Internet Security Researchers identify Virus, which Redirects Twitter Users to Malicious Websites
In recent times, social networking sites such as Facebook and Twitter have been in the news for hacking attacks, fake identities, identity theft and redirection to fake websites.
(prHWY.com) December 27, 2010 - -, NM -- In recent times, social networking sites such as Facebook and Twitter have been in the news for hacking attacks, fake identities, identity theft and redirection to fake websites. Cybercriminals have again targeted Twitter with a virus, which redirects users to malicious websites.
Internet security researchers have identified that Twitter has been infected with a virus that redirects users, who click on a seemingly legitimate, but fake links embedded in messages to a compromised website of a furniture vendor. The links apparently look like Google news alerts. The malicious links start with the URL:
http://goo.gl. Hackers have reportedly infected the website of the furniture vendor and have installed forwarding scripts. When users click on the fake link, they are directed to the website of the furniture vendor. Visitors to that website are automatically redirected to malicious websites loaded with malware.
Attackers may use computers infected with malware to indulge to gain remote access, install botnets, use the computer to send spam e-mails and launch denial of service attacks. Often, Computer hacking forensics investigators use computer forensic techniques to trace the crime trail.
The malicious links lure Twitter users by apparently offering an easy way to keep track of the followers of their Twitter account. Internet security researchers have identified that messages with malicious links have been transmitted from both existing and new Twitter accounts. Hackers take advantage of the limitation on the Twitter site, which allows users to see only part of a URL in a message. Users are able to identify the full URL only when they click on the link.
Changing lifestyles and the convenience offered by Social networking, professional networking sites and micro-blogging websites have made these sites popular among people. However, loads of personal data available on these sites makes them a breeding ground for cybercriminals. Attackers can create fake identities, impersonate as a colleague or a friend to gain access to confidential information posing a risk to
information security. For example, recently attackers created a fake account of Interpol Chief on Facebook to gain access to privileged information regarding their arrested colleagues.
Twitter users must approve new members only after verifying their authenticity. They must be also wary of clicking on suspicious links and advertisements.
EC-Council provides industry training and certification for information security professionals in ethical hacking among many other specializations. "Understanding how hackers exploit these vulnerabilities is a key requirement to hardening software and hardware. That is why EC-Council focuses on ethical hacking as an approach to information security evaluation" as stated by EC-Council's Senior Director, Steven Graham. EC-Council through its Certified Ethical Hacker program has trained such information security professionals from all over the world.
ABOUT EC-COUNCIL
The International Council of E-Commerce Consultants (EC-Council) is a member-based organization that certifies individuals in cybersecurity and e-commerce skills. It is the owner and developer of 16 security certifications, including Certified Ethical Hacker (CEH), Computer Hacking Forensics Investigator (CHFI) and EC-Council Certified Security Analyst (ECSA)/License Penetration Tester (LPT). Its certificate programs are offered in over 60 countries around the world. These certifications are recognized worldwide and have received endorsements from various government agencies including the U.S. federal government via the Montgomery GI Bill, Department of Defense via DoD 8570.01-M, National Security Agency (NSA) and the Committee on National Security Systems (CNSS). EC-Council also operates EC-Council University and the global series of Hacker Halted security conferences. The global organization is headquartered in Albuquerque, New Mexico
###