Beware malicious festive tweets
SECURITYBy BiztechAfrica - Dec. 7, 2010, 10:45 a.m.
Global IT vendor Panda Security warns that cyber-criminals are exploiting Twitter to spread malware in festive-themed messages.
Using methods akin to Black Hat SEO techniques, hackers are taking advantage of trending topics to position malware distribution campaigns.
Topics such as “
or even “
, are among the most popular subjects used by hackers to entice users.
Panda says thousands of tweets have been launched using festive-themed phrases, such as “ Nobody cares about Hanukkah” or “ Shocking video of the Grinch” , along with short URLs pointing to malicious websites.
Users who click the link will be taken to a page that infects systems with false codecs by exploiting a security hole in PDF files and tries to trick users into downloading a codec that is really a downloader Trojan, which in turn downloads more malware onto the compromised computer.
In addition to subjects related to Christmas, cyber-criminals are using other hot topics to spread their creations, including the Sundance festival, the AIDS campaign and the Carling Cup.
According to Jeremy Matthews, head of Panda’ s sub-Saharan operations, “ Social networks like Facebook and Twitter are becoming increasingly popular with hackers because of their ever-increasing number of users, and the ease at which they (the hackers) can post malicious links. That’ s why the number of clicks, and therefore infections, tends to be very high.”
Keep your computer safe this Christmas
With the increased risk over the Christmas period, Panda offers users a series of practical security tips for using social media:
1) Don't click suspicious links from non-trusted sources. This should apply to messages received through Twitter, through other social networks and even via email.
2) If you click on the links, check the target page. If you don't recognize it, close your browser.
3) Even if you don't see anything strange in the target page, but you are asked to download something, don't accept.
4) If you do download or install an executable file and the PC starts to launch messages or behaves strangely, there is probably malware on your computer. In this case, you should check your computer with a free online scanner such as ActiveScan, available at: www.activescan.com
5) As a general rule, make sure your computer is well protected to ensure that you are not exposed to the risk of infection from any malicious code. You can protect yourself with the new, free Panda Cloud Antivirus solution (www.cloudantivirus.com).
“ It is important to remember that hackers will take advantage of any big holiday or event, which is why it is important to remain extra vigilant during these times” , concludes Matthews.
For more information about Panda, visit http://www.pandasecurity.com/
MORE SECURITY NEWS
Cyber security concerns for 2014 and beyondMobile threats, targeted attacks and vulnerabilities for the Internet of Everything have been highlighted in Trend Micro’s annual security predictions report. Read More
Corporate cyber security threats of the year91% of organisations polled suffered a cyber-attack at least once in the past year, says Kaspersky Lab in its security review of 2013. Read More
Managed security services grows in EMEAThe managed security services market in EMEA is experiencing rapid growth as the proliferation of targeted cyber attacks compel organisations to turn to MSS providers for their security needs, says Frost & Sullivan. Read More
Expert predicts ‘doom’ for corporate GhanaA cybercrime expert has warned that urgent steps must be taken to address the ‘incessant cybercrimes' impacting corporates in Ghana. Read More
Q3 2013 sees alarming growth in data threatsThe third quarter of 2013 was a turning point for malware writers specialising in mobile platforms, says Kaspersky Lab. Read More
Fortinet illustrates need for real world firewall testingSecurity solutions firm Fortinet has illustrated the significant difference in performance achieved by various Next Generation Firewalls under real world conditions. Read More
Cyber Security Africa to host the 2nd East Africa IT & Cyber Security ConventionAfter the success of the inaugural East Africa IT & Cyber Security Convention last year, the global event series for heads of ICT and security enters its second year. Read More
New guidelines for securing card dataThe international PCI Security Standards Council (PCI SSC) has published version 3.0 of the PCI Data Security Standard (PCI DSS) and Payment Application Data Security Standard (PA-DSS). Read More
ARM, NetClean partner to stop child abuse contentSpecialist security distributor African Risk Mitigation (ARM) has partnered with NetClean in the fight against the proliferation of child sexual abuse images across Africa. Read More
FEATURED STORYGaming app introduces investors to trading
A new virtual stock market app is equipping would-be investors with the skills they need to trade.
BEST READ NEWS
IN DEPTHCorporate cyber security threats of the year
91% of organisations polled suffered a cyber-attack at least once in the past year, says Kaspersky Lab in its security review of 2013.
COMPANY NEWSSamsung, 49M embark on consumer educational drive
Samsung Electronics South Africa has announced a national consumer education campaign in support of the 49M initiative, offering practical actions to save energy in daily life.