August 26, 2009 – 9:21 am
By Andrew Brandt
The body’s barely cold from last week’s BlizzCon, but the script kiddies who write phishing kits have been hard at work putting their best foot forward, crafting account-stealing code that targets gullible WoW players who want an early peek at the just-announced Cataclysm expansion. These Catphish pages, linked off of YouTube video postings [...]
August 21, 2009 – 2:50 pm
By Andrew Brandt, Curtis Fechner, and Grayson Milbourne
Yesterday, at the opening of our BlizzCon coverage, we showed you just how commonly phishers target WoW players by posting innocuous-looking links in message board or forums frequented by players. Today, we’ve produced a really short video that shows exactly how someone infects their computer with a phishing [...]
By Andrew Brandt
|
Posted in Gaming threats, Phishing Trojans, Stupid malware tricks, Threat Research
| Tags: blizzard, blizzcon, Defense of the Ancients, DotA, game phishing, malmaps, malware, phishing, Phishing Trojans, World of Warcraft, WoW |
August 20, 2009 – 3:28 pm
By Curtis Fechner and Grayson Milbourne
Tomorrow morning, Blizzard Entertainment (the publisher of the wildly popular World of Warcraft franchise) will kick off another BlizzCon to show off their latest projects and directly interact with their fanbase. World of Warcraft will likely take center stage at the convention, which has become the venue of [...]
August 14, 2009 – 11:54 am
By Andrew Brandt
The latest generation of Koobface targets its particularly effective brand of social engineering at more social networks than ever. As the worm has evolved, we’ve seen it grow to encompass a pantheon of services, targeting more than just the widely publicized Facebook, MySpace, and Twitter, but a host of other Web sites where [...]
By Andrew Brandt
|
Posted in Stupid malware tricks, Threat Research
| Tags: bebo, facebook, friendster, fubar, hi5, Koobface, malware, myspace, MyYearbook, netlog, tagged, twitter, worm |
By Andrew Brandt
In the past week, we’ve begun to see new fakealerts — those disturbingly effective, entirely bogus “virus warning” messages — that appear to impersonate the appearance and text of legitimate warning dialogs you might see while surfing with the Firefox browser, or searching Google. The dialog, in a stern, red dialog box on [...]
By Andrew Brandt
|
Posted in Rogue Security Products, Stupid malware tricks, Threat Research, adware
| Tags: fakealert, Google Safe Browsing Advisory, malwareurlblock, malwareurlblock.com, Personal Antivirus, rogue antivirus, rogue security product, Visiting this site may harm your computer |
August 4, 2009 – 10:15 am
By Andrew Brandt
A phishing campaign that started around the beginning of the year, targeting gamers who use Valve Software’s Steam network, continues unabated but with a twist: The phishers have registered dozens of domain names, such as trial-steam.tk or steamcommunity###.tk (where the ### can be a two or three digit number), which are used to [...]