RedWine
07-08-2007, 04:07 AM
Internet Threat Protection Guide
http://images.pcworld.com/news/graphics/133567-threat_protection.jpg
Internet attacks have become a business. And as with any business, the product must be ever-changing in attempting to entice you. But where a slick legit ad campaign might sway you into buying a gadget you don't really need, these social engineering techniques try to trick you into infecting your computer with malware you surely don't want. Look through these images of some of the latest tricks from malware pushers and phishers so that you can keep your most important security tool--you--up-to-date. And if you receive any of these messages, be sure not to click any links in them or follow their instructions.
Targeted Attacks Grow
http://images.pcworld.com/news/graphics/133567-SECUREWORKS-bbbphish.jpg
The latest wave of e-mail-borne attacks looks entirely genuine and even uses your real name. This example, a fake BBB message, was one of the first. Similar attacks continue in the form of supposed IRS audit warnings, false business invoices, and Microsoft vulnerability warnings.
Malware Lurks in Word Docs
http://images.pcworld.com/news/graphics/133567-embedIconProforma.jpg
If you do get pulled in enough to open a Word doc attachment and see something like this, delete the file. Crooks have been embedding malware within such Word files; double-clicking the icon will launch the attack.
Malicious Mimicry
http://images.pcworld.com/news/graphics/133567-FACETIME-mySpaceRemove1.jpg
It looks real, but instead of downloading the actual Malicious Software Removal Tool (which does exist), this fake Automatic Updates alert launched from a MySpace profile, leading victims to install rogue antispyware. It's a good example of why you must consider not only whether something looks right (as this does), but also whether it comes up at the appropriate time.
Fake Security Alerts
http://images.pcworld.com/news/graphics/133567-FACETIME-mySpaceRemove3.jpg
The next step in this Automatic Updates attack used a common scare tactic to make victims think their system was infected. Be skeptical of supposed security warnings that don't come from your own security software.
http://images.pcworld.com/news/graphics/133567-threat_protection.jpg
Internet attacks have become a business. And as with any business, the product must be ever-changing in attempting to entice you. But where a slick legit ad campaign might sway you into buying a gadget you don't really need, these social engineering techniques try to trick you into infecting your computer with malware you surely don't want. Look through these images of some of the latest tricks from malware pushers and phishers so that you can keep your most important security tool--you--up-to-date. And if you receive any of these messages, be sure not to click any links in them or follow their instructions.
Targeted Attacks Grow
http://images.pcworld.com/news/graphics/133567-SECUREWORKS-bbbphish.jpg
The latest wave of e-mail-borne attacks looks entirely genuine and even uses your real name. This example, a fake BBB message, was one of the first. Similar attacks continue in the form of supposed IRS audit warnings, false business invoices, and Microsoft vulnerability warnings.
Malware Lurks in Word Docs
http://images.pcworld.com/news/graphics/133567-embedIconProforma.jpg
If you do get pulled in enough to open a Word doc attachment and see something like this, delete the file. Crooks have been embedding malware within such Word files; double-clicking the icon will launch the attack.
Malicious Mimicry
http://images.pcworld.com/news/graphics/133567-FACETIME-mySpaceRemove1.jpg
It looks real, but instead of downloading the actual Malicious Software Removal Tool (which does exist), this fake Automatic Updates alert launched from a MySpace profile, leading victims to install rogue antispyware. It's a good example of why you must consider not only whether something looks right (as this does), but also whether it comes up at the appropriate time.
Fake Security Alerts
http://images.pcworld.com/news/graphics/133567-FACETIME-mySpaceRemove3.jpg
The next step in this Automatic Updates attack used a common scare tactic to make victims think their system was infected. Be skeptical of supposed security warnings that don't come from your own security software.