Download the new Switched app for your iPhone

Skip to Content

AOL Tech

malware posts

Computers, Web

Malware Purveyors Paying Third Parties to Distribute Infections


Affiliate programs are nothing new to online retailers; but, now, distributors of malware are taking that model and offering "pay per install" programs, rewarding immoral Web users for installing pieces of malware on other people's computers.

The practice was described to attendees of the Black Hat DC conference by Kevin Stevens, an analyst at SecureWorks. Sites like Earnings4U are paying anywhere from $180 (for U.S.-based PCs) to $6 (for machines in Asia) for every 1,000 installs. According to Technology Review, Stevens said such sites constantly change their names to avoid the authorities, and have forums loaded with advice and software tools for effectively spreading the infections.

One of the tricks that allows these middlemen to make significant amounts of cash off of the scam is to use a Trojan download manager. While this commercial piece of software costs hundreds of dollars up front, once a PC has been compromised, the tool can be used to load it with several different malware packages, each of which is counted individually. These programs can even be used to harvest data for finding more victim PCs.

Read more →

Web, Social Networking

Facebook 'Un Named App' Not Dangerous, For Now

Facebook
Lets say this right off the bat: if you've spotted an "un named app" in your settings on Facebook, don't freak out. It's not malware or anything dangerous. It's just a head-scratcher of a glitch that has been plaguing Facebook users for the last day or so. The bug was causing particular panic following a string of status updates that read something along the lines of:
Has your facebook been running slow lately? Check your 'application settings', go into 'added to profile'. If you see one in there called "un named app" delete it... Its an internal spybot. Pass it on.
Ultimately, it was an error on the part of Facebook, which has said it fixed the problem, but has also declined to comment further. If you did remove "un named app," you would have noticed that the "boxes" tab was missing from your profile.

Read more →

Web

More Flaws Discovered in Internet Explorer Could Pose Threat

It doesn't seem like the the furor over China's recent cyber attacks on Google will ever die down. Last week, Microsoft patched up the vulnerabilities in its Web browser, Internet Explorer, that allowed the attacks. According to a report from Reuters, a Boston-based security research firm discovered yet more flaws that could leave Internet Explorer users open to similar malicious attacks.

Representatives of Core Security Technologies said Friday that individually the four or five flaws aren't a huge threat. However, hackers could link them together and gain remote access to everything stored on a person's computer by overwhelming the browser when the user clicks a bad link.

A Microsoft spokesperson tried to ease concerns, telling Ars Technica, "
Microsoft is investigating a responsibly disclosed vulnerability in Internet Explorer." The spokesperson continued, "[Customers] are at reduced risk due to responsible disclosure." Jorge Luis Alvarez Medina, a consultant with Core, confirmed to Reuters that his company is working with the software giant in order to minimize the threat and fix the problem.

Read more →

Web

Build-Your-Own Phishing Kits Make Cybercrime Easier than Ever

DIY Phishing Kits Make Cybercrime Easier than Ever
DIY is all the rage these days. People are building musical instruments, beer keg-monitoring robots, baby rocking machines, and iPhone-controlled cars, and gaining the satisfaction of making something with their own hands while saving a little cash. Bad news for the Web browsing public however, the DIY fad has spread to cybercrime and phishing scams.

Marc Rossi, R&D manager at Symantec, told USA Today that DIY cybercrime kits sell for between $400 and $700, and are largely responsible for the explosion of phishing scams and malware infections in late 2009. The kits are apparently so easy to use, that if you're tech savvy enough to download an album or a movie, you can use one to create a custom and convincing looking messages from UPS, Facebook, or Microsoft. The messages usually contain links that install malware capable of stealing banking information and turning the victim's PC into a bot in the attacker's vast network of controlled spam machines.

Read more →

Web, Social Networking

Scam Poses as Facebook Group Against 'Monthly Charge'

It's no secret that playing on people's fears is the best way to manipulate them. So, what's the biggest fear of a social networking addict? Paying for access, of course. And that pecuniary paranoia is just what a new Facebook scam exploits.

