This is the most informative of the links I have found, apparently it was an email scam but this post is two years old, some of the others are from december of this year but they don't provide much detail. I wonder if its just a rehash of the old scam or if they are attacking the browser directly this time instead of via an email attachment. http://voices.washingtonpost.com/securityfix/2006/07/passwordstealing_trojan_disgui.html -- "Any fool can know. The point is to understand." -Albert Einstein -- fedora-list mailing list fedora-list@xxxxxxxxxx To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines