Visit the Ironworks Gaming Website Email the Webmaster Graphics Library Rules and Regulations Help Support Ironworks Forum with a Donation to Keep us Online - We rely totally on Donations from members Donation goal Meter

Ironworks Gaming Radio

Ironworks Gaming Forum

Go Back   Ironworks Gaming Forum > Ironworks Gaming Forums > General Discussion > General Conversation Archives (11/2000 - 01/2005)

 
 
Thread Tools Search this Thread
Old 10-29-2002, 07:01 AM   #1
*\Conan/*
Red Dragon
 

Join Date: March 1, 2001
Location: Virginia, USA
Age: 62
Posts: 1,512
E-card Sneakware Delivers Web Porn

A Trojan horse program created by an Internet adult entertainment company routes surfers to racy sites.
By Kevin Poulsen, Oct 21 2002 12:08AM

It's no coincidence that one of the most recent Trojan horse programs to enter the FBI's bi-weekly rogues gallery of malicious code is named after an Internet porn company.

The program, dubbed "Cytron" by the bureau's National Infrastructure Protection Center (NIPC)and some anti-virus vendors, is a covert browser plug-in that gives Internet Explorer users something they probably don't want: more pop-up ads, promoting a slew of adult websites.

Users are lured into accepting the program through a wholesome e-mail from egreetings@yahoo.com -- a forged return address. The mail looks convincingly like an electronic greeting card notification, with a cute smiley face background and the text "You have received an e-card" in squiggly block letters.

Clicking on the graphic of a cartoon hand holding an envelope takes the recipient to surprisecards.net, where the surprise is an "e-card viewer plug-in" that they have to accept to read the card. If the user accepts the ActiveX control, which is signed with a credibility-boosting digital certificate, Internet Explorer will begin selectively feeding them racy full-sized pop-up ads for adult websites, mostly operated by Canada-based Cytron Communications Ltd. They never do get a greeting card.

Small touches like the convincing domain name and the authentic digital certificate make the ruse smarter than the average covert adware delivery mechanism. "A lot of people see that it's an authentic certificate... and will just mindlessly click okay," says Jonathan Zdziarski, a Georgia software developer who was among the first to detect the spammy scam late last month after receiving one of the e-mails. "I can certainly see how your average doctor or oil change technician or anyone who's not in the technology field would fall for something like that."

The e-card porn Trojan is the latest advancement in an industry known for pushing the envelope.

"There some perfectly legitimate Internet porn operators, but it is a ruthlessly competitive industry that's constantly looking for new ways to get the click," says Jason Catlett, president of the anti-spam company Junkbusters. "They've always been at the leading edge of tactics, legitimate and illegitimate, for getting more traffic."

Watch out you guys!
*\Conan/* is offline  
Old 10-29-2002, 07:51 AM   #2
Davros
Takhisis Follower
 

Join Date: January 7, 2001
Location: Mandurah, West Australia
Age: 60
Posts: 5,073
Gasp - you mean to say there is porn - here on the world wide web??? [img]graemlins/crazyeyes.gif[/img]
__________________
Davros was right - just ask JD
Davros is offline  
 


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
New AIM virus? Or is it an old one ... Firestormalpha General Discussion 3 09-27-2005 03:39 PM
virus philip General Conversation Archives (11/2000 - 01/2005) 9 10-24-2002 03:47 AM
Virus??? Mouse General Conversation Archives (11/2000 - 01/2005) 3 08-20-2002 04:32 PM
virus? what's up with this NKL.SCR? adam warlock General Conversation Archives (11/2000 - 01/2005) 13 07-25-2002 10:00 AM
VIRUS-ALERT get anti virus patch here TheCrimsomBlade General Conversation Archives (11/2000 - 01/2005) 2 09-20-2001 12:17 AM


All times are GMT -4. The time now is 04:00 AM.


Powered by vBulletin® Version 3.8.3
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
©2024 Ironworks Gaming & ©2024 The Great Escape Studios TM - All Rights Reserved