Share

Related Links

Related Stories

  • Security firms warn of bogus job search emails
    Security vendors – including Websense and Sophos – have sent up a red flag about suspect emails targeting human resources staff. The messages apparently contain zip files that, when opened, infect users’ PCs with rouge anti-virus.
  • Google users targeted by new malicious websites
    Network security company eSoft’s threat prevention team has discovered new malware sites specifically targeting users of Windows operating system and Google.
  • From the Eye of the Storm: 2011 Information Security Predictions
    Last January, Infosecurity magazine published prognostications by the (ISC)² Advisory Board of the Americas (ABA) regarding the information security field in 2010. Unlike many who have attempted to envision the future, the ABA has gone back and reviewed the accuracy of its predictions and provided a letter grade for each. The ABA will then offer new predictions for 2011.
  • The art of social engineering
    Social engineering is not new and it’s here to stay. Kevin Townsend looks at how social networking is a social engineer’s best friend and asks what we can do to protect ourselves from this very real – and very personal – threat
  • Comment: Myths Plague Perceptions of Mobile Malware
    Trusteer’s Amit Klein takes a closer look at mobile malware, exploding the myths and dispelling the fantasies

Top 5 Stories

News

Cybercriminals exploit Google Groups

13 May 2010

Cybercriminals are using Google Groups to distribute rogue anti-virus software and other malware, according to researchers at security firm eSoft.

The attackers are sending e-mails to Google Groups members asking them to update their e-mail settings by following linked instructions.

The links take users to a fake Google Groups page that infects visitors' PCs with a Trojan that downloads malicious software, including rogue anti-virus program 'Desktop Security 2010'.

The rogue software runs a fake PC scan, notifies the user that the PC has been infected and then prompts the user to buy software to remove the threat.

The malware is designed to trick users into handing over their credit card details and other personal information to purchase the bogus software.

The eSoft researchers said the use of community sites like Google Groups and Windows Live is becoming commonplace for cybercriminals looking to get the upper hand on web and spam filters.

Web filtering with real-time URL lookups is the most effective way to combat these threats, they said.

eSoft is flagging compromised Google Groups pages as they are discovered, and blocking other sites involved with this attack, the firm said.

This story was first published by Computer Weekly

This article is featured in:
Internet and Network Security • Malware and Hardware Security

 

Comment on this article

You must be registered and logged in to leave a comment about this article.