JaBbA's Hut

This screenshot is a fully patched (as of this morning) XP Sp2 machine. The bar says it's a paypal SSL site. The lock is locked. The certificate is PayPal's certificate. EVERYTHING that the browser reports says that you're looking at Paypal's site. The content is Secunia's test page.

This is VERY VERY BAD. The test is at Secunia's site.

Right now, there are a couple of defenses against this.

#1 - DO NOT USE IE. Firefox won't even allow me to click on the test link. This is an IE vulnerability, unlike last weeks reports which were Windows vulns.

#2 - NEVER, EVER, trust a link sent to you. ALWAYS type the address in your browser or use a bookmark you created. This doesn't work unless you follow a malicious link.