<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>The Dark Visitor &#187; social-engineering</title>
	<atom:link href="http://www.thedarkvisitor.com/tag/social-engineering/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.thedarkvisitor.com</link>
	<description></description>
	<lastBuildDate>Wed, 08 Jun 2011 03:15:53 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
		<item>
		<title>Chinese hackers enjoying Obama&#8217;s popularity</title>
		<link>http://www.thedarkvisitor.com/2009/01/chinese-hackers-enjoying-obamas-popularity/</link>
		<comments>http://www.thedarkvisitor.com/2009/01/chinese-hackers-enjoying-obamas-popularity/#comments</comments>
		<pubDate>Tue, 20 Jan 2009 20:15:11 +0000</pubDate>
		<dc:creator>Heike</dc:creator>
				<category><![CDATA[Chinese Malware]]></category>
		<category><![CDATA[Hacking for money]]></category>
		<category><![CDATA[Obama]]></category>
		<category><![CDATA[social-engineering]]></category>

		<guid isPermaLink="false">http://www.thedarkvisitor.com/?p=1046</guid>
		<description><![CDATA[According to PandaLabs,  there are over 40 websites cashing in on the current popularity of President Obama to spread malware.  The websites, purchased by a Chinese company with a long history of malware attacks, are running sensational headlines like &#8220;Barrack Obama refused to be a President&#8221; in order to attract viewers and compromise their computers. [...]]]></description>
			<content:encoded><![CDATA[<p>According to PandaLabs,  there are over 40 websites cashing in on the current popularity of <a href="http://www.allheadlinenews.com/articles/7013771201">President Obama to spread malware</a>.  The websites, purchased by a Chinese company with a long history of malware attacks, are running sensational headlines like &#8220;Barrack Obama refused to be a President&#8221; in order to attract viewers and compromise their computers.</p>
<p>Difficulty with English articles, a dead giveaway.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.thedarkvisitor.com/2009/01/chinese-hackers-enjoying-obamas-popularity/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Chinese hackers and the Kappa Girl video</title>
		<link>http://www.thedarkvisitor.com/2008/11/chinese-hacker-and-the-kappa-girl-video/</link>
		<comments>http://www.thedarkvisitor.com/2008/11/chinese-hacker-and-the-kappa-girl-video/#comments</comments>
		<pubDate>Wed, 19 Nov 2008 00:05:47 +0000</pubDate>
		<dc:creator>Heike</dc:creator>
				<category><![CDATA[Hacking for money]]></category>
		<category><![CDATA[Chinese hackers]]></category>
		<category><![CDATA[Kappa Girl]]></category>
		<category><![CDATA[social-engineering]]></category>
		<category><![CDATA[Trojans]]></category>

