The assassination of former Pakistan prime minister Benazir Bhutto has become
the latest hook to lure users to malicious websites.
Researchers at security firm
McAfee said
that attackers were embedding blog pages with URLs for malicious sites that
claim to offer a video of the killing.
Advertisement
Users who attempt to view the video are prompted to download what the site
claims is a codec file needed to 'translate' the video.
The 'codec' is actually a Trojan program that installs malware on the user's
system.
Other sites then attempt to exploit a previously patched flaw in Internet
Explorer to install the malware.
The use of major news events as a means of spreading malware is not uncommon.
The infamous
Storm worm
surfaced early last year as an attachment to fake emails about flooding in
Europe.
The use of fake codecs is also a common tactic for spreading malware.
Attackers will often use the promise of pornographic videos to lure users into
downloading and installing Trojans.
The recent MacOS X
Trojan was one such example of such an attack, using the fake video files to
deliver a DNS changer.
Comments
Have your say on this article