Spyware Sucks

But here is the dirty little secret of browser security: Even if every Internet browser made today were completely bug-free, it wouldn't stop malicious hackers and malware. Why? Because the vast majority of successful malicious exploits today don't exploit buggy browsers, but rather unwitting end-users. That is, Web-based malware is successful because end-users are intentionally installing it! Most exploit code doesn't search for an unpatched vulnerability, but simply asks the user to install. - Roger Grimes, Infoworld

"There is no magic fairy dust protecting Macs" - Dai Zovi, security researcher and co-author of The Mac Hacker's Handbook.

ALERT: Malvertizements featuring Skype in circulation

I have highlighted malvertizements featuring Skype before, but it is worthwhile reminding everybody about their existence now that they seem to be in active circulation. I have seen 3 distinct samples of the malvertizement in the past 24 hours or so.

Screenshots:

It seems that Forceup may be involved in the distribution of at least one of the malvertizements featuring Skype. Forceup have been caught distributing malvertizements before. Maybe those behind the name think that Forceup has been flying under the radar long enough for us to have forgotten about them - nope.

Previous incidents involving Forceup are listed below:

Forceup.com caught trying to sell a malicious advertisement featuring firstchoice.com

Press Release by eMusic

Forceup.com are distributing malicious advertisements .. again - an examination of the social engineering behind malvertisements

A list of every time Forceup has been mentioned on this blog

Published Thu, Jul 31 2008 11:10 by sandi

Filed under: Security, safety and privacy on the Internet, Vulnerabilities, viruses and exploits