Here is the link that I think leads to a virus. I received it in my email.
hxxp://12design.cl/umag7/ciencias/nav25.php
Hi and welcome to our forums
Thank you for reporting this.
I've sent your request to our lab. I'll keep you up to date.
Have a nice day.
Why is it in hxxp instead of the usual http? Is this normal? What does that mean?
Hello
Welcome back.
I did modify it an make it "unclikable" so others don't click on it and get infected.
The results will be posted here soon.
Take care.
Hello Welcome back. I did modify it an make it "unclikable" so others don't click on it and get infected. The results will be posted here soon. Take care.
I received a link in an email that was suspicious looking so rather than clicking on the link I entered the first part of the address: "nbnews15.net." I do not remember the suffix text after the .net.
I got an immediate message from Bit Defender that the site was dangerous and it was blocked. Thanks Bit Defender!
Goggling this address informs that this is a known attacker.
I sent a separate email to the sender (an acquaintance of mine) and he confirmed that his contacts list had been hijacked and thousands of emails had been sent out under his address.
Yahoo has introduced a stronger user authentication- second sign in verification to thwart compromise of your email account:
http://www.ymailblog.com/blog/2011/12/yaho...n-verification/
Yes, a real issue in these days, thousands of Yahoo Mail accounts are hijacked.
Those websites steal the authentication cookies from the browser and they are used to login in the accounts and resend the same spam to all the contacts.
In this process, the computer is not affected, no malware signs were discovered during our research sessions.
We advise users to change the passwords with strong ones in case they observe suspicious activities in their accounts.
