Advertisements
New Firefox Extension for protection against Fake Online Stores
Cloud security services provider, Zscaler has released a free Firefox extension to protect users from fake online stores, a category of malicious websites that isn't covered by most blacklists.
Most Web attacks are launched from compromised legit websites which are injected with unauthorized code that loads malicious content from third party servers.
Zscaler's researchers explain that most blacklists currently used by browsers, such as Google Safe Browsing or Phishtank, block these third party sites from where malicious content is served. However, they often miss cases where the rogue content is hosted on the compromised website itself. For example, attackers can compromise an e-commerce site and add additional form fields to gather sensitive data from shoppers. In other cases attackers can create fake stores on compromised servers and host them under the corresponding domain names.
"Recently, we highlighted the number of high profile, legitimate sites, that have been hijacked to lead to fake online stores. These stores offer up software downloads at highly discounted prices. The downloads are not blocked as malware by Google Safe Browsing, or as phishing sites by Phishtank," writes Julien Sobrier, senior security researcher at Zscaler.
Source: Softpedia News
{ 0 comments... read them below or add one }
Post a Comment