Malware writers exploit Bhutto killing

The assassination of former Pakistan prime minister Benazir Bhutto has become the latest hook to lure users to malicious websites.

Researchers at security firm McAfee said that attackers were embedding blog pages with URLs for malicious sites that claim to offer a video of the killing.

Users who attempt to view the video are prompted to download what the site claims is a codec file needed to 'translate' the video.

The 'codec' is actually a Trojan program that installs malware on the user's system.

Other sites then attempt to exploit a previously patched flaw in Internet Explorer to install the malware.

The use of major news events as a means of spreading malware is not uncommon. The infamous Storm worm surfaced early last year as an attachment to fake emails about flooding in Europe.

Criminals also used the Virginia Tech shootings, the London terror bombing, and Hurricane Katrina to bring in victims online.

The use of fake codecs is also a common tactic for spreading malware. Attackers will often use the promise of pornographic videos to lure users into downloading and installing Trojans.

The recent MacOS X Trojan was one such example of such an attack, using the fake video files to deliver a DNS changer.

See also:

The main internet threats for 2008

Mobile malware, botnets, phishing and ID theft  24 Dec 2007

Trojan hijacks Google text ads

Malware redirects host file  19 Dec 2007

2007 Roundup: The march of the botnets

Top 10 malware list for 2007  24 Dec 2007

Sharp hike in cyber-attacks from China

Finjan reports new wave of malicious activity  17 Dec 2007

Five million malware sites exposed in October

Comet Cursor tops Webroot threat list  14 Nov 2007

Mutant Trojans threaten Mac users

Malware authors tweaking payload, say researchers  08 Nov 2007

Like this story? Spread the news by clicking below:

 del.icio.us     Digg this     reddit!