|
Extortion attempts from hackers on the increase
30 May, 2005
by Mark Cox
PandaLabs has reported the appearance of a new kind of spyware,
SpywareNo, which urges users to buy a solution to counteract
false infections. This new strain of malware comes on top
of other similar threats reported in previous weeks, in what
would seem to be a wave of attempted extortions on computer
users.
After the attacks in recent weeks of PGPCoder, a Trojan that
encrypted files with certain extensions and then demanded
a sum of money to reverse the process, or Topspyware, spyware
that behaved in a similar way to the current threat, SpywareNo
joins the list of what has been dubbed "ransom-ware",
i.e., malicious software used by its creator to demand ransoms.
SpywareNo exploits browser vulnerabilities to download onto
users' computers when they visit certain adult or pirate websites.
The visible symptoms of infection are apparent immediately.
When installed on a PC, it creates an icon both in the desktop
and the system tray warning of a false infection by spyware.
It also alters the registry to ensure that the malware is
run on every system startup.
After a time, it displays a message on-screen warning of
the dangers of spyware and inviting users to buy the full
version of the product to disinfect the computer. If users
fail to register, this commercial software will 'detect' threats
that don't actually exist on the computer, and which will
'disappear' as soon as users pay for the product. On the Web
site of the commercial software used for this extortion, it
is possible to download a trial version of the product.
"Malware creators are increasingly motivated by the
potential financial benefits. In addition to PGPCoder, Topspyware,
and now SpywareNo, over the last few weeks we have also seen
regular attacks against users of online banking services,
through phishing techniques or intrusions on computers to
monitor their actions," said Luis Corrons, director of
PandaLabs. "Users themselves are the main victims, as
if they are not adequately protected, they are exposed to
a continual bombardment of these types of threats and it is
difficult to constantly emerge unscathed."
|
