Malware distributed by fake parking tickets
Summary
Topics
The flyers were fake parking violation notices, and instructed people to visit a website (which SANS did not publicize). Once they visited the website, they were infected with a malicious browser helper object.
From the post:
"The initial program installed itself as a browser helper object (BHO) for Internet Exploter that downloaded a component from childhe.com and attempted to trick the victim into installing a fake anti-virus scanner from bestantispyware securityscan.com and protectionsoft warecheck.com."
Interesting - I've never heard of windshields as an attack vector.
This blog, Infection began with a windscreen flyer, was originally posted on ZDNet.co.uk.
Talkback Most Recent of 19 Talkback(s)
-
One question...
Does this only affect Windows windshields, or are Macintosh windshield still safe?
Metronome494th Feb 2009 -
My car has a Linux windshield
It is safe from malware, but it has to be washed by hand. On the other hand, it comes in three different shapes...
barence7734th Feb 2009 -
Well it seems that linux is not that safe anymore either
Assuming you're safe from viruses and other malware just because you are on a non-Windows platform is a big mistake, as the number of Linux-based malware doubled in 2005, and Mac OS X is next to get hit, according to a report from Kaspersky Labs.
In a report titled "2005: *nix Malware Evolution," the Russian antivirus software developer pointed out that the number of Linux-based malicious programs -- viruses, Trojans, back-doors, exploits, and whatnot -- doubled from 422 to 863.
http://www.internetnews.com/dev-news/article.php/3601946
rparker0095th Feb 2009 -
One in every crowd
You're the wet blanket Frank Gifford to the Al Michaels and Dan Dierdorf jocularity here, aren't you.
ejhonda6th Feb 2009 -
RE: Malware distributed by fake parking tickets
Good example of devious but resourceful social engineering.
dreampod4th Feb 2009 -
this just in...
"Malware distributed via Morse Code over Short Wave Radio. Fortunately it only affected three 100-year-old men, who didn't know how to use a computer or what a website was anyways."
Just kidding, but that would be funny wouldn't it?
Larsix4th Feb 2009 -
RE: Malware distributed by fake parking tickets
LOL... Using Windshields to attack Windows! Classic!
Not that any Malware is funny no matter how it gets there...
crash894th Feb 2009 -
RE: Malware distributed by fake parking tickets
Who in the world would do something like this? And notice to the people out there: a parking ticket has a PHONE NUMBER OR ADDRESS you have to call or go to, respectively..... you shouldn't EVER have to go online to do anything in regards to these, at least as far as I have heard from people who WRITE the tickets.
Lerianis4th Feb 2009 -
Online payment of parking tickets
"you shouldn't EVER have to go online to do anything in regards to these, "
.
???? I've been going online to pay my parking tickets (well, mostly my son's - grrr) for years now.
dfreeman@...5th Feb 2009 -
Not true anymore
In some cities in CA you have the option to pay the ticket online. And they put a website on the ticket as well as an physical address and a phone #.
But going to a website that tells me to download software would definitely throw a red flag.
tikigawd5th Feb 2009 -
It's a BHO so Windows Only
And even IE/Windows only at that. BHO's are more of MS's "Features" that are nothing short of lunacy.
itguy085th Feb 2009 -
Ha
Nice, it's the web version of leaving a floppies labeled 'salaries.xls' (but
really full of malware) at banks around the city
Gritztastic5th Feb 2009 -
RE: Malware distributed by fake parking tickets
I guess the automobile manufactures could be held liable for making defective firewalls.
dfreeman@...5th Feb 2009 -
Lmao
That's the first intelligent and actually funny post i've seen on this blog...good one!
tybren1@...5th Feb 2009 -
Firewalls...
Now that's funny.
Joker_TX5th Feb 2009
Talkback - Tell Us What You Think
The best of ZDNet, delivered
ZDNet Newsletters
Get the best of ZDNet delivered straight to your inbox




