Trend Micro Facebook TrendLabs Twitter Malware Blog RSS Feed You Tube - Trend Micro
Search our blog:

  • Mobile Vulnerabilities

  • Zero-Day Alerts

  • Recent Posts

  • Calendar

    August 2015
    S M T W T F S
    « Jul    
  • Email Subscription

  • About Us

    News outlets all over the world are talking about the recent cross-border clash between North and South Korea. The shelling, one of the worst incidents between the two countries in years, is naturally being used by cybercriminals behind fake antivirus malware.

    Within hours of the incident, certain Korea-related search terms have already been poisoned.

    Click for larger view

    Note that the Google preview of the page shows its supposed content. However, clicking the search result offered opens these (familiar) pages:

    Click for larger view Click for larger view

    This malware redirects users to different pages, depending on what browsers they are using, as discussed in the following previous posts:

    Fortunately for users, we already protect users against this threat. The sites hosting these malicious files are already blocked and the fake antivirus variant seen in this attack is now detected as TROJ_FAKEAV.SMRY.

    Share this article
    Get the latest on malware protection from TrendLabs
    Email this story to a friend   Technorati   NewsVine   MySpace   Google   Live   StumbleUpon


    © Copyright 2013 Trend Micro Inc. All rights reserved. Legal Notice