Java drive-by generator used in recent attack
Posted on 09.05.2012
A malware delivery campaign that doubles its infections efforts to really make sure the users get compromised has been recently spotted by F-Secure researchers.

One of them landed on a website that poses as a "Gmail Attachment Viewer", which tries to make the visitor run the offered application.

The pop-up warning from Windows identifies it as a "Microsoft" app but says that the app's digital signature cannot be verified and that the app's publisher is "Unknown".

If the user does choose to run the app, he is faced with a Cisco Foundation invitation to attend a conference, while the download and the quiet installation of a malicious binary is performed in the background.

Curiously enough, the message contains an embedded link that, if clicked, again tries to download the same malware.

The researcher does not mention how she ended up on the site in question in the first place, and what type of malware is actually pushed onto the user, but points out that the infection is generated using iJava Drive-by Generator:


"The generator allows the attacker to use random names or specify their own preference for both the Java file and the dropped Windows binary," the researcher explains, and points out that the helpful tool also indicates to the attackers how many infections has the delivered malware effected.






Spotlight

How to keep your contactless payments secure

Posted on 19 September 2014.  |  Fraudsters can pickpocket a victimís financial data using low-cost electronics that can fit into a rucksack. Here are the top security threats you should be aware of if youíre using a RF-based card, along with our top safety tips to keep your payments secure.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  

DON'T
MISS

Mon, Sep 22nd
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //