Trojan vote for the new U.S. president

Posted: October 16, 2012 in IT Security News, Security Notices
Tags: , , ,

Stop spamExperts warn of malicious mailing, operating general public interest for pre-election debates between the candidates for the U.S. presidency.

Spam filters Websense weed out thousands of malicious emails disguised as a newsletter CNN. Their headline reads: “CNN Breaking News – Mitt Romney Almost President”. According to experts, all the buttons “Full story” in a fake tape “hot” news that is inserted into the body of spam messages lead to sites, redirects, redirect the recipient to exploit the site, the latest version of Blackhole. The purpose of this is to download a cyberattack on the victim versions of ZeuS, using a user-mode rootkit.

In Sophos also found that in case of failure to exploit (Blackhole uses pdf-, jar and exe-files) attackers are turning to the help of social engineering. If appropriate holes in the defense by not found, it displays a page masterfully mimics the download page for Adobe Flash Player. Without any action by the user, it loads a malicious exe file, which it is proposed to start. Experts believe that this additional functionality intruders entered ahead of the public release of Windows 8 and IE 10 version with a user interface Modern UI, does not support such plugins like Java and Flash.

Theme of the presidential election in the United States has consistently attracted the world’s attention – including spammers. Over the last 3 months protective solutions Trend Micro blocked about 26.6 thousand attempts to visit pages that contain the keyword “Obama”, and more than 4.5 thousand – with the name of his rival Romney. While in 79% of cases, “Obama sites” designed to directly download the phishing pages or malware targeted at 11% URL, linked to malicious pages, distributed through spam. The same figures for “Romney sites” were 64 and 20%, respectively. Most attempts to come to the site with the names of the presidential candidates have committed, as expected, the Americans (71% for “Obama,” 57% for “Romney”). According to this rating, the election speeches of the current U.S. president also interested Poles (4%), Canadians, British and Australians (1%). Romney victory impressed Filipinos (3%), Canadians (3%), Japanese and Australians (1%).

Obama bad-url

Sources:

http://blog.trendmicro.com/trendlabs-security-intelligence/

http://community.websense.com/blogs/

http://nakedsecurity.sophos.com/

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s