Microsoft Security Essentials SEO Poisoning

[spg SCOTT]

As expected, I imagine...

http://securitylabs.websense.com/content/alerts/3485.aspx

Websense Security Labs™ ThreatSeeker™ Network has discovered that search engine results for information on how to download Microsoft's recently released Security Essentials tool are returning links to Web sites that serve rogue AV.

Malware authors have used Search Engine Optimization (SEO) techniques to mix rogue search results in with legitimate results. For example, one of the rogue links is directly under a MSDN blog entry discussing Microsoft Security Essentials. The rogue redirects are hosted on compromised Web sites, including a Canadian publisher's Web site and the British Travel Health Association.

I hope ALWIL can improve the detection reported in this one...

Please make sure you download it from the right location everyone...

http://www.microsoft.com/security_essentials/

-Scott-


Edit: Just seen this link posted elsewhere on the forum...sorry...

[nmb]

one more here :

http://forum.avast.com/index.php?topic=49070.msg414424#msg414424

[spg SCOTT]

Yep, the reason for this:

Edit: Just seen this link posted elsewhere on the forum...sorry...

[nmb]

There is need to ask sorry friend scott.

[polonus]

Hi malware fighters,

But what is bad is that av detection rate is so low:
http://www.virustotal.com/analisis/4cd2e550f3aa26fc96d9fb4b5183f3665fccc3d97b6111a31de2ffb41e4eb5fe-1254310625

polonus

[nmb]

I think those all detections are because of the community ratings.

[spg SCOTT]

Hi malware fighters,

But what is bad is that av detection rate is so low:
http://www.virustotal.com/analisis/4cd2e550f3aa26fc96d9fb4b5183f3665fccc3d97b6111a31de2ffb41e4eb5fe-1254310625

polonus

I hope ALWIL can improve the detection reported in this one...

Yes, especially as we are advising the fact it compliments avast!...