The opinions expressed herein are entirely my own and do not represent the opinions of any other entity with which I am affiliated. Opinions expressed in comments and trackbacks are those of their respective authors and do not necessarily reflect my own point of view.
All works are licensed under a Creative Commons Attribution-Noncommercial-No Derivative Works 3.0 United States License.
© Copyright 2006-2009 MalwareTeks
What are the chances that someone looking for WinRAR will type the following into the bowser address bar: http://www.winrar.com (link deactivated)? Probably millions have done this at one time, the official site is http://www.rarlab.com/.
Anyone going to http://www.winrar.com will be redirected to a French site, when they try to click on the “Free Software Downloads” button. There are 11 copies of WinRAR on this site and all 11 are infected with TROJ_STARTPA.QC.
SOURCE: TrendLabs Malware Blog: A WinRAR-lose situation.
Comment Meta:
XHTML:
More Options ...
Categories
Tag Cloud
Blog RSS
Comments RSS
Void « Default
Life 
Earth 
Wind 
Water 
Fire Light
Previous: 
Next: 
Last 50 Posts 
Back