August 2nd, 2008 | 
Author: 
At the Black Hat computer security conference in Las Vegas next week, researchers will demonstrate software they’ve developed that could steal online credentials from users of popular Web sites such as Facebook, eBay and Google.
The attack relies on a new type of hybrid file that looks like different things to different programs. By placing these files on Web sites that allow users to upload their own images, the researchers can circumvent security systems and take over the accounts of Web surfers who use these sites.
“We’ve been able to come up with a Java applet that for all intents and purposes is an image,” said John Heasman, vice president of research at Next Generation Security Software Ltd…
Posted in 
