Obama strumpet-sex scandal ruse spreads malware
Election-related campaign kicks off
Posted in Spyware, 9th September 2008 15:57 GMT
Webcast: Building Applications for the 21st Century
False claims that presidential candidate Barack Obama is a sex tourist are being used to trick users into getting infected by malware.
Prospective marks are encouraged to check out a video implausibly showing the married Democrat in action with a Ukrainian strumpet. Gullible folks who fall for the ruse are shown a bongo clip while, in the background, malicious files are installed onto their Windows PCs, net security firm Websense reports.
The attack loads spyware onto compromised PCs. Once harvested, stolen information from infected PCs is posted to a compromised web server in Finland, controlled by unidentified hackers.
More details on the attack can be found in Websense's advisory here.
Virus writers regularly make up news stories or offer illicit clips of celebrities in order to bait malware attacks, but up to now the celebrities in question have usually been the likes of Britney Spears or Paris Hilton rather than more respected figures. Curiously, the Monica Lewinsky sex scandal never became the topic of a malware attack. ®

The Register Guide to Extended Validation
LDAP Injection [3-2APZ1KL]
Blind SQL Injection [3-2APYM5E]
Preventing Google Hacking [3-2APYMGU]
Building Web Application Security into Your Development Process [3-2APYMBV]

Inmate hacked prison network, broke into employee database
Miscreants hijacking machines via (freshly patched) Adobe flaw
Martial law planned for Craigslist's red-light district
Cocaine addicted IT manager hacks ex-employer's mail servers