Top scams on the web

The ‘Bargain’ Store Scam
Cyber criminals create fake online shops. Products are often offered at much lower prices, however no parcel will be sent. Your card details may be sold on the black market.

Tip for consumers: Check the payment connection is secure by looking for the padlock symbol and ensuring there is an https in the address bar.

The Fancy Dress Disguise
Cards to friends or a link to an amusing video clip may contain hidden malicious extras, or the email may be a phishing scam in fancy dress.

Tip for consumers: Before you click the link. Does the address look different to where the card claims to be from? Installing real-time analysis software can help to mitigate this risk.

The Drive-by
Simply browsing an infected Website or news site could allow code to be executed that exploits vulnerabilities in software installed on that machine.

Tip for consumers: Where available you should always download the most recent updates and patches to protect from these kinds of attacks. Many adult or gambling sites contain these links.

Unwanted gifts from AV
Rogue Anti-Virus software is an example. Don't be fooled, there is no scan, instead they will simply claim to have found a virus on your machine. You're not really infected but this may encourage you to download or even pay for their (fake) Anti-Virus Software which is actually a malicious software.

Tip for consumers: When you search for popular items, search engine optimization (SEO) poisoning pushes infected URLs to the top of the search results. Exercise caution when downloading software or accessing Web sites

The Jigsaw puzzle
The technique, called script fragmentation, involves breaking down malware into smaller pieces in order to beat malware analysis engines. It's a bit like sending a jigsaw one piece at a time.

Tip for consumers:
The attack, which works on all the major browsers, is not a browser vulnerability-it merely takes advantage of the way browsers work. Disabling JavaScript would prevent the attack

Source: Websense Security Labs