Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: Bin Laden Death Related Malware - Internet Security | DShield SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Bin Laden Death Related Malware

We don't have any examples yet. But with any large news event like this, we expect a flurry of e-mails, and likely black hat search engine operations trying to take advantage of the event to distribute malware. Please let us know if you see any examples.

There are some image searches that return a image claiming to be an image of dead Bin Laden, but right now, none of the servers hosting it respond. Some of the sites return SQL errors indicating that the sites are receiving too much traffic.

------
Johannes B. Ullrich, Ph.D.
SANS Technology Institute
Twitter

I will be teaching next: Defending Web Applications Security Essentials - SANS San Francisco Winter 2019

Johannes

3655 Posts
ISC Handler
Thanks for the heads up. I didn't think about it until I saw this post.

I have sent an email to all of my coworkers to warn them of the dangers of emails proclaiming to have information and searching for websites about his death.

An ounce of prevention is worth a pound of cure.
Justin

2 Posts
> http://www.securelist.com/en/blog/6202/Blackhat_SEO_and_Osama_Bin_Laden_s_death
May 2, 2011 - "As always, when big news appear in the press the bad guys start blackhat SEO campaigns in popular search engines trying to lure users to install Rogueware. It's not different this time, with the top news about Osama's Bin Laden death being everywhere. The bad guys were quite fast and started to poison searches results in Google Images. Some of the search results are now leading users to malicious pages..."

- https://www.computerworld.com/s/article/9216315/Osama_bin_Laden_s_death_is_key_topic_on_Internet
May 2, 2011
.
Jack

160 Posts

Sign Up for Free or Log In to start participating in the conversation!