		<guid isPermaLink="false">http://www.thedarkvisitor.com/?p=756</guid>
		<description><![CDATA[Why do I get the feeling I&#8217;m going to regret posting this article? All below the fold, content warning of NOT WORK SAFE. Kappa Girl First picked up on this story in the China Economic Report about trojans being attached to pictures of the &#8220;Kappa Girl,&#8221; taken from a video of the same name. According [...]]]></description>
			<content:encoded><![CDATA[<p>Why do I get the feeling I&#8217;m going to regret posting this article?  All below the fold, content warning of <strong>NOT WORK SAFE</strong>.</p>
<p><span id="more-756"></span></p>
<p style="text-align: center;"><a href="http://www.thedarkvisitor.com/wp-content/uploads/2008/11/kappa-girl.jpg"><br />
</a></p>
<p style="text-align: center;"><a href="http://www.thedarkvisitor.com/wp-content/uploads/2008/11/kappa-girl.jpg"><img class="size-medium wp-image-757 aligncenter" title="kappa-girl" src="http://www.thedarkvisitor.com/wp-content/uploads/2008/11/kappa-girl.jpg" alt="" /></a><a rel="attachment wp-att-1928" href="http://www.thedarkvisitor.com/2008/11/chinese-hacker-and-the-kappa-girl-video/kappa-girl-2/"><img class="aligncenter size-full wp-image-1928" title="kappa girl" src="http://www.thedarkvisitor.com/wp-content/uploads/2008/11/kappa-girl.JPG" alt="kappa girl" width="355" height="411" /></a></p>
<p style="text-align: center;">Kappa Girl</p>
<p>First picked up on this story in the <a href="http://www.jjxww.com/html/show.aspx?id=133221&amp;cid=85"><em>China Economic Report</em></a> about trojans being attached to pictures of the &#8220;Kappa Girl,&#8221; taken from a video of the same name.  According to <a href="http://www.google.com/url?sa=t&amp;source=web&amp;ct=res&amp;cd=1&amp;url=http%3A%2F%2Fwww.360.cn%2F&amp;ei=zFcjSerXGZzENIvRzJEB&amp;usg=AFQjCNGg8urVkuNE1CPVOUQy3CtHIHQjPA&amp;sig2=gf_9JE-k2HP0ln-16R05Aw"><em>360 Security</em></a>, the hackers are exploiting a flaw in Adobe Reader/ Acrobat to disseminate the malicious program.  Had no idea who the &#8220;Kappa Girl&#8221; was so I did a search and found that the <a href="http://shanghaiist.com/2008/11/18/kappa_girl_fired_for_sex_video.php"><em>Shanghaiist</em> had the full backstory on &#8220;Kappa Girl&#8221;</a>:</p>
<blockquote><p>A 12 minute long sex video of a female employee working at the Kappa store in the east building of the Shanghai No.1 Department Store on Nanjing Lu has recently been spreading like wildfire on the Chinese internet via Bittorrent and the Chinese peer-to-peer application Xunlei, catapulting the search term &#8216;Kappa女&#8217; (or &#8220;Kappa Girl&#8221;) into one of the top ten search terms on Google China and unleashing a &#8216;human flesh search engine&#8217; where netizens worked together to track her down, publishing her private information such as her name, her pictures and her QQ number.</p>
<p>(There is more on the story at their website but once again, not work safe)</p></blockquote>
<p>As soon as it hit the internet the video went viral and became one of the top Chinese searches.  Of course Chinese hackers, who know a thing or two about social engineering, saw this as an opportunity to exploit the popularity of the video and started attaching malware.</p>
<p>The moral(s) of the story&#8230;don&#8217;t take XXX videos of yourself&#8230;AND&#8230;don&#8217;t look for this video on the internet&#8230;AND&#8230;don&#8217;t post the story on your blog.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.thedarkvisitor.com/2008/11/chinese-hacker-and-the-kappa-girl-video/feed/</wfw:commentRss>
		<slash:comments>4</slash:comments>
		</item>
		<item>
		<title>Lose Face&#8230;Book</title>
		<link>http://www.thedarkvisitor.com/2008/01/lose-facebook/</link>
		<comments>http://www.thedarkvisitor.com/2008/01/lose-facebook/#comments</comments>
		<pubDate>Thu, 03 Jan 2008 23:19:36 +0000</pubDate>
		<dc:creator>Heike</dc:creator>
				<category><![CDATA[Hacking for money]]></category>
		<category><![CDATA[US attacks]]></category>
		<category><![CDATA[Chinese hackers]]></category>
		<category><![CDATA[Facebook hack]]></category>
		<category><![CDATA[social-engineering]]></category>

		<guid isPermaLink="false">http://www.thedarkvisitor.com/?p=238</guid>
		<description><![CDATA[Don&#8217;t click on anything, ever.  Best advise in the world.  Facebook users recently got a nasty surprise when they saw links posted but what they believed were friends on their wall space.  Of course, when they followed the links it led to a fake Facebook website in China.  The .cn website would log them into the real Facebook but would also keep a copy  of their user id and password.  Nice. [...]]]></description>
			<content:encoded><![CDATA[<p>Don&#8217;t click on anything, ever.  Best advise in the world.  Facebook users recently got a nasty surprise when they saw links posted but what they believed were friends on their wall space.  Of course, when they followed the links it led to a fake Facebook website in China.  The .cn website would log them into the real Facebook but would also keep a copy  of their user id and password.  Nice.  Anyway, after you check your Facebook account&#8230;go here and continue reading <a HREF="http://www.wired.com/politics/security/news/2008/01/facebook_phish">Chinese hackers attack Facebook</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.thedarkvisitor.com/2008/01/lose-facebook/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

