Malware disguised as updates pushed over hotel wi-fi

Powered by SC Magazine
 

Feds warn update before travel.

 travelers to be on the lookout for malware on their hotel's wireless connection.

According to the alert, attackers are using the hotel's Wi-Fi hotspot to distribute malware to guests under the guise of a security update.

The alert was issued by the Internet Crime Complaint Center (IC3), a partnership between the Federal Bureau of Investigation and the National White Collar Crime Center, and funded by the Bureau of Justice Assistance.

"In these instances, the traveler was attempting to set up the hotel room Internet connection and was presented with a pop-up window notifying the user to update a widely-used software product," the alert said.

"If the user clicked to accept and install the update, malicious software was installed on the laptop. The pop-up window appeared to be offering a routine update to a legitimate software product for which updates are frequently available."

Adversaries have heavily targeted the hospitality industry in recent years. In 2011, security firm Trustwave conducted more than 25 forensic investigations into compromises at hotels.

Nicholas Percoco, who heads the company's SpiderLabs research arm, told SCMagazine.com on Wednesday that hotels, thanks to weak passwords, unpatched systems or network segmentation issues, often are wide open to attack.

"It would not be a difficult feat to get something installed within the hotel network that would basically man-in-the-middle guests' web traffic," he said.

"The attackers could then transparently modify HTTP responses to contain pop-up boxes asking users to download updates for their computer or web browser. If a user performed what the attackers asked them to do, this could be an easy way to get a backdoor on their systems to provide remote access into victim's computer."

IC3 did not say how the attackers were able to perform the ruse, or which hotels were affected. In the past, experts have encouraged users to be wary of fake Wi-Fi access points in places like hotels and airports.

The note asked travelers to try to install any necessary security updates before leaving for a trip, or at least visit the software vendor's website directly to download.

This article originally appeared at scmagazineus.com

Copyright © SC Magazine, US edition


Malware disguised as updates pushed over hotel wi-fi
 
 
 
Top Stories
Qld Transport to replace core registration system
State's biggest citizen info repository set for overhaul.
 
Innovating in the sleepy super industry
There’s little incentive to be on the bleeding edge, so why is Andrew Todd fighting so hard?
 
How technology will unify Toll
The systems headache formed through 15 years of acquisitions.
 
 
Sign up to receive iTnews email bulletins
   FOLLOW US...
Latest Comments
Polls
Who do you trust most to protect your private data?







   |   View results
Your bank
  38%
 
Your insurance company
  3%
 
A technology company (Google, Facebook et al)
  7%
 
Your telco, ISP or utility
  8%
 
A retailer (Coles, Woolworths et al)
  2%
 
A Federal Government agency (ATO, Centrelink etc)
  20%
 
An Australian law enforcement agency (AFP, ASIO et al)
  15%
 
A State Government agency (Health dept, etc)
  5%
TOTAL VOTES: 846

Vote