Waledac spammers fake ‘bomb blast’ news story
Malware authors use geolocation technology to make the attack more convincing and persuade users to click on malicious links.
Security vendors have warned about a new social engineering attack that delivers fake news stories linking to malware.
The new attack tries to persuade users to watch a maliciously crafted fake Reuters video of a bomb attack' by downloading a version of Flash player, which is in reality malware.
The Waledac trojan had previously targeted users through Valentine's spam in February.
However, this attack appears to be particularly clever, as the malicious websites have been engineered using geolocation technology to report the location of the incident to correspond with the user's IP address. "Don't be fooled by the location. The site is running a couple of clever scripts," said Rik Ferguson of Trend Micro on the company's security blog.
"One of them will detect the location of your IP address and vary the location of the disaster accordingly. The other will vary the name of the downloaded file (news.exe, save.exe, run.exe etc.)"
B2B under quarantine
Key B2C e-commerce features B2B need to adopt to surviveDownload now
The top three IT pains of the new reality and how to solve them
Driving more resiliency with unified operations and service managementDownload now
The five essentials from your endpoint security partner
Empower your MSP business to operate efficientlyDownload now
How fashion retailers are redesigning their digital future
Fashion retail guideDownload now