Hackers quickly move to exploit Bhutto assassination

Hackers quickly move to exploit Bhutto assassination
http://www.networkworld.com/news/2007/122807-hackers-quickly-move-to-exploit.html

By Gregg Keizer, Computerworld, 12/28/07
Sponsored by:

Within hours of yesterday's assassination of former Pakistani Prime
Minister Benazir Bhutto, malware makers exploited the breaking news to
dupe users into downloading attack code, security researchers said
Friday.

Searches for news about Bhutto's killing and the ensuing chaos in
Pakistan listed sites pimping a bogus video coder/decoder (codec),
said analysts at McAfee Inc., Symantec Corp. and WebSense Inc.

For instance, WebSense found such a site simply by using "benazir" to
search on Google. Meanwhile, McAfee quickly located 10 sites hosted on
Blogger.com, Google Inc.'s blog service, that were spreading the fake
codec.

The sites use the well-worn tactic of promising a video -- in this
case one of Bhutto's assassination -- but telling Windows users that
they need to install a new high-definition video codec, the program
that decodes the digital data stream, to view the clip. Naturally, the
so-called codec is no such thing, but is instead rigged code that
downloads a variant of the Zlob Trojan horse, a back door that can
infect the compromised PC with a wide range of other malware.

"Even death isn't sacred to some," said Symantec researcher Vikram
Thakur in a post to the company's security response blog.

Other hackers are relying on the news of Bhutto's assassination to
draw users to sites that forgo the codec angle and instead conduct
drive-by attacks, said Rahul Mohandas, a security analyst at McAfee's
Avert Labs unit. "There are a plethora of sites which attempt drive-by
installations when unsuspecting users visit search-engine results for
'Benazir Bhutto,'" said Mohandas in a post to the Avert Labs blog this
morning. "Many of these compromised pages have malicious scripts,
which point to the 3322 domain. These pages contain obfuscated
variants of the MS06-014 exploit, which is perhaps one of the most
popular of all the exploits we see on a daily basis."

MS06-014, issued in April 2006, patched a critical vulnerability in an
ActiveX control that is part of Microsoft Data Access Components
(MDAC), which are packaged with Windows XP and Server 2003.

Shilling bogus codecs is a popular pastime of attackers. The technique
has been used to plant malware on PCs from singer Alicia Keys' MySpace
page, for example, and was the vector used by hackers who went after
Macs last month.

Darkest day in Pakistan

Things are getting worst since Benazir Bhutto is dead.

Violence in all the cities of Pakistan is getting worst.

In Karachi angry crowd has burned the hospital, now over here I cannot understand WHAT will happen after burning the Hospital or any Restaurant Franchise or any Car or any Bank?

Following Reports received from the city and adjoining areas:

30 trucks of Pepsi looted / burnt

Shops at Schon circle - Dewan Motors, KASB Bank, etc burnt

Al-Abbas Industries Dhabeji looted and their Carbide Plant burnt

OK Oil Mills in Dhabeji totally burnt

Oil Tanker blown up in Dhabeji causing much damage

Stone Throwing reported in relatively quiet area of Dhoraji also!

Lyari is unmentionable

Godown of Muhammad Farooq Textile burnt

BBQ Tonite also attacked and some part burnt

Now People SHOULD understand that nothing will happen after all this we the people have to live in PAKISTAN and these Politicians will just an away after making money.

PEOPLE of PAKISTAN SHOULD UNDERSTAND THAT THEY HAVE TO MAINTAIN PEACE.

AlQaeda or Taliban; Bush or Nawaz Sharif; Musharraf or any one else is not the culprit.

INfact the culprit are WE We our self.... We have to understand this these strikes, violence will just screw with our economy and will help Investors ran away.

Who will INVEST in Pakistan? why any Businessman will come in a Nation where there is 10 day OFFICIAL holiday?

Where people cannot travel with in the city... where people cannot go to the shop because shop is closed due to the violence in the city.

People of Pakistan should come to live and whats gone is gone.. help Pakistan to be better not to go out and screw the shops, hospitals e.t.c

Again this is a Request to maintain PEACE.