Share

Rick Robinson

Job title:
CTO and vice president, eSoft

Areas of expertise:
Applied cryptography, PKI, identity and access management (authentication, authorization, and auditing), secure data transport, and system hardening and protection

Biography:
Rick Robinson has over ten years of experience in the computer security sector, including development of secure embedded computers, secure remote access, secure networking design, and secure system architecture. Throughout his career, he has regularly worked with Fortune 500 customers, providing security strategy and guidance. Robinson is a recipient of the prestigious Avaya Labs Cup Award and has been named on four USPTO patents in the area of computer security with additional USPTO application submissions in process. He possesses CISSP and ISSAP certifications from (ISC)2. In addition, he is an IEEE Senior Member, Past-Chair of the IEEE-Denver Section, Member of IEEE Security and Privacy Society, Member of the IEEE Computer Society, and Member of the IEEE Critical Infrastructure Protection Committee. Robinson holds BS and MS degrees in electrical engineering from Montana State University with an emphasis in computer engineering, and is completing his Executive MBA from the University of Colorado.

Tag Cloud

Bloggers

Blog

Boeing 787 searches hijacked by rogue anti-virus

Today, the Boeing 787 Dreamliner jet completed its much awaited first flight. As users searched to find videos and news articles related to the story, blackhats quickly moved in for yet another attack against Google search results.


The most popular search for several hours today was “787 first flight video”. This search and related searches are saturated with malicious results leading to rogue anti-virus and potentially other malicious payloads.

At peak hours, five out of the first nine results lead to malicious payloads, as users were pushed through a series of redirect pages and to different distribution points.

While the distribution points and payloads varied, their effectiveness did not. Most sites were undetected by Google Safe Browsing and the malicious payloads they delivered had very low anti-virus detection rates.

This latest attack is nothing new, but it is shocking how quickly and effectively cybercriminals are able to react to the latest news trends. In this particular attack, the dangerous top results seemed to be compromised sites with existing reputations which makes detection much more difficult.

Posted 16/12/2009 by Rick Robinson

Tagged under:Web Security,Rogue AV,Google Search,Blackhat SEO

Comment on this blog

You must be registered and logged in to leave a comment about this blog.