urn:uuid:5a1d33f3-2688-52b5-add0-fd0424973fe7 Topic: Malware and Phishing – Ctrl blog Daniel Aleksandersen https://www.daniel.priv.no/ Copyright © 2023 Daniel Aleksandersen. https://www.ctrl.blog/assets/logo/logo-square.svg 2023-02-05T21:38:00Z weekly 10 urn:uuid:70607ead-1938-43b0-ba58-f4a0a34ef953 2023-02-05T21:38:00Z 2023-02-05T21:38:00Z Norway’s BankID undermines anti-phishing best practices An easily-spoofed iframe embedded onto every random online merchant’s websites is not a safe place to enter my bank password! Is it really BankID‽ <p>Imagine a privatized nationwide authentication system used to access government services, confirm contracts and online payments, and everything else. Now, imagine that the system was designed to be extra friendly to imitation and credential theft (“phishing”). Here’s everything wrong with Norway’s BankID authentication system.</p> <p><a href="https://www.ctrl.blog/entry/bankid-iframe-phishing.html">Read more …</a></p> urn:uuid:a2348eda-39ec-4a32-9ea8-46ced0639874 2018-12-31T02:27:00Z 2018-12-31T02:27:00Z 6 places to report phishing emails and websites Here are 6 services you can report malware websites and phishing emails to help make the internet a safer place for everyone. <p><em>Report phishing emails and websites</em> when you encounter them! It only takes a minute and helps protect everyone on the web. Here are six places to report phishing emails and websites.</p> <p><a href="https://www.ctrl.blog/entry/report-phishing.html">Read more …</a></p> urn:uuid:cd6e0057-5ed2-4485-8aa2-5a19e939314e 2016-11-17T12:15:00Z 2016-11-17T12:15:00Z How to set up ClamAV to periodically scan for badware on Fedora Linux All the steps needed for running periodic malware scans on your Fedora Linux installation. Recommended for Fedora Server setups! <p>ClamAV requires a bit of configuration, and as a Fedora Linux user, you must work around some issues with the packages. This tutorial should also apply to other Linux distributions, although some of the tools and package names may be different.</p> <p><a href="https://www.ctrl.blog/entry/how-to-periodic-clamav-scan.html">Read more …</a></p> urn:uuid:8aa8983f-df20-4733-9afe-b4f84179dbd6 2016-08-16T12:49:00Z 2016-08-16T12:49:00Z Most of alternate web browsers don’t have fraud and malware protection All the leading web browsers protect you against web fraud and websites known to distribute malware. You don’t get this protection with the smaller browsers. <p>There are a lot of web browsers to choose from; each one with all sorts of unique and interesting features! Before falling in love with a new web browser, you should be aware that many web browsers don’t come with fraud/phishing and malware protection services. You should seriously reconsider your choice if you’ve fallen for one of the browsers that have taken a relaxed approach to keep you safe on the web.</p> <p><a href="https://www.ctrl.blog/entry/fraud-protection-alternate-browsers.html">Read more …</a></p> urn:uuid:58decd5b-39ca-4c7f-aa88-3591568ae586 2016-07-19T11:58:00Z 2016-07-19T11:58:00Z Netcraft anti-phishing toolbar breaks on IPv6 enabled networks IPv6-capable websites can break the website security information displayed in the Netcraft anti-phishing toolbar for Firefox and Chrome. <p>Back in May, I discovered an issue with the Netcraft anti-phishing toolbar extension for Firefox that resulted in security information from one website would be inherited by any subsequently website being loaded over IPv6.</p> <p><a href="https://www.ctrl.blog/entry/netcraft-anti-phishing-toolbar-can-be-fooled-on-ipv6-websites.html">Read more …</a></p>