Hot on HuffPost Tech:

See More Stories
AOL Tech

Here Comes Nine Ball, Another Major Web Threat

Nine Ball, Another Major Web ThreatAnother day, another massive attack that compromises the security of thousands of users. Just as we were getting ready to declare victory over Conficker (and settling in for a long battle with Gumblar), along comes Nine Ball, another difficult-to-defeat offensive that hijacks Web sites and tries to load malware onto a user's PC. The worm has a trick up its sleeve; repeat visitors to infected sites are dumped to Ask.com, a sneaky move that prevents security experts and investigators from being able to discover too much about the host of the malware.

According to Internet security firm Websense, Nine Ball has already compromised over 40,000 Web sites. The attack redirects visitors to an infected site that attempts to install malware and keyloggers (applications that can track your keystrokes) onto a PC, all intended for stealing personal data and passwords. The infected site will search the user's browser, Quicktime, and Adobe Reader for vulnerabilities that it can then exploit to load the malicious software.

Nine Ball is a particularly difficult foe for several reason: first, it resists investigation by checking a visitor's IP address against a list of previous visitors. Second, the trojans installed by Nine Ball on a PC are constantly mutating, making them very difficult to detect and destroy with traditional anti-virus software.

There is currently no sure-fire way to protect yourself from or clean up an infection by Nine Ball (except reinstalling Windows). All you can do is to make sure that all your software packages, including those targeted by the attack, are up-to-date, and to install the appropriate security software. [From: Network World]

Weirdest Techie Heists and Scams

    Elderly Amish Man Caught on Film With Prostitute, Blackmailed
    When a 75-year-old Amish widower slept with a prostitute, he -- we feel certain -- felt pretty bad about it the next morning. As if that guilt weren't enough for the old man, the prostitute and her boyfriend demanded $67,000 from him, claiming that they had filmed the scene with wall-mounted cameras and would upload the recording to the Internet. The pair was later arrested and, we can only imagine, the Amish man abhorred technology more than ever.

    Bank Robber Gets Away With the Help of Craiglist
    In October, a bank robber -- wearing a safety vest, blue shirt, face mask and goggles -- eluded police with the help of Craiglist. Just outside the bank, while the robbery was in progress, stood a group of men who were responding to a Craiglist day labor opportunity. As the advertisement required, they were all wearing safety vests, blue shirts, face masks and goggles.

    Nude New Zealander Arrested After Responding to Fake Sexy Text Message
    Late in 2007, a Wellington, New Zealand man received a racy text message from two anonymous "ladies," giving him only an address and a request that he show up naked. Well, he indeed showed up naked... at the home of one appalled, unsuspecting New Zealander. Both the nude Romeo and the sadistic texter were arrested, though neither were prosecuted.

    Fake Craiglist Ad Costs Man Most of What He Owns
    Last Spring, a post appeared on an Oregon Craigslist board stating that the owner of a specific house was leaving all of his worldly possessions (still in said house) to whoever wanted them. When homeowner Robert Salisbury rushed home -- on a tip from a woman suspicious about the offer of a free horse -- he found his house being ransacked by 30 strangers. We suggest he take that horse and collect some vengeance Clint Eastwood-style.

    17-Year-Old Jailed for Stealing Virtual 'Furniture'
    When a 17-year-old Dutch boy hacked into several accounts on the Second Life-style site 'Habbo' in 2007, the the law got involved. The boy was discovered to have stolen $5,800 worth of virtual furniture and knick-knacks. Apparently, crime -- whether actual or virtual -- does not pay.

    Phishers Going After Your Phones in New 'Vishing' Trend
    Over the past year, sneaky spammers have begun to forsake the worn-out territory of e-mail in favor of cell phones' fertile frontier. The result? "Vishing." Get it? Voice mail + phishing. It might be more ominous if it didn't sound like a James Bond villain saying, "Wishing."

    Burglars Break Into Restaurant, Steal HDTV, Leave Money / Food Behind
    Around Halloween of last year, a truckload of thieves drove into -- that's right, into -- a Pennsylvania Mexican restaurant, where they -- apparently uninterested in the cash register -- stole a mid-grade 47-inch HDTV and fled the scene. We've all heard about how this generation is lacking in ambition, but this generation's thieves, too?

Tags: keylogger, malware, nine ball, NineBall, security, top, trojan

Comments

19

Add your comments

Please keep your comments relevant to this blog entry. Email addresses are never displayed, but they are required to confirm your comments.

When you enter your name and email address, you'll be sent a link to confirm your comment, and a password. To leave another comment, just use that password.

To create a live link, simply type the URL (including http://) or email address and we will make it a live link for you. You can put up to 3 URLs in your comments. Line breaks and paragraphs are automatically converted — no need to use <p> or <br /> tags.