Jan6
9:00 pm (UTC-7)   |   by Jake Soriano (Technical Communications)

Here’s another case to illustrate the importance of installing security updates, installing them in a timely manner, and installing not just OS updates, but those for third-party software applications as well.

Taking advantage of system vulnerabilities — most often the result of missing, or uninstalled, patches — malware authors are continually taking advantage of websites that have significantly high traffic (and this everyone knows) to target unsuspecting users.

Social networking site MySpace is reportedly said to be laced with banner ads that install malicious programs and files. Trend Micro detects some of these files as employing encryption similar to known variants of RBot, SDBot, and SPYBot malware.

This would not be the first time that MySpace has been compromised.

In November last year, TrendLabs analysts found pages of the social networking site embedded with codes that redirect users to malicious sites.

Similar banner ads were found on the popular search portal Excite.com. Brian Krebs of the Washington Post wrote that there are ads on the Web site containing malicious code, which redirects users to a page that tries to install a malware informing users of a bogus system infection, and then urges them to purchase the software that can “clean” the supposed infections.

The German Web site Blick was reported to have these same malicious banner ads as well.

Social networking sites have been targets of malware authors for a while now because of the large number of people who use them. Users are always reminded to exercise caution in their social networking activities online. And again, everyone is reminded to install all the necessary patches once they are available.

If you're new here, you may want to subscribe to our RSS feed. Thanks for visiting!




4 Responses to “MySpace, Excite, and Blick Serve Up Malicious Banner Ads”

  1. Malware-Banner beim «Blick» » BloggingTom Says:

    [...] Gemäss Trend Micro wurde über die Werbebanner versucht, Trojanische Pferde wie RBot, SDBot und Spybot auf dem Computer des Nutzers zu installieren. Zudem wollten die schädlichen Werbebanner dem Anwender eine nutzlose Software namens PerformanceOptimizer unterjubeln, die Fehlalarme über entdeckte Schädlinge produziert und die vermeintlichen Funde erst nach einer Zahlung der Registrierungsgebühr entfernt. [...]

  2. BloggingTom Says:

    Hintergründe zum Malware-Banner beim «Blick»…

    Bis letzten Dienstag ging ich davon aus, dass Werbebanner, die den User auf eine gefährliche Seite umleiten und ihm Schadsoftware, Trojaner oder ähnliches unterjubeln wollen, ein nicht sehr verbreitetes Phänomen sind. Doch da habe ich mich gründli…

  3. Zero Day mobile edition Says:

    [...] that took place in February which were targeting popular sites as Expedia, Excite, Rhapsody and MySpace. The only thing the malvertisers keep changing are the fake security software domains that they [...]

  4. Scareware pops-up at FoxNews | Zero Day | ZDNet.com Says:

    [...] properties that have been historically affected by much more malicious malvertising incidents (e.g. MySpace, Excite, Expedia, Rhapsody) continuously expanding, maintaining a decent situational awareness next [...]



© Copyright 2009 Trend Micro Inc. All rights reserved. Legal Notice