First detected back in March, the 'Gumblar' attacks have been gaining steam lately, growing by as much as 188 percent in just a single week, ScanSafe warned. Gumblar refers to a Web attack that plants malicious scripts on normally legitimate websites, which then redirects Google search results on victims' PCs.
"A typical series of website compromises reaches peak within the first week or so and subsequently begins declining in intensity as detection is added by signature vendors, user awareness increases and website operators begin cleaning the affected sites," ScanSafe senior security researcher Mary Landesman, said late last week in an advisory.
In Gumblar's case, the opposite has been true, a result of website administrators being affected by the attacks. According to ScanSite, some well known sites have fallen prey to Gumblar include Tennis.com, Variety.com, and Coldwellbanker.com.
Keep those virus definitions up to date, and if you haven't done so already, look into installing an AV app.
Image Credit: computerrepairmaintenance.com
Links:
[1] http://www.maximumpc.com/user/paul_lilly
[2] http://news.cnet.com/8301-1009_3-10244529-83.html
[3] http://www.theregister.co.uk/2009/05/19/gumblar_google_poisoning_update/
[4] http://www.maximumpc.com/article/features/antivirus_software_roundup_protect_your_pc_from_guys_like_this
[5] http://www.maximumpc.com/article/features/what_you_need_know_about_conficker_and_how_avoid_being_a_victim_updated_april_1st
[6] http://www.maximumpc.com/article/news/conficker_c_finally_doing_something
[7] http://www.maximumpc.com/tags/malware
[8] http://www.maximumpc.com/tags/security
[9] http://www.maximumpc.com/tags/software
[10] http://www.maximumpc.com/tags/software_news
[11] http://www.maximumpc.com/tags/virus
[12] http://www.maximumpc.com/articles/news
[13] http://www.maximumpc.com/user/login?&commentfragment=comments_top_anchor
Print