Technology news and Jobs 
VIRTUALISATION Riding the Net risks drive-by malware download attack
VIRTUALISATION Riding the Net risks drive-by malware download attack | Riding the Net risks drive-by malware download attack |
|
| by Peter Dinham | |
| Tuesday, 07 July 2009 | |
|
Page 1 of 2   
Featured Whitepaper
5 Best Practices for Smartphone Support
Kaspersky says Gumblar.a is a small encrypted script which, when executed, redirects the user to a malicious website, where a series of vulnerabilities is then exploited to download a malicious executable file from the website and install it on the user’s computer. Once installed, the file affects the user’s web traffic by modifying Google search results, and according to Kapersky, it also searches the computer for passwords to FTP servers in order to infect them. The result, says Kaspersky, “is a botnet of infected servers created by cybercriminals which can be used to download any type of malicious program to users’ computers. The number of infected servers is enormous and, furthermore, the malware is still spreading to unprotected computers.” Another notable example of drive-by download malware cited by Kaspersky is a Trojan-downloader program, LuckySploit.q, which is in third place in the second ranking and is also present in the first top 20. Kaspersky says LuckySploit.q is a skillfully obfuscated script, which first harvests browser configuration data from the user’s computer. It then encrypts the data using an RSA public key and sends it to a malicious website. CONTINUED page 2 |
| < Next story in category | Previous story in the category > |
|---|
