Avast WEBforum

Other => General Topics => Topic started by: YoKenny on December 17, 2009, 09:19:53 AM

Title: Attacks spread malware with help from AppleInsider
Post by: YoKenny on December 17, 2009, 09:19:53 AM

Quote

Attacks spread malware with help from AppleInsider

By Dan Goodin

Posted in Malware, 16th December 2009 06:02 GMT

Malware purveyors are exploiting web vulnerabilities in appleinsider.com, lawyer.com, news.com.au and a dozen other sites to foist rogue anti-virus on unsuspecting netizens.

The ongoing attacks are notable because they use exploits based on XSS, or cross-site scripting, to hide malware links inside the URLs of trusted sites. That's something application security expert Mike Geide doesn't see often. As a result, people who expect to visit sites they know and trust are connected to a page that tries to trick them into thinking their computer is infected.

http://www.theregister.co.uk/2009/12/16/rogue_av_attacks

Title: Re: Attacks spread malware with help from AppleInsider
Post by: Pondus on December 17, 2009, 11:15:12 AM

Yo....kenny, this should have been posted in the new "secuity news" tread, shame on you..... ;D

http://forum.avast.com/index.php?topic=52252.0

Title: Re: Attacks spread malware with help from AppleInsider
Post by: bob3160 on December 18, 2009, 02:35:37 PM

It would have been nice....  :'(

Title: Re: Attacks spread malware with help from AppleInsider
Post by: YoKenny on December 18, 2009, 02:57:05 PM

Quote from: bob3160 on December 18, 2009, 02:35:37 PM

It would have been nice....  :'(

Maybe if it was in a sticky ;)

Title: Re: Attacks spread malware with help from AppleInsider
Post by: bob3160 on December 18, 2009, 05:33:29 PM

It doesn't need a sticky. 
The continued adding of new items always make it come back to the top. :)

Title: Re: Attacks spread malware with help from AppleInsider
Post by: YoKenny on December 18, 2009, 09:29:27 PM

Quote from: bob3160 on December 18, 2009, 05:33:29 PM

It doesn't need a sticky. 
The continued adding of new items always make it come back to the top. :)

Not quite ::)