Malware goes viral via search engines

We all had a chuckle in the newsroom over the Serena Williams poisoned search attack that didn’t work. Unsuspecting users searching for news or videos of the Serena Williams meltdown were, in some cases, directed to a malware site that infected users’ computers. But when the site was investigated by Symantec, the malicious file was found to be corrupt and did not run. A lucky break for those who went to the site, but as our security ace Bill Jackson put it, “you can’t always count on incompetent hackers to protect your computer.”


But apparently, you can pretty much count on unsuspecting users to damage a computer. Here are some news reports on recent attacks that relied on social engineering to trick users into trouble. (Not to worry: we’re sending you to the news reports, not the malicious links.)

Darkreading.com picked up word that the recently deceased actor Patrick Swayze (star of Dirty Dancing) may also be suspect of poisoned search attacks.

And right on the heels came a similar attack on people searching for information on the California wildfires and the September 11 anniversary.

It’s not just fringe sites that are hosts to viruses. Recently NYTimes readers got ambushed by fake ads for antivirus software.

Meanwhile, on Facebook, users were alerted to the need for a “removal kit” to clean up an embedded virus on a Facebook application. Turns out the removal kit is the malfarious culprit, according to Computerworld.

Makes you wonder what it takes to get a geek to bite on a viral hook. Any other lines floating around out there?

GNC

PCs infected by identity theft malware up 600 percent

Friday, August 21, 2009
The number of computers infected by malware designed to steal personal or banking information for identity theft and fraud has shot up 600 percent in the past year, according to a report from web security firm Panda Security.Panda's security research division, PandaLabs, has captured samples of 11 million new malware threats so far this year, approximately 8 million of which are Trojans - a type of malware that is disguised as a non-threatening file.Trojan malware can be used to track keystrokes to steal login information and passwords for banking websites or can come in the form of fake banking or other websites for phishing user information."One of the possible reasons for this increase is the economic crisis. This in conjunction with organizations that have made a business out of selling personal information on the black market, such as credit card numbers, PayPal or eBay accounts is what we can attribute the rise to," said Luis Corrons, technical director of PandaLabs.PandaLabs estimates that approximately 3 percent of all users have fallen victim to theft through online attacks.
MX Logic