Phil Sanders
11-12-2007, 8:35 PM
Hi All:
Computer scammers & spammers are getting smarter:
http://news.yahoo.com/s/ap/20071031/ap_on_hi_te/techbit_striptease_scam_2
Summary:
Sometimes a web site will ask you to type in a 4 or 6 letters that are masked by lines, waves, or background color schemes. This is a security feature to prevent 'bots' (computer robots) from spamming a site. The concept is that only humans can pick out the letters and numbers from the background and type them correctly back to the security system (provided the users are not color blind in most cases.)
Scammers & Spammers have figured out a way around this. An infected computer will display a pop-up window with a sexy woman who will ask you to type letters and numbers, just like the above, and if you do the lady claims she will remove an article of clothing; sort of a striptease.
The reality is the bad guys are using the entered numbers as a by-pass around the security system of another site. The unknowing user enters the letters, and then the spammers have a bypass security key to spam some site. The 'bots' have used an unsuspecting human to help in their dirty deeds.
The lady doesn’t really take too many clothes off before a reset takes place.
Just thought you would like to know.
Phil
PS: Link to Symantec Web site for further technical details:
http://www.symantec.com/security_response/writeup.jsp?docid=2007-103012-0328-99&tabid=2
Computer scammers & spammers are getting smarter:
http://news.yahoo.com/s/ap/20071031/ap_on_hi_te/techbit_striptease_scam_2
Summary:
Sometimes a web site will ask you to type in a 4 or 6 letters that are masked by lines, waves, or background color schemes. This is a security feature to prevent 'bots' (computer robots) from spamming a site. The concept is that only humans can pick out the letters and numbers from the background and type them correctly back to the security system (provided the users are not color blind in most cases.)
Scammers & Spammers have figured out a way around this. An infected computer will display a pop-up window with a sexy woman who will ask you to type letters and numbers, just like the above, and if you do the lady claims she will remove an article of clothing; sort of a striptease.
The reality is the bad guys are using the entered numbers as a by-pass around the security system of another site. The unknowing user enters the letters, and then the spammers have a bypass security key to spam some site. The 'bots' have used an unsuspecting human to help in their dirty deeds.
The lady doesn’t really take too many clothes off before a reset takes place.
Just thought you would like to know.
Phil
PS: Link to Symantec Web site for further technical details:
http://www.symantec.com/security_response/writeup.jsp?docid=2007-103012-0328-99&tabid=2