Just a couple of hours ago I started getting some very shady looking tweets like the below.
 

Malicious Tweet


  
The link in the post is abbreviated, but leads on to a site hosting some obfuscated JavaScript.
  

  
If this JavaScript is executed by the browser an unpleasant payload is delivered to the victim. So far we have seen both malicious PDF documents and executable files. These Trojans attempt to connect to additional locations to download further malware. TrendLabs are currently investigating, watch the blog for updates.
  
This latest Twitter malspam follows hot on the heels of the Gaza and FIFA spam run earlier this month.
  
Be careful where you click and make sure your security software is blocking those evil links.
 


Bookmark
| More
This entry was posted on Tuesday, 15. June 2010 and is filed under "Web 2.0, malware, vulnerability". You can follow any responses to this entry with RSS 2.0. You can leave a response here, or send a trackback from your own site.

9 Comments to "New malicious Twitter spam"

Twitter spammers start sending malware via Tweets:
Tuesday, 15. June 2010 um 3:53 pm

[...] security analysts trendmicro points out, if this JavaScript is executed by the browser, an “unpleasant payload” is [...]

Tweets that mention New malicious Twitter spam » CounterMeasures -- Topsy.com:
Tuesday, 15. June 2010 um 3:56 pm

[...] This post was mentioned on Twitter by TechRadar, Chris Boyd, Rik Ferguson, Rik Ferguson, BrianHonan and others. BrianHonan said: RT @rik_ferguson: Watch out, very bad Juju Twitter spam on the loose – http://bit.ly/90GWj9 (worth an RT) [...]

Tech News Geek » Twitter Spammers Try Sending Malware Via Random Replies:
Tuesday, 15. June 2010 um 4:02 pm

[...] security analysts trendmicro points out, if this JavaScript is executed by the browser, an “unpleasant payload” is [...]

Be careful what you click! The perils of URL shorteners:
Tuesday, 15. June 2010 um 4:46 pm

[...] With short URLs, you lose those data points. And the consequences of following a bad link can be unfortunate. After I got a couple of very suspicious links from a couple of unrecognized Twitter accounts yesterday, I passed them along to Chris Boyd (@paperghost on Twitter) who wrote about the phenomenon on The Sunbelt Blog (see "PDF exploit spam run on Twitter") and also pointed to a technical article at the Trend Micro blog: New malicious Twitter spam. [...]

Socialsama » Blog Archive » Twitter needs to get a handle on spam:
Tuesday, 15. June 2010 um 5:54 pm

[...] in the post above is blurred, but leads on to a site hosting some JavaScript. As security analysts trendmicro points out, if this JavaScript is executed by the browser, an “unpleasant payload” is [...]

Spammers Use Random ‘@’ Tags to Spread Malware on Twitter | Everything's Social:
Friday, 18. June 2010 um 1:46 am

[...] news. Now, according to a report from Trend Micro, they’re taking a different approach: using vague, random “@” replies to flood users with malware. Blogger Rik Ferguson was tagged Tuesday morning in a tweet embedded with a shortened URL. After [...]

Malware sendes ud gennem Twitter « Idastenberg's Blog:
Friday, 25. June 2010 um 1:08 pm

[...] Trendmicro forklarer at der, hvis man klikkede på linket, ville blive downloadet ”ubehagelig kode” til den intetanende brugers PC. [...]

Malware sänds genom Twitter « Firebrand Training Sweden Blog:
Monday, 28. June 2010 um 4:07 pm

[...] Trendmicro upplyser att om man klickade på denna länk skulle det hämtas ”obehaglig kod” till den aningslösa användarens PC. [...]

Twitter: Be careful on what you click | The Curiosity Blog:
Monday, 30. August 2010 um 6:09 am

[...] click. What if it was a malicious site? I am well aware of phishing sites and sites that can ‘harm your computer‘, and how people HAVE been affected (or hacked) by clicking the wrong tiny url, but I still [...]


Name:

E-Mail (not published)

Website:


Spam protection


© Copyright 2010 Trend Micro Inc. All rights reserved.
Legal Notice | Disclaimer