I went through my referers today, and came about the domain 0ww (the rest is left out to avoid you to click on it by accident...if you really want to see for yourself, just add .com. You HAVE been warned - it is a hijacking site!)
I went to the site for you. And it looked like a directory. Then out of the blue, a Java security warning poped in my face. As I am using tabed browsing, at first I was compelled to just hit OK - it just might have been on some of the other sites I was visiting. Then I took my own medicine. I examined the warning. As you can do in the picture attached.
It does look good. It even shows information about Thawte, a well recognized CA. It did look good. But - I had a strange feeling, and looking at my tabs, I understood the only likely host for this applet could be 0ww. So I did a google, and found what I was looking for - the Hipoint Ltd is a name used by hijackers. This is not the first certificate they have forged.
The danger in this particular warning is that all the things I would check for looked ok. Had I not been aware, I would most likely just hit OK, and I know most users would do the same.
How can we help our users to avoid such trouble? Is there a mental fix available, or do we have to trust technology?
| Attachment | Size |
|---|---|
| hijacker_java.PNG | 13.45 KB |
Hi Ken,thank you for sharing
Hi Ken,thank you for sharing your experience!I think Thawte is aware of this - but I always suggest reporting such issues to the police. And reporting these things to Thawte is also worth it. They used to have a Report Abuse email - it is most likely still around. They may not be able to do much at this point, but unless we let them know the extent of these episodes, they may never be getting the resources necessary to investigate. Thus, report it!
One of our clients has