New Flash exploit spoofs youtube viewers!

Another round of flash exploits doing the rounds now, these are the ones that stick trojans, or more specifically complex keyloggers on your PC allowing passwords and account details to be stolen. The trojans use memory location readers, so even if you don't type your passwords and stuff, they can still steal them!

http://tech.yahoo.com/news/ap/20081008/ap_on_hi_te/tec_techbit_youtube_spoofing

Take care guys, using firefox, no-script and ad-block plus (and configuring them correctly) can stop the majority of these attacks. I aslo installed something called FlagFox today, it shows a flag in the address bar of the country that the site originates from, if i see China, Korea or Russia, I hit the stop button! These tools are all add-ons for firefox, not sure about IE though.

Laters

can you post a link to your Flag Fox site? that would help us.

Thanks

OK, this is going to be a series of links, firstly to download Firefox, then the No-Script (stops java script from auto executing), Ad-Block Plus (once configured this will stop Iframes and flash banners exploiting your browser), then I will post a link to Aikar's site to configure Ad-Block Plus, then finally a link to FlagFox. Using the first 2 add-ons offers protection against most flash and java exploits currently in circulation, FlagFox just gives you a heads up on being spoofed.

Firefox Browser Download page

Once you have downloaded and installed Firefox, click here and click the "Add to firefox Button"

Ad-Block Plus

then here:

No Script


Once you have them downloaded and installed, click the following link, the top part tells you how to make Internet Explorer more secure, the second half tells you firstly how to configure ad-block plus and how to use no-script. I would not advise installing these add-ons unless you read that article, as you will find you cant do a lot of stuff until you have them setup OK.

Aikar's Browser config page


Finally, here is the link to FlagFox, click the link, then "Add to Firefox". This displays a flag in the address bar tellign you the originating country of the site. FlagFox

Post any questions, I will answer if I can.

ok, I did most of that, and ran into a stumble block. The New Netscape is different looking than the old firefox browser, when you click on the options, and go to all those advanced settings. it doesnt look the same. I did as much as I could, and then moved onto Flag, and it wouldnt install. said it was incompatable with current browswer. I felt like I was flying blind, and hunted and pecked my way through it. I figured out most of it, but dang, what a project!

I am going to hunt a peck a bit more later, but this is turning out to be a major under taking.