Forest fire
Fake stories about the California fires are luring users to malicious sites

Malware writers exploit California wildfires

Malicious pages targeted at users looking for news updates

Shaun Nichols in San Francisco

A number of malicious web pages have surfaced in an attempt to infect the computers of people seeking news on the California wildfires.

Researchers at security firm Sophos said that the attacks use search engine optimisation techniques to attempt a number of different tricks to infect users with malware.

Tailoring web pages to reflect popular search terms, such as names and locations of the events, allows malware writers to push their pages higher on Google search results. When users search for information on the fires, the seemingly legitimate pages appear as results.

Sophos said that a number of different methods are being used to install malware once the victim lands on the attack pages. Some sites have been using fake security alert messages which instruct the user to download a file, while others offer a video which requires a special 'codec' to run.

In both cases, the download turns out to be a Trojan application which then infects the user with malware.

None of the attack methods is new. Malware writers have been using current events as malware lures for years, and the tracking of popular search terms to target attacks has become a popular tactic in recent months.

"Sadly, hackers follow the headlines with just as much interest as the rest of us, but with more malice in mind," wrote Sophos senior technology consultant Graham Cluley in a blog post.

"It's only natural that concerned members of the public will turn to the internet at a time like this to find out the latest information on a disaster, or will hunt online for the latest maps to see the spread of the inferno."

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Do you agree?

Further reading

Trend Micro

Trend Micro ups web gateway protection

New solution combines InterScan appliance and reporting module

M86 Security

Marshal8e6 rebrands and updates security tools

The newly branded M86 Security announces WebMarshal 6.5

Vulnerabilities falling but malware booms

ISS X-Force survey finds some good news, and a lot of bad

Smartphone users ignoring malware threats

Half of users encountering mobile malware fall victim, according to Trend Micro

Related white papers

Related jobs

Most watched

Nokia N8

Nokia N8 video demo

Handset maker gives an early look at its first Symbian^3 smartphone

Motorola Milestone 2

Motorola Milestone 2 video demo

Android 2.2 comes to Milestone line

Analysis and Reports

Best practices to secure and protect backup data
Exploding the myths about data security and backup encryption

Using data integration to drive down costs and increase profits
This paper outlines why data integration is an important weapon in an enterprise’s competitive arsenal

Poll

VMworld 2010 poll

VMworld 2010 poll

How advanced is your firm's cloud computing strategy?

View poll results

White paper library

Attachmate

Smartstream

Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you thousands of white papers, case studies and analyst reports.

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Spotlight

Digital Britain

Innovation key to UK broadband take-up

Services like Project Canvas are vital, say experts

Amazon Kindle 3

Amazon Kindle 3 e-book reader review

Amazon trims the size and price of its newest Kindle,...

sas logo

SAS offers easy-to-use predictive analytics

Rapid Predictive Modeler designed to aid enterprise decision making

First impressions of Huawei's Ideos handset

Huawei's Ideos smartphone, announced today , is claimed by the...

Primary Navigation