The Register® — Biting the hand that feeds IT

Feeds

Bhutto murder used to spread malware

Malicious JavaScript pushes Trojan

Agentless Backup is Not a Myth

Virus writers are exploiting morbid curiosity about the assassination of former Pakistani Prime Minister Benazir Bhutto's to spread malware.

Surfers searching for video footage of the suicide attack that killed Bhutto and at least 21 others on Thursday are liable to find malware posing as video clips that attempts to trick users into running malign ActiveX controls. The malicious downloaded file is detected by Symantec as the Emcodec-Trojan.

Trend Micro reports that some of the sites that come up in Google search results using the simple search term "Benazir" feature an malicious JavaScript redirect. The malicious script downloads a Trojan which, in turn, downloads more malicious files. This malicious JavaScript is far from restricted to sites referring to Bhutto's assassination but is also "embedded in other Web sites with a broad scope of topics and interests," Trend Micro notes.

Searching for this same malicious JavaScript code URL (the malicious script) yields 4,240 results. Narrowing down the search to also include "benazir" reduces this number to 103 results.

Sites that have been possibly compromised (or that include the malicious JavaScript), including Autoworld, Vino, Dogpile, MSN and BlogSpot, Trend Micro warns. ®

Steps to Take Before Choosing a Business Continuity Partner

Latest Comments

@James Comer

> You seem to have failed to grasp the point that Graham Lockley had made.

Not at all: I understood his use of 'obscurity' with respect to lack of malware but decided to reply using the more realistic usage with respect to the problems closed ('security by obscurity') software is responsible for causing.

But this "it's safe only because no-one bothers to attack such a small target" is such a bogus argument, considering how many variations on the 'MACs and Linux are more secure than Windows' theme there are floating about - granted, some rabid and others more reasoned - so surely this is a much better target considering the claims made. And sorry; I have the same difficulty with considering malware creators as a business as I do with considering a bout of 'flu as 'great fun'. They're simply leeches feeding on the same open sores on Windows which have never been healed properly. Windows is an easy malware target not because of the user base, just because it's so EASY.

It's also bogus because the fallacious argument of 'any OS is vulnerable' is childishly simplistic and assumes that any other OS or application is as badly written as Microsoft's output. Actually, they're not.

> they are still amongst the best commercially available operating systems in the world.

<hollow laugh> Better to add the rider "and if Microsoft had its way, the ONLY system in the world". An interesting use of the word "available", too. Most manufacturers refuse point-blank to sell a machine with no OS so perhaps "chosen for you" might fit better.

> The main catalyst behind the anti-microsoft movement is (...) geeks (...) derive their power from their knowledge, the same as conspiracy theorists

Hardly. Unlike conspiracy nut-jobs' ravings, Microsoft's OS vulnerability problems are documented fact and Microsoft is rightly attacked for consistently producing sub-standard software. It doesn't matter how much better a MAC or Linux box may/may not be: huge, HUGE problems are being caused *now* yet nothing has really been done to change that. It's no good blaming users for clicking on a URL when that's what is supposed to be done with them yet somehow, they're *still* likely to have their system infested simply because the OS allows it without comment at a single click.

> If MS packed up and stopped producing software tomorrow and all we were left with was the products of open source collaboration

...then the hordes of malware bots and the legion of crap *directly* enabled by Windows' shoddy quality would vanish overnight and nothing of any significance would be capable of replacing them.

> Coupled with the fact that Microsoft is the biggest charity in the world

I'm sorry; this matters how, exactly? That Gates gives away some of his obscene wealth means I should somehow regard Windows differently?

0
0

Bit Twister - no i dont think you understand

You seem to have failed to grasp the point that Graham Lockley had made.

The fundamental reason you are 'safer' using a mac is the relative number of users compared to windows. Think of malware/spyware/viruses as complementary products to operating systems and thinking of the people who make them as businesses. Which operating system are you going to compliment so that your product has the biggest impact, the one that 80% of the world uses or the one that 5% of the world uses?

Is Vista perfect? was Xp? No. Far from it. But you know they are still amongst the best commercially available operating systems in the world. Obviously the advantages of open sources software are going to be the weaknesses of Microsofts products. The main catalyst behind the anti-microsoft movement is the fact that geeks (and yes people who write in these forums are geeks, myself included) derive their power from their knowledge, the same as conspiracy theorists, it is therefore fashionable to oppose the mighty and the conventional.

If MS packed up and stopped producing software tomorrow and all we were left with was the products of open source collaboration, the world would be a much worse place. Coupled with the fact that Microsoft is the biggest charity in the world, it takes the truely ignorant to be so dismissive.

You're SO wrong, it's just funny. Very funny.

0
0

@Colin @Graham Lockley

> Absolutely wrong. I am sorry if I annoy you by saying that,

No no, not annoyed at all. Just saddened that someone thinks all OS's are subject to the same basic flaws irrespective of their entirely differing design, security model and CPU.

> its the obscurity of the OS that protects them most

That hasn't done Microsoft much good, has it? Oh wait; you're not talking about the obscurity of closed software which allows no form of peer approval, examination, discussion or realistic testing of the security implemented (which OSS does, BTW) - you're basically saying the same thing as Colin. I can't really see how this odd 'logic' of the more targets, the easier they are to break applies to something as ubiquitous as Unix/BSD (which is what REALLY holds the net together) and Linux generally (which implements the same basic security model).

You're both SO far wrong it's just sad. Very sad.

0
0

More from The Register

 breaking news
Number of cops abusing Police National Computer access on the rise
Only a telegram from the Queen can get you off it
 breaking news
NSA PRISM snoop-gate: Won't someone think of the children, wails Apple
10,000 things probed, mostly about missing kids, Alzheimer patients, we're told
Flash flaw potentially makes every webcam or laptop a PEEPHOLE
But it's a Google problem - Chrome only, insists Adobe
Internet fraud still stings suckers
Australians twice as gullible as Americans
 breaking news
NSA PRISM-gate: Relax, GCHQ spooks 'keep us safe', says Cameron
Whatever they are up to, it's all above board, we're told
 breaking news
Yahoo! joins! rivals! in! PRISM! data! request! admission!
Keep calm and carry on using American tech firms, folks
PRISM snitch claims NSA hacked Chinese targets since 2009
Snowden suddenly looks safer in Hong Kong after revelations
 breaking news
US chief spook: Look, we only want to spy on 6.66 BEELLLION of you
Americans assured they are not in the NSA's sights
Speech-to-text drives motorists to distraction
Will talking to you mean I crash into that car up ahead, Siri?
DHS warns of vulns in hospital medical equipment
Has your doctor's anasthesia machine been hacked?