Hackers use Wikipedia to spread malware

Hackers are using online encyclopaedia Wikipedia to spread malware, according to a security firm. 

Sophos discovered that hackers had created an article on the German edition of Wikipedia containing false information about a new version of the Blaster worm, along with a link to a fix. 

However, the fix is actually a piece of malicious code designed to infect visitors' PCs.

Wikipedia is built from user contributions, allowing anyone to create or edit the content of a page.

The hackers sent spam messages to German computer users, which purported to come from Wikipedia, and directed recipients to the fraudulent information.

As the emails linked to a legitimate website, they were able to bypass some anti-spam solutions.

"The good news is that the authorities at Wikipedia quickly identified and edited the article on their site," said Graham Cluley, senior technology consultant for Sophos.

"Unfortunately, a version of the page remained in the archive, allowing the hackers to send spam and continue to direct visitors to the malicious code."

Wikipedia has now confirmed that it has permanently erased all versions of the page.

"The very openness of websites like Wikipedia, which allow anyone to edit pages, makes them terrific, but can also make them less trustworthy, " Cluley added.

"In this case, the article in question was not just misleading, it was downright malicious.

"Everyone should exercise caution and ensure they have appropriate defences in place to protect their computer systems.

"Additionally, people should remember that if there really is a new threat on the internet, you're likely to hear about it first from the security companies, not an online encyclopaedia."

See also:

Malware threat doubles in September

Huge rise in targeted attacks  03 Oct 2006

Golf sites fall into malware sand trap

Spyware, adware and Trojan authors tap Ryder Cup zeitgeist  25 Sep 2006

Social networks riddled with malware

One in 600 profiles host infection  10 Aug 2006

Hackers crack secret Google malware search codes

Be afraid, be very afraid  24 Jul 2006

StopBadware.org names and shames malware

Badware Watch List identifies malicious programs  25 May 2006

Macs 'open target' for malware

McAfee expands security coverage to Macs  07 May 2006

Like this story? Spread the news by clicking below:

 del.icio.us     Digg this     reddit!