Fake flash player site used to spread malware
Shockwave horror
Regcast training : Hyper-V 3.0, VM high availability and disaster recovery
Hackers have developed a new ruse that attempts to trick users into downloading malware from a fake Adobe Shockwave Player download site.
Prospective marks who stray onto lure sites - such as a game site related to RuneScape - are presented with broken icons in an attempt to convince them that their copy of Shockwave (if already installed) isn't working properly.
Links from the site all point to another site which "diagnoses the problem" as caused by a need to upgrade Macromedia Flash Player. The user is redirected to a bogus site that poses as the Shockwave Player Download Center.
Of course, the payload is a Trojan package - rather than the popular Flash package. The site features JavaScript that disables a user's right mouse click, the SANS Institute's Internet Storm Centre adds.
By using social engineering instead of exploiting prevalent vulnerabilities - such as the iFrame vulnerability in Internet Explorer - hackers are extending their range of potential targets.
Although its easy for the net-savvy to spot the fake site as a ringer (for one thing a fake URL is visible in the address bar) the tactic is still capable of tripping up the unwary. ®
COMMENTS
Guess what, Steve
Make a few thousand syringes with the label you cite and fill them plain old water. I think we'll all be surprised at the number of numbskulls who go ahead and actually inject their eyes.
REAL flash player site distributes malware
I downloaded some software like this, from a site called "adobe.com".
Now my PC keeps infecting itself with advertisements, they're so LOUD and JUMPY that I sometimes suffer convulsive attacks. (Wear sunglasses!) And most of the web sites suddenly start using weird menus they don't work and I can't figure them out.) And my dial-up connection acts like I've fallen from 56KB back to 300 baud.... maybe even 110.
Bad Malware.
This article.
Well, not all ISPs are going to be so kind as to offer such powerful blocking services, if you want those, some ISPs want you to pay more money to them just for that extra amount of coverage.
I think they have their reasons for doing this, so long as corporate politics dominates the industry scene, we have not been able to see any major breakthrough in the fight on malware.
IT infrastructure monitoring strategies
Agentless Backup is Not a Myth
Top 10 SIEM implementer’s checklist
Steps to Take Before Choosing a Business Continuity Partner
Requirements Checklist for Choosing a Cloud Backup and Recovery Service Provider
