Cyber criminals are exploiting Twitter to spread malware in festive-themed messages, according to global IT vendor Panda Security.
The security vendor says using methods akin to Black Hat SEO techniques, hackers are taking advantage of trending topics to position malware distribution campaigns.
It adds that topics such as 'Advent calendar', 'Hanukkah' or even 'Grinch', are among the most popular subjects used by hackers to entice users.
“Thousands of tweets have been launched using festive-themed phrases, such as 'Nobody cares about Hanukkah' or 'Shocking video of the Grinch', along with short URLs pointing to malicious Web sites,” Panda notes in a statement.
The company explains that users who click the link will be taken to a page that infects systems with false codecs by exploiting a security hole in PDF files and tries to trick users into downloading a codec that is really a downloader Trojan, which in turn downloads more malware onto the compromised computer.
In addition to subjects related to Christmas, it adds, cyber-criminals are using other hot topics to spread their creations, including the Sundance festival, the AIDS campaign and the Carling Cup.
According to Jeremy Matthews, head of Panda's sub-Saharan operations, “Social networks like Facebook and Twitter are becoming increasingly popular with hackers because of their ever-increasing number of users, and the ease at which they (the hackers) can post malicious links. That's why the number of clicks, and therefore infections, tends to be very high.”
With the increase in malicious attacks, the company urges users not to click suspicious linksfrom non-trusted sources. “This should apply to messages received through Twitter, through other social networks and even via e-mail.
“If you click on the links, check the target page. If you don't recognise it, close your browser,” it says.
Panda also advises that even if users do not see anything strange in the target page, but they are asked to download something, they should not accept.
“If you do download or install an executable file and the PC starts to launch messages or behaves strangely, there is probably malware on your computer. In this case, you should check your computer with a free online scanner,” the company says
As a general rule, make sure your computer is well protected to ensure that you are not exposed to the risk of infection from any malicious code, notes Panda.
“It is important to remember that hackers will take advantage of any big holiday or event, which is why it is important to remain extra vigilant during these times”, concludes Matthews.
Share