Samoan Tsunami used in new cyber attack

'SEO poisoning' increasingly being used to target victims

Cyber criminals are again wasting no time on capitalising on public interest in major news events with a new phishing attack being reported based on the recent Tsunami hitting Pacific Island nations.

F-secure has reported that search engine optimisation (SEO) poisoning is again being used to to lure people into downloading a rogue antivirus agent.

“It seems SEO poisoning is the current 'trend' for directing users to rogue antivirus software,” the company’s security blog reads.

“These SEO poisoning attacks usually exploit major news topics, the latest of which is the September 29th earthquake off Samoa, which triggered a tsunami warning for numerous South Pacific islands, as well as Hawaii.”

The company reports that readers looking for news articles on the earthquake may come across this page in the Google search results with a ‘treemccoy.com’ based address. Clickin on these links leads to redirection to a “your PC is infected” type warning which encourages the download of the rogue AV.

F-Secure also reports that Twitter is also being used to direct people looking for tsunami news to rogue AV.

In related news, F-Secure is also reporting that World of Warcraft users are being targeted by phishing attacks offering players a free trial mount (an animal to travel about on in the game).

Players are directed to a phishing website which looks exactly like the real worldofwarcraft.com login page, according to the company.

“A player entering his details into the page expecting to get a mount basically gets his account pwned instead,” the blog posting reads. “Apart from losing all the gold and items saved, a compromised account could also be used to send out the malicious messages to other victims, adding insult to injury.”

Earlier this month F-Secure reported that hackers were continuing to exploit Patrick Swayze’s death with a trap claiming to be a video of the actor's funeral.

Email Computerworld or follow @computerworldau on Twitter.

More about: F-Secure, Google, Island
References show all

Comments

Post new comment

The content of this field is kept private and will not be shown publicly.
Users posting comments agree to the Computerworld comments policy.
Login or register to link comments to your user profile, or you may also post a comment without being logged in.
Related Coverage
Related Whitepapers
Latest Stories
Community Comments
Tags: SEO poisoning, security, phishing, f-secure
Whitepapers
All whitepapers
Sign up now to get free exclusive access to reports, research and invitation only events.
Featured Download

Computerworld newsletter

Join the most dedicated community for IT managers, leaders and professionals in Australia