Hackers Exploiting Television Show “Lost” for Disseminating FAKEAV

According to PandaLabs of computer security firm Panda Security, it has identified another mode of dissemination for malicious software named the MySecurityEngine FAKEAV.

Actually, an online search for details about the television show "Lost", like information about the show's end episode or the method for watching it through streaming video, leads to bogus Web-pages. Like always, these Web-pages have been so manipulated that they come up near the top ranks of the search results returned. But, on clicking them, Web-surfers are lured to download a file, usually certain video codec, while the FAKEAV gets loaded onto their PCs.

Stated PandaLabs that a few among the most frequently-searched terms resulting in the new malicious software are "Lost New Episode Tonight," "Lost New Episode Guide" and "Lost New Episode Stream."

The security researchers, while remarking about the cyber-criminals' technique, stated that the malware and the manner in which it contaminates an end-user's PC aren't unknown. However, the bait utilized does change as per popular search phrases and breaking events, they said.

Like "Lost," the PandaLabs researchers have also found the same methodologies being used for enticing victims, who search with keywords for other widely enjoyed shows like "The Family Guy," "IronMan 2" and "Glee."

Aside this, hackers have also abused Ronnie James Dio's recent demise, the rock singer of Rainbow and Black Sabbath, to launch an extremely dangerous BlackHat SEO assault on the Web.

Said Technical Director Luis Corrons of PandaLabs, the surprising thing that still persists is the high pace at which the large number of websites are crafted and positioned among top ranks, online. Thestar.com published this on May 19, 2010.

Also, according to Corrons, with the telecast of the final episode of "Lost" approaching near, the total number of malevolent web-links are expected to become twofold or threefold.

Thus, to remain safe, officials at Panda Security are recommending that users must not follow any web-link embedded on unsolicited e-mails. Also, they must carefully examine all those URLs they plan to visit, while being mindful that any mass media incident or breaking news are sure to bring up numerous malware-laden websites.

Related article: Hackers Redirect Windows Live Search to Malicious Sites

» SPAMfighter News - 5/29/2010