NBC website serving malware - stay away!
Posted on 21.02.2013
NBC's website has been compromised, and is redirecting users to malicious sites, reports Dancho Danchev.


According to HitmanPro, the website has been injected with malicious iFrames that lead to one of several compromised sites equipped with Java and PDF exploits.

It seems that upon successful exploitation of one of the vulnerabilities, the users are saddled with variants of the Citadel info-stealing Trojan that currently aren't detected by many AV solutions.

The server with which the malware communicates has already been sinkholed. Nevertheless, if you have visited the news outlet's website today, and your AV hasn't picked up on anything, use a new one to double check - preferably one of these that at the moment do.

Visiting the NBC's website is, for the time being, still dangerous, and even Facebook has moved to protect its users by not allowing the posting of the site's URL.

Danchev has tied the campaign with two previous email ones that impersonated Facebook and Verizon.

UPDATE: NBC has announced that their main website and the other web properties that have been injected with the malicious iFrames have been cleaned.









Spotlight

How to keep your contactless payments secure

Posted on 19 September 2014.  |  Fraudsters can pickpocket a victimís financial data using low-cost electronics that can fit into a rucksack. Here are the top security threats you should be aware of if youíre using a RF-based card, along with our top safety tips to keep your payments secure.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  

DON'T
MISS

Mon, Sep 22nd
    COPYRIGHT 1998-2014 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //