WATCH out: hackers are taking advantage of the popularity of Google’s Blogger site to post fake blog entries that link to malware, namely the Storm worm.
Once unwittingly downloaded by users, the malicious code will allow hackers to hijack infected computers.
Here’s an excerpt from the BBC News article:
Infected computers are being hijacked by the gang behind the attacks and either mined for saleable data or used for other attacks.
The Blogger attack is the latest in a series by a gang that has managed to hijack hundreds of thousands of PCs.
Attack pattern
Security researcher Alex Eckelberry from Sunbelt Software first noticed the booby-trapped links turning up on Blogger on 27 August.
Now many hundreds of blogs on the site have been updated with a short entry containing the link.
November 11th, 2008 at 10:02 am
We have to keep out of flogs (fake blogs). Others may hide in fake identities and they are hard to track.
September 2nd, 2007 at 5:20 pm
alarming.. once we thought that some bogus blogs were used to serve those adsense ads, now they come notorious.
August 31st, 2007 at 8:53 pm
[...] Blog Addicts : Hackers unleash Blogger Storm [...]
August 31st, 2007 at 10:18 am
attacks like this is old news it’s just that the miscreants used blogger to trick people to visit an infected site
August 31st, 2007 at 9:10 am
This is nothing new.
Unlike in the old days, viruses and malware today require user interaction to be activated, that’s a big consolation I say. If your machine gets infected you have no one to blame but your careless self.
We should practice defensive computing. Like defensive driving where you always assume that the driver next to you is a moron(he doesn’t know how to drive); each link that you see should be viewed as a bobby trap. Before you click on any, you should hover on top of it and see if the link is what it is suppose to be, if you are uncertain then better don’t click.
We rely too much on software protection when all it takes is common sense and education.