Security Manager's Journal: New ransomware attack hurts trustworthiness of Web
When an infection can result from just calling up a mainstream website, malware becomes harder to battle
Computerworld - Last week, my company was paid a visit by some interesting malware. This time, it was ransomware: malicious software that disguises itself as "security software" but actually holds the system hostage to trick the user into paying money to the software's handlers. This is the same kind of trickery I wrote about when I experienced a FakeAV infection.
Based on that experience, I know this malware is insidious. It embeds itself deeply into the computer, even below the file and operating system levels. There's no point in trying to clean it -- it will just come back. So I instructed the desktop team to wipe the infected computers and reimage them.
We were lucky -- only two users got infected by the compromised ad. The news service displays lots of ads in a rotation, so the chances of getting the compromised one are pretty small, at least on a single visit.
I had my team contact the news service to let people there know about the compromise. Even though it's not their fault directly, they will want to take some kind of action to ensure that other innocent visitors don't experience the same infection. In fact, it's possible the people who run the ad service are unaware that one of their ads is infecting potential customers. There are many ways an attacker can compromise code served up by Web servers, without the knowledge or participation of the webmaster.
I decided the best way to get rid of this particular nuisance is to block the category of all Web advertisements. Who needs them, anyway? (Well as it turns out, some people do -- I received a couple of requests to unblock the ad category, but in general, ads are an annoyance that users don't want). So one outcome of this experience is that my company's Web browsing experience is slightly less annoying than it was before.
More by J.F. Rice
- Security Manager's Journal: Security flaw shakes faith in Apple mobile devices
- Security Manager's Journal: Cyberattacks just got personal
- Security Manager's Journal: Target breach unleashes fresh scams
- Security Manager's Journal: Giving thanks for SIEM
- Security Manager's Journal: Hashing out secure applications
- Security Manager's Journal: Why the shutdown is like the cloud
- Security Manager's Journal: Thinking about passwords
- Security Manager's Journal: Android panic
- Security Manager's Journal: Auto-forwarded emails could be a huge problem
- Security Manager's Journal: Our network infrastructure has fallen far out of date
- Best iPhone, iPad Business Apps for 2014
- 14 Tech Conventions You Should Attend in 2014
- 10 Desktop Apps to Power Your Windows PC
- How to Add New Job Skills Without Going Back to School
- Slideshow: 7 security mistakes people make with their mobile device
- iOS vs. Android: Which is more secure?
- 11 sure signs you've been hacked
- Who's Spying on You? You're aware of the threats of malware to your business but what about the ever-changing ground rules? Cybercriminals today are launching attacks against...
Red Hat Enterprise Linux - The Original Cloud Operating System
Linux adoption is growing against a number of measures, such as the
number of supercomputers that run Linux and the size of the contributing...
- OpenStack Hype vs. Reality: CIO Quick Pulse Open-source architecture can enable IT departments to build infrastructure-as-a-service (IaaS) clouds running on standard hardware.
- Building a Bridge to the Next Generation Data Center Selecting a widely adopted operating system is a foundational component of a standardization strategy.
- Webinar: Building a Big Data solution that's production-ready Big data solutions are no longer just a nice-to-have.
- Meg Whitman presents Unlocking IT with Big Data During this Web Event you will hear Meg Whitman, President and CEO, HP discuss HAVEn - the #1 Big Data platform, as well... All Cybercrime and Hacking White Papers | Webcasts