The following attack will display a "you've been signed out" page for GMail, and attempt to steal your account credentials.
DO NOT PUT ANY ACCOUNT CREDENTIALS INTO ANY TABS CREATED AFTER VISITING THESE LINKS :)
I received an email in my GMail inbox with a fake attachment image, styled to look like the real GMail attachment UI:
This linked to a page that ended up displaying a fake "you've been signed out" link, via the data:text/html... URL feature of Chrome:
| """\ | |
| Pluzz Downloader | |
| Downloads a movie from the French Television VOD | |
| Usage: | |
| pluzz_downloader.py [<url>] [--gui] [-t <target>] [--avconv <avconv>] | |
| Options: | |
| -g --gui Launch graphical user interface |
| #!/usr/bin/env python | |
| import sys | |
| import urllib | |
| import requests | |
| from BeautifulSoup import BeautifulSoup | |
| def get_google_auth_session(username, password): | |
| session = requests.Session() | |
| google_accounts_url = 'http://accounts.google.com' |
| diff --git a/libstreamanalyzer/include/strigi/analysisresult.h b/libstreamanalyzer/include/strigi/analysisresult.h | |
| index 074fc43..0d7b37c 100644 | |
| --- a/libstreamanalyzer/include/strigi/analysisresult.h | |
| +++ b/libstreamanalyzer/include/strigi/analysisresult.h | |
| @@ -20,6 +20,8 @@ | |
| #ifndef STRIGI_ANALYSISRESULT_H | |
| #define STRIGI_ANALYSISRESULT_H | |
| +#include "/usr/include/time.h" | |
| + |
