Waledac spammers fake ‘bomb blast’ news story

Malware authors use geolocation technology to make the attack more convincing and persuade users to click on malicious links.

Security vendors have warned about a new social engineering attack that delivers fake news stories linking to malware.

The new attack tries to persuade users to watch a maliciously crafted fake Reuters video of a bomb attack' by downloading a version of Flash player, which is in reality malware.

The Waledac trojan had previously targeted users through Valentine's spam in February.

However, this attack appears to be particularly clever, as the malicious websites have been engineered using geolocation technology to report the location of the incident to correspond with the user's IP address. "Don't be fooled by the location. The site is running a couple of clever scripts," said Rik Ferguson of Trend Micro on the company's security blog.

"One of them will detect the location of your IP address and vary the location of the disaster accordingly. The other will vary the name of the downloaded file (news.exe, save.exe, run.exe etc.)"

He said it was further evidence that botnet authors were actively filling the void left behind by the fall of the Storm botnet and the McColo server takedown.

Security vendors Sophos and Websense also reported the attacks.

Featured Resources

B2B under quarantine

Key B2C e-commerce features B2B need to adopt to survive

Download now

The top three IT pains of the new reality and how to solve them

Driving more resiliency with unified operations and service management

Download now

The five essentials from your endpoint security partner

Empower your MSP business to operate efficiently

Download now

How fashion retailers are redesigning their digital future

Fashion retail guide

Download now

Recommended

New malware uses search engine ads to target pirate gamers
malware

New malware uses search engine ads to target pirate gamers

21 Jul 2021
HackBoss malware is using Telegram to steal cryptocurrency from other hackers
cryptocurrencies

HackBoss malware is using Telegram to steal cryptocurrency from other hackers

16 Apr 2021
Sophos XG 230 Rev.2 review: Powerful and flexible
unified threat management (UTM)

Sophos XG 230 Rev.2 review: Powerful and flexible

1 Apr 2021
Sophos Central Endpoint Protection review: Because you’re worth it
endpoint security

Sophos Central Endpoint Protection review: Because you’re worth it

3 Aug 2020

Most Popular

The benefits of workload optimisation
Sponsored

The benefits of workload optimisation

16 Jul 2021
Samsung Galaxy S21 5G review: A rose-tinted experience
Mobile Phones

Samsung Galaxy S21 5G review: A rose-tinted experience

14 Jul 2021
IT Pro Panel: Why IT leaders need soft skills
professional development

IT Pro Panel: Why IT leaders need soft skills

26 Jul 2021