Fake smut codec ruse used to punt Google Pack
Malware loaded on kosher tool
Posted in Enterprise Security, 12th November 2007 14:01 GMT
Webcast: Building Applications for the 21st Century
Disguising Trojan horse malware as video codecs has became a favourite trick for hackers. The ruse allows malware authors to bait their enticement with the promise of free porno clips or the like.
Last week, the approach was used by a rogue affiliate to offer Google Pack. The site has since been pulled. Anti-spyware firm Sunbelt speculates that hackers might have attempted the trick because it's starting to pay better to push legitimate applications rather than malware.
Google Pack comes bundled with several useful applications - such as Firefox, Skype, Adobe Reader, and anti-malware tools - that make setting up a new PC a great deal easier. For some, however, such as Steve "chair crusher" Ballmer, Google Pack might be viewed as the worst sort of malware. ®

The Register Guide to Extended Validation
Building Web Application Security into Your Development Process [3-2APYMBV]
LDAP Injection [3-2APZ1KL]
Web application security [3-2APYM3X]
Blind SQL Injection [3-2APYM5E]

Inmate hacked prison network, broke into employee database
Miscreants hijacking machines via (freshly patched) Adobe flaw
Martial law planned for Craigslist's red-light district
Cocaine addicted IT manager hacks ex-employer's mail servers