According to The Next Web, a group called "WE'RE AGAINST THE 4.99 A MONTH CHARGE FOR FACEBOOK FROM JUNE 30TH 2010" isn't an outlet for angry Facebookers. In fact, it's one big malware scam, which could grow even bigger since the group already has 133,000 members. Contrary to the group's claims, you're not going to have to pay to keep tabs on your friends (at least, not that we've heard). The page contains a blank Wall, except for a link that sends you to a site that downloads 25 malicious items to your hard drive.

Read more →

Web, Social Networking

RockYou App Site Hacked, 32M Accounts Compromised

RockYou, maker of irritating apps for Facebook and other social networks, along with add-ons like 'Glittertext' for MySpace, has suffered a major security breach that has potentially exposed e-mails and passwords of some 32 million users. Security firm Imperva contacted RockYou to alert it to a flaw it had found in its database of account information. But Imperva's warning was too late. At least one hacker has already claimed to have gained access and posted portions of the stolen data to prove it.

According to the hacker's posting, he obtained the account info for exactly 32,603,388 of RockYou's roughly 55 million users. What's worse though, is that the information for accounts on the site was stored in an unencrypted text file -- including e-mail addresses and passwords. If you have a RockYou account and tend to use the same password for everything, we strongly suggest you change the password on all of your accounts. Now.

Read more →

Web, Social Networking

Scammers and Malware Taking a Toll on Data and Dignity

It used to be that computer viruses were quiet, personal experiences that only you, your family, and your data were privy to. But modern crooks have found that social networks make an excellent tool for spreading malware. An unfortunate side effect of this is that now friends and family all know when we've been infected.

These malicious programs and scams often hijack your Facebook or Twitter account and then turn around and use your good name to deluge your network of friends with messages attempting to lure them into the same scam. The messages sent out by your account announce to all the world that you've been hacked. Maybe that description is a bit harsh, but it's how many perceive the infringement. Jodi Chapman used the words, "You feel like a total idiot," when she described the experience of having her Twitter account hacked to the New York Times. Lee Rainie, director of the Pew Internet and American Life Project, told the paper, "I'm worried that people will think I communicate this way," after his Twitter account sent messages containing a link and the text, "Hi, is this you? LOL."

Read more →

Web

Hackers Sending Fake Swine Flu Vaccination E-mails

As swine flu hysteria has gained steam, we've seen plenty of spammers and scammers take to the Web to profit from the paranoia. And now, the latest wolf in swine flu clothing to hit inboxes is a malware scam disguised as an e-mail from the Center for Disease Control (CDC). The e-mail contains information about a so-called 'State Vaccination H1N1 Program,' which requires the recipient to create an online profile on the CDC Web site. AppRiver, though, reports that the link in the mail goes to a fake CDC Web site, where another link to a "profile" is actually a Kryptik Trojan that targets Windows machines.

Once installed, the Trojan creates a security-free gateway on a given PC, and downloads malware that can keep track of your keystrokes and send personal data, like credit card or bank account numbers, to a remote hacker. It can also allow hackers total control over an infected PC. As of Tuesday, reports CNET's Insecurity Complex, more than 18,000 CDC messages were being sent out per minute, including over 1 million in the very first hour.

Read more →

Web, Social Networking

Facebook Bikini Worm Hits Spreads via Scantily Clad Woman

Facebook Worm Speads Thanks to Scantily Clad Woman
Good rule of thumb when browsing the Internet: If it looks lurid, promises nudity, or displays scantily clad women, don't click on it.

For some reason or another, many out there haven't yet figured this out and have helped to spread around Facebook a nasty worm that tells users to "Click Da' Button" if they "Wanna C Somthin' HOT." Of course, some men, being the hapless idiots that so many of us are, clicked on the button that sat next to the beautiful, thong-clad woman. As a result, a link to the same infectious page was instantly posted on their Walls, continuing the cycle of misdirection.

