Hackers are using fake parking violation warnings to trick motorists into visiting malware-infested websites.

The innovative social engineering trick was pulled off in Grand Forks, North Dakota using windshield fliers with a website address linked to a booby-trapped website. The fliers said:

Drivers visiting the website were coaxed into installing a browser helper object (spyware component) for IE. Attempts are also made to frighten or coerce surfers into installing fake anti-virus scanner packages.

Lenny Zeltser, an anti-virus analyst at the SANS Institute, comments: "Attackers continue to come up with creative ways of tricking potential victims into installing malicious software. Merging physical and virtual worlds via objects that point to websites is one way to do this. I imagine we'll be seeing such approaches more often."

SANS has a write-up of the attack, include screenshots and pictures, here. ®

Related stories

• Speed cameras slide out of LibCon budget (18 June 2010)
• Geo-located malware appears over the horizon (16 March 2009)
• ASProx botnet dials into Conficker domains (3 February 2009)
• Why conventional protection fails against web threats (28 January 2009)
• Countdown to Conficker activation begins (23 January 2009)
• Conficker Autoplay ruse gets teeth into Windows 7 (20 January 2009)
• GlobalSign revokes cert of rogue security app (16 August 2008)