Current “malware” scheme – Be alert and wise!

Wonders they say will never cease! Just when you thought a chapter of cyber-attack is phasing out, you will hear something else brewing, and another chapter opens almost immediately.

Companies have always been fearful of the trails of attack by anonymous, and many were of the opinion they will soon run out of tactics but it seems they just upped their game. More so, it seems a new cyber-attack “god” has stolen the spotlight with a brand-new tactics. Now, organizations have a new war to wage.

Information security's enemy is up!

A reporter by the name Rod Rasmussen reported on www.securityweek.com June 16, 2012 on Black Hole Exploit – A business Savvy Cyber Gang driving a massive wave of attack and I thought to re-echo it.

Moscow, Russia houses the new “god” of a new form of malware (malicious software) attack. He goes by the name “Paunch” as against “anonymous”.  He has browser software called “Black Hole” which is wreaking havoc daily amid world’s largest brands and government organizations.

His software does not steal money or data but it is a leading product in the “browser exploit pack” software category, and he sells these to customers. The exploits kits are installed onto compromised websites, so that when people visit these sites using a vulnerable browser, their computers are immediately attacked. Their tactics of attack is like phishing attack (where an email is sent to a person’s in box with a link to click on and when that person clicks on the link it redirects them to a look-alike site and asked for your personal information) but with a twist to it. The only difference is, these persons will not be redirected to a look-alike site but directed to a “Browser Exploit Pack” (an infested site) which will then infest the unsuspecting victim’s computer with the malware that can steal information and used for their advantage. 

Subscribers or customers to “Paunch” are constantly updated with the latest exploits against programs and browser plug-ins, they do not worry about finding exploits, engineering them or updating them with their code, Paunch does it for them.

Scary! Right? Find the rest of the story on that site I earlier mentioned and arm yourself with good information so you can beat the lion. Be wise about your activities on the internet. That’s all for today, see you next week, hopefully with more news and insight on cyber-attacks.

Let me know your thoughts on this!