By Lucian Constantin
IDG News Service | Oct 17, 2014 9:12 AM PT
http://images.techhive.com/images/article/2014/10/rfd_attack_on_google-100525644-primary.idge.pngA social engineering attack tricks a user to download a malicious file from google.com using RFD
Credit: Oren Hafif
The vulnerability allows the creation of links to legitimate sites that trigger malicious file downloads when clicked
Users who are careful to download files only from trusted websites may be tricked by a new type of Web vulnerability: this one cons them into downloading malicious executable files that are not actually hosted where they appear to be.
Full Article