Bad News Offers Opportunity to Spread Malware
Thursday June 25, 2009 at 3:26 pm CST
Posted by Guilherme Venere
With the current news about the deaths of Farrah Fawcett and Michael Jackson, it’s a good idea to remind our readers to beware of blackhat attempts to distribute malware to anyone looking for news.
Every time a disaster happens or news about some celebrity reaches the media, malware writers try to take advantage of it. The most common attack vector is email. Watch out for spam offering links to “news” or “pictures” of deceased celebrities. Most of the time, they will take you to websites offering advertisements for pharmacy products such as Viagra and Cialis or, even worse, will try to install malware on your machine!
But another way to attract visitors looking for news is a technique known as search engine optimization (SEO for short, see more here). Blackhats use SEO to inflate search engine results in an attempt to put their results on top of the list and drive more users to fake websites offering “more information” about the current trendy news. When the users click on the fake links, they are susceptible to any kind of attack, spyware or malware installation, or information theft.
A good way to protect against this kind of attack is to use our SiteAdvisor tool, which can be downloaded for free at this site: http://www.siteadvisor.com/. It will help you identify potentially malicious links on your search results.
And again, repeat with me: No, that email will NOT show you pictures of Michael Jackson’s body; it will just install malware on your machine.

June 25th, 2009 at 16:23
[...] brought back into reality, McAfee Avert Labs colleague Guilherme Venere posted a very timely warning that it won’t be long before cybercriminals will take advantage of the news to attempt to [...]
June 25th, 2009 at 18:21
I think a good practice is to block Michael Jackson and Farrah Fawcett phrases in all inbound e-mail.
June 26th, 2009 at 11:42
[...] McAfee warned in a blog post that pass-around emails about the deaths could contain code. And whatever you do, don’t click on the emails that say “pictures of dead Michael Jackson.” [...]
June 26th, 2009 at 17:08
[...] “Every time a disaster happens or news about some celebrity reaches the media, malware writers try to take advantage of it,” wrote McAfee researcher Guilherme Venere in a blog posting. [...]
June 27th, 2009 at 04:49