May 12, 2010

The Russian anti-virus vendor Doctor Web warns users as cyber-criminals start spreading malicious programs over the Google Groups service. In particular user systems may get infected with different modifications of Trojan.Fakealert.

First a user receives a spam message containing a link to a file that can be downloaded in a Google group created by criminals. Various social engineering tricks can be applied to lure the user into downloading this file. For instance, the message may inform you that e-mail access parameters have been changed and you need to download a manual before your proceed with editing your account information. You may also be notified that your e-mail account has been compromised and the instructions file will provide you with information on how to deal with this situation.

Once a user clicks on the link, he gets to the page containing a download link to the file. The file can contain modifications of Trojan.Fakealert (fake anti-viruses).

If you try to follow such a link in several hours after the bulk of spam messages has been sent out, Google Group will inform you that the page you are about to open may contain spam. However, choosing “I would like to view this content” will allow you to access the download page. Therefore access to the malicious file is not disabled.

Doctor Web recommends users of Dr.Web software to use caution whenever you get a message from an unfamiliar sender especially if such a message concerns your e-mail account information or other personal data.

• Google, Facebook duke it out over user data
  Internet giants Google and Facebook have been having a war of words this week over user data portability. View full post on Network World on Security...
• Google Sues Rogue Pharmacies Over Deceptive Advertising
  Google on Tuesday filed suit against several "rogue pharmacies" that advertise and sell illegal pharmaceuticals on the Web. View full post on PCMag.com Security Coverage...
• Researchers clash over possible return of Google attackers
  Experts disagree on whether a bug in Adobe's Reader PDF was caused by the same Chinese group that hacked into the systems of Google and other major companies late last year. View full post on Compu...
• ACLU, other groups sue US gov’t over border laptop searches
  The American Civil Liberties Union and other groups have filed a lawsuit challenging the U.S. Customs and Border Protection (CBP) practice of searching laptops and other electronic devices at U.S. bor...
• Consumer group lampoons Google CEO over privacy issues
  Consumer Watchdog, a group that has been a sharp critic of Google's privacy practices in the past, is at it once again. View full post on Computerworld Security News...
• South Korean Police Raid Google Offices Over Wi-Fi Sniffing
  South Korean police have reportedly raided Google's offices in Seoul as part of their investigation into Google's unauthorized collection of unencrypted Wi-Fi data. View full post on PCMag....
• Report: South Korean Police Raid Google Offices Over Wi-Fi Sniffing
  South Korean police have reportedly raided Google's offices in Seoul as part of their investigation into Google's unauthorized collection of unencrypted Wi-Fi data. View full post on PCMag....
• Google in the clear over UK WiFi snooping
  The Information Commissioner's Office has said that Google did not grab "significant" amounts of personal data when photographing the UK with its StreetView cars, and that the i...
• Google cleared over StreetView WiFi snooping
  The data on WiFi access points gathered by Google in building its Streetview mapping system most likely did not include personal data, the UK Information Commissoner’s Office (ICO) has ruled. View ...
• Google pushed to name names over Wi-Fi data collection
  Google is being urged to hand over the names of its engineers that created a code, which was accidentally used by the search engine to collect information from unsecured Wi-Fi networks. View full p...