Business ads hacked - twisted into the thieves website that have malware

[Beauty hunter]

In trying to research why some of my ads that had been in the business section were partially printed and then incorporated into someone else's website that contains malware, I landed on a fatal cyber bomb.
My computer has been in the shop and I have since spoken to approximately 60 techo's to see the best possible ways to avoid these cyber snakes out in the wild. There are too many things to list that have been discovered in this cluster-f incident. Many of the false sites have been deleted already, but it has already been tracked. There is some amazing technology out there.

 

[30ashopper]

Have you had your computer checked for a virus? You seem to be running into a lot of problem, maybe it's infected.

 

[30ashopper]

Strait from Apple:

A recent phishing scam has targeted Mac users by redirecting them from legitimate websites to fake websites which tell them that their computer is infected with a virus. The user is then offered Mac Defender "anti-virus" software to solve the issue.

This “anti-virus” software is malware (i.e. malicious software). Its ultimate goal is to get the user's credit card information which may be used for fraudulent purposes.

http://support.apple.com/kb/ht4650

 

[Beauty hunter]

Hi 30a.s
Thank you for your response. I just wrote a book in response to you, but I got logged out. Kurt had told me how to keep it before, but I didn't remember it and don't know which post it was on. Whatever. Anyway, here is the short version. If there is an ad with my business address or the business address of sowal IT IS LEGIT. If there is part of my ad from the sowal business section with an address different from mine or that of sowal it is a snakepit and probably will harm your computer. Smiling Joe was wondering if it was someone targeting jews and I still don't have an answer for that -but- it is strange that it started with an ad about my Jerusalem earrings. Hackers have fun dealing with the consequences coming your way

Note: Anyone can take any ad/image they want and bring it to their own website. The hacking I'm referring to is another story that began with this one, but I will not go into it at this time. Watch the cyber snakes in the wild- these are closer to the genuine and unlike the african dumdum scams.

 

[ASH]

That just sucks that people have nothing better to do with their time but to be mean to others. Tie a millstone around their necks and start a new fishing reef with all of them....

 

[30ashopper]

There's a new variant out of this thing now - some detail here:

http://www.zdnet.com/blog/bott/mac-malware-authors-release-a-new-more-dangerous-version/3385

 

[Smiling JOe]

Ash, it isn't so much about being mean, but more about stealing money. That doesn't mean that it isn't mean, but just that their intent is on stealing.

 

[Beauty hunter]

There's a new variant out of this thing now - some detail here:

http://www.zdnet.com/blog/bott/mac-malware-authors-release-a-new-more-dangerous-version/3385

zdnet is a revolving news source so I pulled this article out:



Mac malware scams - Following the money
By Adrian Kingsley-Hughes | May 27, 2011, 4:26am PDT


So, who’s behind the recent spate of Mac malware?

Security journalist Brian Krebs has been doing some investigating and believes that ChronoPay, Russia’s largest online payment processor, is behind the attacks on Mac users.

The WHOIS information for both domains [mac-defence.com and macbookprotection.com] includes the contact address of fc@mail-eye.com. Last year, ChronoPay suffered a security breach in which tens of thousands of internal documents and emails were leaked. Those documents show that ChronoPay owns the mail-eye.com domain and pays for the virtual servers in Germany that run it. The records also indicate that the fc@mail-eye.com address belongs to ChronoPay’s financial controller Alexandra Volkova.

Krebs describes ChronoPay as the ’unabashed “leader” in the scareware industry for quite some time.’ The company is fairly notorious. It was the core processor for a rogue anti-virus affiliate program in 2008 that released the Conficker worm, and last March was behind a scam site that accused people for filesharing and bullied them into fake settlements.

Krebs also has his ‘3 basic rules for online security‘ which are now just as valid for Mac users as they are for Windows users.

If there’s money to be made from Mac users, these attacks will continue and increase in sophistication.

Kick off your day with ZDNet's daily e-mail newsletter. It's the freshest tech news and opinion, served hot. Get it.