they worry schemes to infiltrate financial institutions could soon appear.

Paul Ferguson, network architect at Trend Micro, speculated that spammers might be using the results to write a program to automatically bypass CAPTCHA systems.

"I have to hand it to them," Ferguson said, laughing. "The social engineering aspect here is pretty clever."




Other articles
2010/3/2 5:22:13 - VeriSign and AVG Will Integrate VeriSign Trust(TM) Seal Within AVG LinkScanner(R)
2010/3/1 7:36:12 - New Stealth Software Protects P2P Users From Lawsuits by Copyright Holders
2010/2/24 13:55:16 - New State of The Art Firewall By Palo Alto Networks
2010/2/24 13:50:26 - Beware of Fake Antimalware Programs Like PCsProtector
2010/2/24 13:38:02 - New Registry Cleaner Guide Helps Your PC Perform Faster
2010/2/3 7:32:43 - PC Login Now (Full version) Available Now For Free.
2010/2/3 7:11:57 - Mitto Named One of 20 Top Web Applications
2010/1/19 15:53:17 - OpenVAS, the New Open Source Vulnerability Scanner
2010/1/7 5:40:00 - Beware of Rogue Antispyware Named Eco AntiVirus. It's a FAKE
2010/1/7 5:30:00 - Blue Coat's K9 FREE Web Filtering Product Expands to Windows 7

The comments are owned by the poster. We aren't responsible for their content.