Slashdot Mirror


BBC Site Used as IE Attack Lure

capt turnpike writes "The hits just keep coming... according to eWEEK.com, someone is using actual excerpts of BBC news stories to 'launch drive-by downloads of bots, spyware, back doors and other Trojan downloaders.' One example is a story blurb masking the download and installation of a keylogger -- with no user interaction. And it doesn't even tell you it loves you."

5 of 83 comments (clear)

  1. Erm, why is this a story? by baldass_newbie · · Score: 5, Insightful

    I mean, a known bug is exploited and it's using quoted text from the BBC site.
    If they do it again tomorrow with text from nytimes.com would that be another story?

    --
    The opposite of progress is congress
    1. Re:Erm, why is this a story? by Firehed · · Score: 5, Funny

      Wouldn't this end up creating some sort of infinate dupe-loop and tear the fabric of space-time?

      --
      How are sites slashdotted when nobody reads TFAs?
  2. Re:Now I'm worried.... by the-amazing-blob · · Score: 5, Funny
    And if I click there, just what do I get?
    I don't understand why everyone is so afraid of these things. They monitor us, keep track of us. The kind of thing a girlfriend would do if we had one. Think of keyloggers and the like as your new Girlfriend (beta 0.2, results may vary)
  3. Fake URLS Suck! by Giant+Ape+Skeleton · · Score: 5, Funny

    According to This article, using bogus URL's to trick people is still the most effective social engineering trick in the book. Of course, that may not apply to those in the Slashdot community :p

    --
    The difference between stupidity and genius is that genius has its limits.
    1. Re:Fake URLS Suck! by MBCook · · Score: 5, Funny
      I clicked your link.

      It's an apache configuration page!
      I'M BEING HACKED!

      AAAAAAaaaaahhhhhh......

      I'd better call the FBI!

      --
      Comment forecast: Bits of genius surrounded by a sea of mediocrity.