I got Spam?!

MySpace is under attack again. According to Marshal's TRACE team, it involves spam that pretends to be a legitimate invitation to join MySpace. It contains a link that redirects to a fake MySpace page. Once there the user is prompted to update adobe flash player. If they accept the download, malware is downloaded to their computer, turning it into zombie and making it part of a botnet. The affected computer then starts sending phishing emails targeting major US banks.

"We saw sites such as YouTube targeted in these kinds of malware distribution campaigns last year. It follows that social networking sites would be next on the spammers list of targets to exploit, although this newest campaign arrived a little sooner that expected. This attempt to exploit MySpace is simplistic but effective," said Bradley Anstis, Marshal's VP of Products.

It is not yet clear if the botnet in question is controlled by the Storm Worm or a single hacker or gang.

• Malware Attacks Nokia Handsets
• GEMoney Announces Security Breach Affecting Over 600,000 Consumers
• Oracle To Release 27 Security Fixes
• Linux Apache Servers Under Attack
• Malware Authors Exploit Actor's Tragic Death
• Systems Administrator Indicted in Hacking Scheme
• New Phishing Attack Masquerades as Government Alert
• Cybercriminals Create Malware Maze
• Security Software Industry Takes First Steps Towards Forming Anti-Malware Testing Standards Organization
• Phishing Sites Now Using the Storm Worm Botnet
• New Botnet Overtakes Storm
• Malware Analysis: Botnets

Filed under: Malware Tags: by admin Date 18 January, 2008