I got Spam?!

ITNews is reporting that McAfee has discovered a maze of over 10,000 websites that have been hijacked by cybercriminals with the intent of using them to take over unsuspecting visitor's PCs. The hijacked sites include travel, government and even hobby sites. It's suspected that the pages were probably victimized by a botnet programmed to scan the net for unsecured pages. It plants a piece of Javascript code that redirects to a Chinese site that then downloads malware onto the user's computer. An additional Trojan is also installed to allow other malicious programs to be installed.

Although McAfee claims that many of the sites have since been cleaned up, users should still be wary of even trusted websites and keep their anti-virus and security programs up to date. They should also be sure the latest security patches from Microsoft are installed on their systems.

• Malware Analysis: Botnets
• Dave Perry Does Malware
• GFI Adds Support for January 2008 Microsoft Security Updates
• Security Software Industry Takes First Steps Towards Forming Anti-Malware Testing Standards Organization
• Russia Becomes New Malware Leader
• Japanese Spammer Accused of Sending Over 2 Million Spams
• New Phishing Attack Masquerades as Government Alert
• Judge Orders End to Weight Loss Spam Organization
• Botnet Source Code For Overachievers
• Hillary Clinton Spam Spreading Malware
• Spammers Use Lunar Eclipse to Deliver Malware

Filed under: Malware Tags: by admin Date 14 March, 2008