punky
06-25-2007, 10:10 AM
It seems that people aren't targeting browser exploits anymore and using social engineering.
Never follow links from sources that you don't trust. They can look authentic but be fake. Only takes a second to type the real address in manually yourself.
Link (http://www.theregister.co.uk/2007/06/22/shockwave_social_engineering_ruse/)
Hackers have developed a new ruse that attempts to trick users into downloading malware from a fake Adobe Shockwave Player download site.
Prospective marks who stray onto lure sites - such as a game site related to RuneScape - are presented with broken icons in an attempt to convince them that their copy of Shockwave (if already installed) isn't working properly.
Links from the site all point to another site which "diagnoses the problem" as caused by a need to upgrade Macromedia Flash Player. The user is redirected to a bogus site that poses as the Shockwave Player Download Center.
Of course, the payload is a Trojan package - rather than the popular Flash package. The site features JavaScript that disables a user's right mouse click, the SANS Institute's Internet Storm Centre adds.
Never follow links from sources that you don't trust. They can look authentic but be fake. Only takes a second to type the real address in manually yourself.
Link (http://www.theregister.co.uk/2007/06/22/shockwave_social_engineering_ruse/)
Hackers have developed a new ruse that attempts to trick users into downloading malware from a fake Adobe Shockwave Player download site.
Prospective marks who stray onto lure sites - such as a game site related to RuneScape - are presented with broken icons in an attempt to convince them that their copy of Shockwave (if already installed) isn't working properly.
Links from the site all point to another site which "diagnoses the problem" as caused by a need to upgrade Macromedia Flash Player. The user is redirected to a bogus site that poses as the Shockwave Player Download Center.
Of course, the payload is a Trojan package - rather than the popular Flash package. The site features JavaScript that disables a user's right mouse click, the SANS Institute's Internet Storm Centre adds.