Web security trends: 'kidnapping' and 'fake'

Finjan's Web Security Trends Report released yesterday warned users about a number of new emerging cyber attacks.

According to the research center, the form of "kidnapping ransom data" and spreading viruses through fake antispyware software is becoming very popular. These are two of the fastest-growing security trends in the past.

In general, the types of 'viruses + rootkits' continue to become one of the most common barriers that challenge IT professionals.

Taking advantage of the public's concern about spyware software over the past few years, fake anti-spyware software has been constantly booming.

In these attacks, hackers often hide malware into applications that are advertised as free antispyware applications. Once users download such software, they will immediately download malicious code or open the system for other attacks.

In some cases, Yujan Ben-Itzhak, Finjan's chief technology engineer, confirmed that rogue antispyware tools also ran fake security scans and reportedly found spyware programs on the system. It is installed on. The next step is the application that instructs users to access another site to purchase the full version of the new software capable of killing detected spyware.

' Users ' awareness of spyware is increasing so that unrighteous people are trying to take advantage of this ,' says Ben-Itzhak. ' There are' underground 'networks that spread malicious code to anyone who wants it. I'm not sure who dares to pay for such software but I'm sure it exists . '

The development of the security industry against spyware has led hackers to come up with fake ways to provide fake tools against themselves. At the same time, this is also a testament to the increasing complexity of hackers' attacks.

Another sign proves the increasing 'professionalism' of hackers is the increasing frequency of the "kidnapping ransom" attacks. In such attacks, hackers 'kidnapped' files on the victim's system and demanded that they pay a fee to recover. Malware is responsible for 'kidnapping' commonly-defined files searching for user's personal information files or bank accounts.

In the most recent case, hackers used a software called CryZip to encrypt files on the victim's computer and asked them to pay $ 300 to "redeem" them.

' Sometimes for experienced users, removing spyware is sometimes quite easy, but for those who don't know much, it's really a problem .' Ben-Itzhak confirmed.

Hoang Dung