Read more →

Web

'Twilight' Content Leaves Scammers Thirsting for Your (Digital) Blood

Malware Makers Cash-In on 'Twilight' Craze
As per usual, malware purveyors are hopping on the latest fad in order to lure unsuspecting Web surfers into their dens of digital evil. And what are the kids talking about right now? Well, 'Twilight,' of course.

With the new installment of the teen vampire saga set to hit theaters Friday, Web searches for interviews with cast members, for bootleg copies of the film, and for other content related to 'The Twilight Saga: New Moon' have sky-rocketed. Using this buzz to their advantage, makers of viruses, trojans, and spyware are embedding malicious code in fake movie files and video streams, and posting the nefarious results.

Read more →

Web, Social Networking

Fake Facebook 'Password Reset' E-Mails Hiding Malware


Facebook's good name is being leveraged for yet another brutal round of malware dispersal. The trojan, Bredolab, is being distributed via e-mails with the subject line "Facebook Password Reset Confirmation". The message generally reads:
Hey (insert username),
Because of the measures taken to provide safety to our clients, your password has been changed.
You can find your new password in attached document.

Thanks,
The Facebook Team
The attachment, a .zip file, will have the name "Facebook_Password_" followed by a short sequence of random numbers and letters. Inside, there is an identically named file, except that it's an .exe (or executable) file instead of an archive. Run that file and you'll be kick-starting a torrent of malware downloads, including a fake anti-spyware program. Bredolab is able to hide by injecting its own code into existing Windows components, and by automatically shutting down if it detects another program (such as an anti-virus package) investigating its activities.

Read more →

Web, Social Networking

Facebook Hit by Fake Profile Scam

Facebook has been beset by its share of scams, hacks, and attacks. The latest breach of security though is particularly worrisome, with fake profiles containing a link to a supposed home video flooding the site. If you click through, you'll be greeted with a piece of malware posing as an anti-virus program that tries to trick you into handing over credit card information to buy fake security software.

What makes this scam unique is that rather than using hijacked accounts, the malware is spreading through software-generated profiles. The existence of these fake accounts, completely identical outside of the name, indicates that hackers have figured out a way to defeat the Captcha system that is meant to keep bots out.

Read more →

Web

Malware Robs Your Bank Account and Then Covers Its Tracks

You might want to keep a closer eye on those bank statements. Hackers have developed a sophisticated and scary program that quickly alters online bank statements in order to hide exactly how much money cyber-crooks have been siphoning from the account.

According to Wired, the malware, called URLZone, infects a computer when the user visits a compromised site, or a site set up by hackers. Then, the program steals the user's bank account log-in information and begins draining funds that it then sends to other designated accounts. However, the victim doesn't realize the money is missing because the program rewrites the text in the html code. So, when the browser displays the page, it looks like either no money has been stolen or just a small amount has been transferred.

Read more →

Computers

Microsoft Launches Free Anti-Virus Tool

Microsoft Releases Free Anti-Virus Tool

Microsoft's new Security Essentials package departed from its beta status yesterday and is now available for free download, in its full-blown form, to anyone in need of some malware protection. Security Essentials protects against viruses, trojans, spyware, and other such cyber-nastiness.

The free download is certified as Windows 7 compatible (as one would expect) and is kept up-to-date via Windows Update just like the OS, meaning that users will have one less piece of software they have to worry about updating. Security Essentials offers basic protection without having as severe an impact on your PC's performance as do more complex (and expensive) suites like those from Symantec, McAfee, or Kaspersky.

Read more →

Computers, Web

Clampi Virus Targets Users at Banks and Credit Card Sites

Keeping up with the latest Web security threats is a daunting task, because viruses and trojans emerge, evolve, and spread at an alarming rate. While some infections like Nine Ball, Conficker, and Gumblar have hit the scene and immediately become the scourge of the cyber security world, others take their time -- quietly infiltrating more and more computers before revealing the true depth of the danger they pose.

