Security Basics mailing list archives

RE: Popup security sales gimmick

From: "Optrics Engineering - Shaun Sturby, MCSE" <Shaun () Optrics com>
Date: Mon, 30 Dec 2002 11:30:11 -0700

Here is the source of the popup page. It looks like it does just that, open a
iframe to display the local drive.

<head>
<style>
a:link                  {font:8pt/11pt verdana; color:red}
a:visited               {font:8pt/11pt verdana; color:red}
</style>
<title>WARNING: No Privacy Protection Software Found</title>
</head>
<body bgcolor="white">
<FONT face="verdana" size=4>
          <font color="red">WARNING:</font> Privacy Protection Software NOT
DETECTED</font>
      <p><font style="COLOR: black; FONT: 8pt/11pt verdana"><b>Your Internet
habits are being recorded.</font><br>
        <font size="2"><a href="download.html">CLICK HERE TO DOWNLOAD PRIVACY
PROTECTION SOFTWARE</a></font></b> </p><BR>

          <table cellspacing="0" cellpadding="0" border="1">
<tr>
    <td><script language="javascript">
if (navigator.appName=="Netscape" && navigator.appVersion.split(".")[0]==4)
{
document.write("");
}
else
{
document.write("<p align='left'><iframe src='file:///C:/' height=350 width=600
marginwidth=0 marginheight=0 scrolling=no frameborder=0
vspace=2></iframe></p>");
}
</script></td>
</tr>
</table>
      <h2 id="ietext" style="font:8pt/11pt verdana;
color:black">209.115.181.213 - Privacy Protection Software NOT DETECTED<BR>
      </h2>
<b><font size="2"><a href="download.html">CLICK HERE TO DOWNLOAD PRIVACY
PROTECTION SOFTWARE!</a></font></b>
</body>
</body></html>

-----Original Message-----
From: netsec novice [mailto:netsec9 () hotmail com]
Sent: Friday, December 27, 2002 7:54 PM
To: security-basics () securityfocus com
Subject: Popup security sales gimmick


I ran into this popup and initially it concerned me.  I thought I would post
it here for confirmation on its validity.  It appears to me that this site
runs a script that simply displays your c: drive contents rather than
actually being able to obtain the information.  I could see how it could
scare some people though.

Check it out for yourself.
http://www.interneteraser.com/error.html

___________________________________________________________________________________

IMail Server has scanned this e-mail for viruses using Declude Virus from Optrics.com

Current thread:

Popup security sales gimmick netsec novice (Dec 30)
- RE: Popup security sales gimmick Optrics Engineering - Shaun Sturby, MCSE (Dec 31)
- Re: Popup security sales gimmick Gene Cronk (Dec 31)
- RE: Popup security sales gimmick Kyle Lai, CISSP, CISA (Dec 31)
- Re: Popup security sales gimmick Adexter (Dec 31)
- RE: Popup security sales gimmick Greg van der Gaast (Dec 31)