Attack site example attempting to take control of computer 2010_08_19 10:30AM

Attack site example. Social Engineering tricking users. Attempted to trick user to install viruses/trojans/malware. From (now disappeared) security-soft71.co.cc

It is 08/19/2010 at around 10:30AM I was doing a search for 'java valueof' on Google and I clicked a tutorial website, and a redirect took me to a site to trick me to install viruses. When I visited the site that took me there a second time, nothing happened. I was able to keep the url from history though.

As far as I know my computer is clean, I take good care of my windows box, and I believe this attack site was a redirect from a tutorial website that I visited which was compromised. That is how the attackers cover their tracks, by injecting their code into unsuspecting websites.

This is the real mccoy. The site that brought me to the attack page (now offline) was this:

http://www2.security-soft71.co.cc/?p=p52dcWplanKHjsbIo216h4Ve0KCfYWCdU9LXoKit...

as well as:

http://www1.makeptotect72.co.cc/?p=p52dcWplanKHjsbIo216h4Ve0KCfaFbVoKDb2YmHWJ...

The source code .htm only shows a simple .htm page which has nothing meaningful on it, the window was utilizing java applet technology to emulate windows. I was able to save the java code that runs the forgery so maybe there are clues in there.

Firefox "report web forgery" feature was able to catch it in a matter of an hour since I reported it, but that is not a workable solution because I assume the attack site can change by the minute.

Sleep with one eye open cyber criminals! We'll find you the moment you make a single mistake.

Pesky!

Category:

Science & Technology

Tags:

• attack site
• web forgery
• virus
• malware
• trojan
• botnet
• example
• walkthrough

[maeon3]

The name of this virus is "Security Master AV" Virus, and can be detected and removed by most antivirus programs. The purpose is profit for the virus writers, it takes you offline, and does damage to the data on your computer and suggests you pay them to undo the damage they have done. Don't pay them anything, the virus masquerades as an antivirus.

[jameseastick]

this happend 2 me the malware installed itself it was total secirty forgive my spelling



[ChristineThePikachu]

I'm not going to all attack sites or web forgeries.  -The Christine The Pikachu Network.

[ChristineThePikachu]

@IHateYourJoy: No.

[IHateYourJoy]

so, if you click "ok" then you will safe?

[deepakdavidc]

I had this ahhhhh