Blackhat SEO Attack Targets Obama’s Speech

Using search engines to browse the Internet these days is a dangerous endeavor. Cyber criminals are keen on gaming search engine algorithms and are able to quickly divert innocent news seekers to malicious websites. Today, WIRED reported that cyber criminals were targeting a highly anticipated Dan Brown novel, but the target and scope is much deeper than that. Literally every current relevant news topic is actively targeted each day, including highly publicized speeches given by President Obama this week.Clicking the following link in a Google search result will point us to a malicious Rogueware campaign page: Malware Info: Adware/SmartVirusEliminator Investigating the attack shows us a bigger picture of the targeted keywords: Most commonly targeted keywords: Obama Speech GM group enterprises Apple Beatles America White House Jon Gosselin Live Interview School Season The full list of targeted keywords can be downloaded here: BlackhatSEO2.txtOver the past six months that PandaLabs has closely tracked the evolution of Blackhat SEO attacks, we’ve seen these targeted campaigns be executed by cybercriminals with increasing levels of speed and sophistication. Today, Blackhat SEO is truly a mainstream tactic used by literally thousands of criminals. Targeting real-time news events is a serious problem not only for search engines, but for all parties involved in malware mitigation. In shifting to the "real-time web," the entire IT security community must also recognize the need for real-time Malware protection and this is precisely why the move to cloud-based antivirus technology is necessary.
source

Tags: , , ,

Posted under Malware Alerts

This post was written by Ted on September 10, 2009

Tags: , , ,

SpyZooka Rids Systems of the Rogue Anti-Spyware XP Defender (PRWeb via Yahoo! News)

The award winning SpyZooka removes spyware like XP Defender, adware, hijackers, Trojan horse and other security threats.
source

Tags: , ,

Posted under Spyware in the News

This post was written by Ted on September 1, 2009

Tags: , ,

Be Careful With Your Search Results

Blackhat SEO (BHSEO) is currently one of the most prevalent distribution methods for Malware on the Internet. It’s also one of the most dangerous methods because of the user-implied trust in search results. A Forrester research study conducted in 2008 showed that 50 percent of Internet users trust content delivered by search engines. It’s no surprise that cyber criminals have been using malicious search results as a main monetization stream. The Rogueware campaign we blogged about last week turned into a full blown BHSEO attack targeting relevant news topics such as, the California wildfires, Ted Kennedy’s death, DJ AM’s death, Mega Millions Lottery, Hurricane Danny, UFC 102, CNN and BBC breaking news among 12,000 search terms. Upon clicking one of many malicious links in the top ranking search results, the victim is put through several redirections and finally taken to a fake scan website designed to infect and extort money. Fake scan site: Installer: File: setup.exe Size: 72192 MD5: 2C0625D97A5BC7EC299D33CE8C9A299E Adware/SmartVirusEliminator Tag cloud of exploited keywords: Most exploited keywords: BBC News 2009 CNN News 2009 Ted Kennedy Official Website USA News Hottest Info/News CA/California Fire Lottery Hurricane Halloween The full list can be downloaded here: BlackhatSEO.txtYou can read more about Rogueware in our most recent report: The Business of Rogueware [pdf]
source

Tags: , ,

Posted under Malware Alerts

This post was written by Ted on September 1, 2009

Tags: , ,

Are Cyber Criminals Targeting Local Events In Your City?

Panda Security has a California based office in Los Angeles. We are located in close proximity to two ongoing wildfires in the Angeles Crest National Forrest that have now burned through at least 30 acres, so naturally we have been keeping an eye on it. To my surprise, I pulled up a Google search for “Angeles Crest Fire” and the result yielded a malicious link above most relevant sources. Once clicked, the site loads and checks to make sure the user came from Google. If so, the following script begins the redirection to the Rogueware site: The Rogueware site is designed to display a fake Antivirus scan designed scare victims into thinking that their computer is infected. If the Malware is downloaded and installed as the site suggests, the user will see a fake Antivirus program pop up on their computer. At that point it becomes very aggressive and difficult to remove. File: Antivirus-x_x.exeSize: 172032MD5: 0E9BC3499560EEA9261F5883FAE2A10EMalware Info: Adware/PersonalAntivirus. Rogueware attacks are among the most prevalent attacks on the Internet today. You can see our latest report on them here: The Business of Rogueware (pdf)5 Steps to Avoid Infection:Always have up-to-date Anti-Malware software installed. If you don’t have one or if your current solution is not removing the Malware, you could download a free trial from us here: http://www.pandasecurity.com/usa/homeusers/downloads/evaluation/Don’t rely on search engines to provide valid or safe search results. You can improve your chances of safe browsing by downloading our free Web of Trust browser plugin: http://www.pandasecurity.com/homeusers/downloads/wot/Pay close attention to what links you are clicking on. If you don’t recognize the source you may want to research the domain in a separate search or avoid the link all together. Rogueware attacks rely on Social Engineering (I.e. making you believe you are infected when you are not). Don’t believe it! Simply close the browser window if you see a scan appear all of the sudden. If you cannot close the window with your mouse you can try ALT+F4 to force close it.Don’t be afraid to ask for help. Call your Antivirus Company or a tech savvy friend if you feel that you are in over your head.
source

Tags: , , ,

Posted under Malware Alerts

This post was written by Ted on August 28, 2009

Tags: , , ,

CNET Download.com not so ‘spyware-free’ (ZDNet)

On its home page, CNET’s Download.com promises that all software available on the site “has been tested to ensure it’s 100% free of spyware, viruses, and other malware.” Â Â Unfortunately, there appears to be a kink in the system that allows the display of a known adware program called…
source

Tags: , ,

Posted under Spyware in the News

This post was written by Ted on August 15, 2009

Tags: , ,

Page 3 of 171234510...Last »