[Tfug] Exploiting docs.google.com

[Stott, Will]

Chance are more likely that he uses a client like outlook to store email and contacts, and his computer is infected. But, who knows... More info needed.

Will

----- Original Message -----
From: tfug-bounces at tfug.org <tfug-bounces at tfug.org>
To: listserv, TFUG <tfug at tfug.org>
Sent: Tue Jul 14 00:38:49 2009
Subject: [Tfug] Exploiting docs.google.com

OK,
         I have a acquaintance of mine who is frantic. He has a Yahoo
web mail account, and in the past week an agent apparently originating
from Yahoo has used his address book to send spam.

         In it's most recent attack attempt, it sends a message with a link
to a place in docs.google.com that displays this ad for some gambling
website. You click on the display ad and it attempts to download
a *.exe to your computer. In other words the attacker is using Google
to:
              1) Display a socially-engineered ad to lure someone.

              2) Harbor a malicious *.exe to download.

          Never mind Google. Can some agent within Yahoo grab your
e-mail address list for an exploit?

                                                                  Erich

_______________________________________________
Tucson Free Unix Group - tfug at tfug.org
Subscription Options:
http://www.tfug.org/mailman/listinfo/tfug_tfug.org