NEWS - April 18, 2013
by Carol~ - 4/18/13 10:27 AM
Warning! Hackers are exploiting Waco explosion news to spread malware
Once again, cybercriminals are leaping at the opportunity to take advantage of breaking news stories to spread malware.
The latest example, coming just days after malware authors exploited interest in the Boston Marathon bombings, concerns the fatal explosion in Waco, Texas, of a fertiliser plant.
Here's an example of one of the malicious emails intercepted by SophosLabs, with the subject line "CAUGHT ON CAMERA: Fertilizer Plant Explosion Near Waco, Texas". [Screenshot]
Other messages have been seen using the subject line "Raw: Texas Explosion Injures Dozens".
Clicking on the link contained inside the emails takes unsuspecting computer users to a webpage that contains a series of embedded YouTube videos. [Screenshot]
Harmless enough, you might think. However, the webpage also contains a 640x360 pixel iFrame, that attempts to suck in malicious content from another site, designed to infect your computer. The attack uses the Redkit exploit kit to take advantage of vulnerabilities on visiting PCs in order to infect them with malware.