PSN users burned by scam involving chain messages

[Jason]

It appears that there's a nasty version of those irritating chain messages going round at the moment - basically it claims to generate codes that will allow the user to claim free content on the PS Store.

Obviously, it's a scam, and users are finding that their credit card details are somehow being hijacked after entering their info. Whilst I've not got an awful lot of sympathy for anyone dumb enough to fall for something like this, it's still a potential security risk - especially as many of us use our debit cards for this sort of thing.

Here (http://www.ironstarmovement.com/profiles/blogs/the-playstation-network-is) is the full article if you're interested.

[MyNameDidntFit]

I don't know whether the first update to that article was there when you posted this, but it states that this is not caused by entering information to the site. All that is required is that you have opened on of these messages on your PSN account -- no entering of details involved. How this works, they're not sure, but it's suspected that the emails contain what is essentially a virus/malware attachment that allows the 'scammers' to hack into your account/details.

So, it's not a case of being a dumb-ass and falling for something, it's just bad luck.

[Jason]

Ouch. No, that bit wasn't there - is that confirmed, or is that just the source of the report furiously backpedalling ("No, not me... I'd never try anything shady and get my account raped... never!")?

Either way, with any luck this shouldn't bother most people too much - I know for a fact my first reaction when I get what appears to be a chain message is to delete it and then block the sender. :p

[MyNameDidntFit]

On a second read-through (checking for hints as to whether it was just the guy trying to cover his arse) I'm thinking I got it a bit wrong: it appears to be opening a link in the mail. Not entering info, just the link. So, really, it's being slightly less of a dumb-ass and falling for something slightly less obvious :p

[Konrad]

I'm guessing the PS3 browser simply executes any Java, Flash or ActiveX application websites want to run - unlike computer browsers which ask for permission. My guess is that it's just a simple drive-by and just nobody thought of making one specifically for the PS3 yet.

[Jason]

I think it asks before running some kinds of scripts, such as those that want to open new windows and the like - one would imagine this is simply an exploit that can be patched. Who wants to wager some money that the loophole was discovered using the non-standard OS tool before it was pulled?