[Tfug] Exploiting docs.google.com

[earljviolet at deserthowler.com]

Am I right in assuming this person is using Windows?

Earl
On Mon, July 13, 2009 9:38 pm, erich wrote:
> OK,
>          I have a acquaintance of mine who is frantic. He has a Yahoo
> web mail account, and in the past week an agent apparently originating
> from Yahoo has used his address book to send spam.
>
>          In it's most recent attack attempt, it sends a message with a
> link
> to a place in docs.google.com that displays this ad for some gambling
> website. You click on the display ad and it attempts to download
> a *.exe to your computer. In other words the attacker is using Google
> to:
>               1) Display a socially-engineered ad to lure someone.
>
>               2) Harbor a malicious *.exe to download.
>
>           Never mind Google. Can some agent within Yahoo grab your
> e-mail address list for an exploit?
>
>                                                                   Erich
>
> _______________________________________________
> Tucson Free Unix Group - tfug at tfug.org
> Subscription Options:
> http://www.tfug.org/mailman/listinfo/tfug_tfug.org
>


--