facebook rss twitter

Popular technology blog falls foul of malware scam

by Parm Mann on 27 October 2009, 17:10

Tags: Gawker Media

Quick Link: HEXUS.net/qaum2

Add to My Vault: x

Gadgets and technology blog Gizmodo has warned that it may have unknowingly passed on malware to its readers.

The blog, launched in 2002 as part of the Gawker Media network, claims to attract upwards of 100 million page views a month and has fallen foul to an elaborate scam designed to infect the blog's advertisements with malware.

Earlier today, the site's editorial director Brian Lam revealed that the site was last week fooled into running advertisements by a group claiming to be representatives of Japan's Suzuki motor corporation. Security firm Sophos has confirmed that Gizmodo's disguised advertisements were "laced with malware" designed to convince users that their computer is at risk - the rogue software then attempts to trick the user into purchasing a potentially-harmful solution.

The technique is known as scareware, and can be used to obtain credit card information of unsuspecting users. A similar threat surfaced in September when The New York Times website was infiltrated by advertisements from a group of criminals claiming to be representatives of VoIP company, Vonage.

Gizmodo has apologised to its readers with the following statement:

"Guys, I'm really sorry but we had some malware running on our site in ad boxes for a little while last week on Suzuki ads. They somehow fooled our ad sales team through an elaborate scam. It's taken care of now, and only a few people should have been affected, but this isn't something we take lightly as writers, editors and tech geeks. (And we would have noticed sooner except everyone on staff is on OS X or Linux for production machines.) Everything should be cleared up but you should be checking "qegasysguard.exe" if you're experiencing random popups. Be careful, load up some antivirus and make sure your system is clean. I'm sorry."



HEXUS Forums :: 4 Comments

Login with Forum Account

Don't have an account? Register today!
well at least they owned up to it and gave their readers some information about the malware..
:D Classic. At least they owned up and warned their readers asap.
The positive is they warned peeps and appologised.
The negative is they don't run the same dev environment as their users.

/rant mode on

I've always been taught the cardinal sin of programming anything is to run and test on anything other than what your key users operate. It doesn't matter what is better, more secure or more convienient, what matters is what you users see and interact with.
Despite the tech world's love of Mozilla-based browsers, “virus-proof Linux” and other conciets the fact remains that at present most users of publically consumable web-media use the most popular browser. That alone should have it at the heart of any web-dev setup.

I hope this event is of high-enough profile to remind web-devs in particular they don't develop for themselves - they do it for their users - even if your sites raison d'etre is to extol the virtues of better, more secure solutions.

/rant mode off

…..

/rant restart

Just re-read the piece again.
“Be careful, load up some antivirus and make sure your system is clean. I'm sorry.”
WHAT?!
Ok the “I'm sorry” I can understand and no doubt it's sincere but the off-the-cuff AV comment really irks me.
“Some antivirus”? You mean you expect people not to have any?
WHICH ONE?!
Many of these cunning scams aren't successfully dealt with by a swathe of modern AV-systems let alone older products that many still use but keep up-to-date thinking that's enough. Two friends this week have been caught out by similar scams while running supposedly up-to-date AV from well-regarded vendors.

Maybe it'd be useful to give advice to those who may have been affected? After all, being a techie-site I'd expect them to be able to find a good solution much faster than many of the users, in particular those most likely affected by the scam in the first place!
Grr

/rant over ….. methinks


Appologies.
It's the scammers that get to me most because I end up having to deal with their fallout and in one case advise a friend to change their bank-account details asap. I hate giving bad news like that because it severely tarnishes what is one of the most influential medias of our time.
That this has happened doesn't surprise me. What does is the short-sightedness that allowed it to reach this point.

*sighs*

Until the next time ……..
RSS readers are your best friend ;)