Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Full Disclosure: RE: MSN Webcam / Chat Spoof

RE: MSN Webcam / Chat Spoof

From: Daniel Dočekal <daniel_at_pooh.cz>
Date: Mon, 12 May 2003 08:08:22 +0200

Browser Plugin is ADULT DIALER - it connects via modem to telephone
service and you pay your sexy adventure through your telephone bill. In
many cases, there are adult dialers committing fraud - they redirect
your dial-up internet connection to very expensive number without your
knowledge.

-----Original Message-----
From: full-disclosure-admin_at_lists.netsys.com
[mailto:full-disclosure-admin_at_lists.netsys.com] On Behalf Of Richard M.
Smith
Sent: Monday, May 12, 2003 3:40 AM
To: full-disclosure_at_lists.netsys.com; secure_at_microsoft.com
Subject: RE: [Full-disclosure] MSN Webcam / Chat Spoof

You missed the good part. If you actually go to the "MSN" Web site and
press the "Connect Now" button, the site tries to download some
questionable ActiveX control. Not to worry however:
 
   Just press YES in the dialog box when it appears. This operation is
totally safe and certified by Microsoft AuthenticodeT
 
The control is signed by "Browser Plugin". I guess Thawte will give
anyone an Authenticode certificate nowadays. I wonder who "Browser
Plugin" really is?
 
 

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
Received on May 12 2003

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos