'Evil twin' site attempts to infect visitors with trojans.
Cyber-criminals have created an "evil twin" website which aims to dupe unsuspecting visitors into believing that they are visiting the Google Italy site.
IT security firm SurfControl said today that it is currently tracking the malicious website, which attempts to install ActiveX controls on a visitor's PC.
The site uses 'typo-squatting' to ensnare victims, a technique that mimics a legitimate domain using a slightly different spelling. It has been configured to deliver a fraudulent Google Italy page that looks identical to the original.
ActiveX is installed automatically if Internet Explorer security settings allow installation of ActiveX controls. Otherwise, the end user will have to accept the installation for the infection to occur.
If the ActiveX control is accepted, a trojan redirects the homepage to a website featuring adult content.
In addition to browser hijacking, the website installs a key-logging Trojan that monitors keystrokes and sends information to a remote location.
SurfControl has also witnessed incidents of infected machines attempting to send spam email that could have malicious intent.
Cyber-criminals clone Google Italy site
By
Robert Jaques
on Oct 13, 2006 11:51AM
'Evil twin' site attempts to infect visitors with trojans.
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
Promoted Content
Why cloud data protection is about more than just backup
Promoted Content
Five ways Russian cybercrime tactics have changed
Promoted Content
Where human meets digital
Promoted Content
Four signs your organisation is paying a massive innovation tax, and how to fix it
Sponsored Whitepapers
The 5 steps to effective data protection
Understanding the next security control points: applications and workloads
Best security practices after rapid Digital Transformation
The CISO View 2021 Survey: Zero Trust and Privileged Access
How and why to backup your Office 365 tenant
