Chinese Outlook email traffic came under attack this weekend

On Saturday, Outlook users in China began seeing an ominous error message. Trying to retrieve mail, an error popped up that Outlook was unable to verify the identity of the mail server. According to a new report from the watchdog group Great Fire, someone was sitting between the client and the server for a full day, collecting the mail and potentially even altering it on the fly. It's called a man-in-the-middle attack, and since Outlook was serving its messages over HTTPS, users were alerted by an error message as soon as the attack happened. Unfortunately, in many cases users will simply click "continue," ignoring the attack and forfeiting any protection the encryption provides. Notably, the attack didn't target web users on...

Continue reading…



Continue reading...