One such slow grower is Clampi, a trojan that made its debut as early as 2007 (depending on who you ask) but is only now raising hairs outside professional security circles. Clampi primarily spreads via malicious sites designed to dispense malware, but it's also been spotted on legitimate sites that have been hacked to host malicious links and ads. Using these methods, Clampi has infected as many as half a million computers, Joe Stewart, of SecureWorks, told a crowd at the Black Hat Security Conference in July, USA Today reports.

Read more →

Follow Switched on Twitter

Deals of the Day

Our Writers

Thomas Houston

Editor-in-chief

RSS Feed

Leila Brillson

Managing Editor

RSS Feed

View more Writers

Latest Reviews from CNET.com

CNET provides the latest tech news, unbiased reviews, videos, podcasts, software, and downloads, making tech products easy to find, understand and use.

Top Product Reviews

  • Home Audio Reviews

    9.0 out of 10

    Definitive Technology BPX
    Works great with Dolby Pro Logic and Dolby Digital. Full Review

    8.8 out of 10

    KEF KHT3005 (silver)
    The KEF KHT-3005 is one compact, beautifully designed speaker package with solid aluminum satellites that feature unique driver technology to produce incredible clarity. Meanwhile, the equally astounding dual 10-inch, 250-watt powered subwoofer delivers ultradeep bass. Full Review

    8.8 out of 10

    Aperion Intimus 4T Hybrid SD (cherry)
    Six-piece home theater speaker package with slender towers; compact center and surround speakers; remote controlled subwoofer with adjustable equalization; gorgeous furniture grade real cherry wood or black gloss finishes; 10 year warranty; 30 day in-home trial; free shipping. Full Review

  • Cell Phone Reviews

    8.7 out of 10

    SignalBoost Mobile Professional Amplifier Kit
    The Mobile Professional Amplifier delivers a powerful signal boost to your cell phone. Also, it offers a compact design and easy setup. Full Review

    8.6 out of 10

    Wi-Ex zBoost YX510-PCS-CEL cell phone signal extender
    The Wi-Ex zBoost YX510-PCS-CEL significantly boosts your cell phone reception and is easy to operate. Also, it uses a wireless connection to your phone. Full Review

    8.3 out of 10

    Sanyo SCP-5300 (Sprint)
    Vibrant color display; built-in camera with flash; compatible with Sprint PCS Business Connection software; comes with extended battery; solid call quality. Full Review

  • Digital Camera Reviews

    9.3 out of 10

    Canon EOS 1D Mark III
    Extremely fast, 10-megapixel continuous shooting; very low noise; highly customizable; well-designed body with weather sealing; 3-inch LCD; abundant optional accessories. Full Review

    9.0 out of 10

    Canon EOS-1Ds Mark III
    Very low noise, high quality images; 21.1 megapixels; live view shooting; pro-level build-quality and performance. Full Review

    8.9 out of 10

    Canon EOS 1Ds Mark II (body only)
    Tremendous resolution; professional body; many improvements over original EOS 1Ds; superior handling; optional wireless photo transfer. Full Review

  • Desktop Reviews

    8.9 out of 10

    Velocity Micro Edge Z30 (Intel Core i7)
    Best value among midrange gaming PCs; Velocity Micro's consistently high build quality; compact case makes few sacrifices; second graphics card slot previously uncommon at this price. Full Review

    8.4 out of 10

    Velocity Raptor Signature Edition Gaming PC
    One of the fastest PCs we've tested; a PCI Express RAID card helps media encoding performance; typically immaculate Velocity Micro assembly; strong, three-year warranty. Full Review

Featured Galleries

Lady Gaga at Monster
Lady Gaga at Polaroid
Geneva at Digital Experience
Motorola Backflip: Hands On
Hannspree at CES
Parrot AR.Drone
Chase Jarvis
Nathaniel Mellor
Mario Bros. Wii

 

Switched Desktop

Get the New Switched Desktop

Latest tech news, Switched mail, and more.

AOL Tech Network

Resources

Autoblog

DailyFinance

Download Squad

Engadget

Joystiq

Urlesque

Fanhouse Main

WalletPop

Gadling