Feeds

Bogus Beijing earthquake reports used to spread malware

Playing with Olympic fire

SANS - Survey on application security programs

Supected botnet operators are using false reports that a fictitious earthquake near Beijing could disrupt the Olympic games to spread malware.

Samples of the bogus alert doing the rounds, featuring subject lines such as "Million dead in Chinese quake", link to a website on a .cn domain. This site claims a quake measured in at 9.0* on the Richter scale has caused millions of casualties while throwing preparations for the games into turmoil. The page contains links to a supposed video that actually downloads the Nuwar-E worm onto the Windows boxes of marks credulous enough to fall for the ruse.

Net security firm Sophos reports that the .cn domains advertised in that attack are likely to be part of a botnet. Each DNS query for the domains returns a different IP address, indicating a changing network of compromised hosts are serving up the malware.

Using topical events to punt malware is one of the oldest social engineering tricks in the book. Baiting malware traps with "news" about non-existent calamities is hardly unprecedented either.

Its unclear where the hackers behind the latest scam are based. But if they're anywhere in China they are playing with fire. Last week police in south China arrested a man accused of spreading rumors of an impending earthquake after hacking into a government website. The 19 year-old suspect has reportedly confessed to breaking into the official website of the Guangxi earthquake administration on 31 May to spread the rumour, little more than a fortnight after a real earthquake claimed an estimated 68,000 lives in Sichuan province.

The technology worker (identified only by his surname, Chen) carried out the attack out of mischief, or to have "fun" as police sources put it, official Chinese news agency Xinhua reports. Somehow we doubt he's having much fun now. ®

* The Sichuan earthquake was measured at around magnitude 8.0 on the Richter scale. Earthquakes that weight in at over 9.0 on the Richter scale are very rare. The earthquake that triggered the Indian Ocean Tsunami of December 2004 measured 9.3 on the scale and is the second highest ever recorded. So the idea that news of such a disaster would first reach recipients by spam email really beggars belief.

High performance access to file storage

More from The Register

next story
Obama allows NSA to exploit 0-days: report
If the spooks say they need it, they get it
Putin tells Snowden: Russia conducts no US-style mass surveillance
Gov't is too broke for that, Russian prez says
Snowden-inspired crypto-email service Lavaboom launches
German service pays tribute to Lavabit
Mounties always get their man: Heartbleed 'hacker', 19, CUFFED
Canadian teen accused of raiding tax computers using OpenSSL bug
One year on: diplomatic fail as Chinese APT gangs get back to work
Mandiant says past 12 months shows Beijing won't call off its hackers
Heartbleed exploit, inoculation, both released
File under 'this is going to hurt you more than it hurts me'
Arts and crafts store Michaels says 3 million credit cards exposed in breach
Meanwhile, Target investigators prepare for long process in nabbing hackers
prev story

Whitepapers

SANS - Survey on application security programs
In this whitepaper learn about the state of application security programs and practices of 488 surveyed respondents, and discover how mature and effective these programs are.
Combat fraud and increase customer satisfaction
Based on their experience using HP ArcSight Enterprise Security Manager for IT security operations, Finansbank moved to HP ArcSight ESM for fraud management.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Top three mobile application threats
Learn about three of the top mobile application security threats facing businesses today and recommendations on how to mitigate the risk.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.