Q: Why is this happening?
A: Because Money is the root of ALL evil
The malware business simple formula is this:
Where M is the number of idea or strategy in getting more partners joining the business. This could be pay-per-click, pay-per-install, pay-per-play like previewing movie trailers, taking online surveys and et cetera.
Given this formula, it is more likely that high traffic websites such as social networks are at most risk and highly potental for infestation of malware retailers.
Three days ago, Myspace user reported a malicious Ad served by Myserver4u.com. The link attempts to download an Adobe flash file named “gnida.swf”. This swf file is a malicious trojan downloader, which fortunately most AV scanners already detects.
A similar case was also found in Gaiaonline.com – a known community of Anime fan and Genesreunited.com – a No. 1 UK family tree and genealogy site. The malicious Ad served by quinquecahue.com attempts to play the swf trojan and redirects the user to a Rogue website. Check the screenshot here.
There is an increasing prevalence of this threat and we will be seeing more of this in the next few days. Watchout!
