Threat Level: green Handler on Duty: Bojan Zdrnja

SANS ISC: Speling and Grammur Opshunall - SANS Internet Storm Center SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Speling and Grammur Opshunall

Wanted: Person of low moral character to correct spelling/grammar mistakes on phishing postings. Must be motivated, self starter. Computer knowledge, criminal background, and personal hygiene skills preferred but not required.

Ok, I say this a lot, but this time I mean it waaaaay more than usual.  DO NOT EVEN THINK OF FOLLOWING ANY LINK YOU MAY COME ACROSS IN ANY SEARCH RELATED TO THIS STORY.  Bad, bad things will happen to you.

Capitalizing on the burgeoning desire on the part of every red-blooded male to see the U.S. President's main squeeze in the buff, some enterprising malware knotheads have been seeding various comment boards out there with links "photos" of the First Ta-Ta's.

A little Googling on the phrases "As I've understood it was made by papara**i" and "will *issapear from internet tonight" (note, I'm not including the full quotes here, because I don't want to muddy the search engine waters...) will bring up a list of sites with links on their comment pages.  Big sites.  Sites that should know better.

What happens if you follow a link?  Well, that particular ride has a height restriction, and no matter how tall you think you are, you're not tall enough. DON'T DO IT.  REALLY.

The results of a visit will be documented in a future Follow The Bouncing Malware, but suffice to say, it's some pretty interesting stuff...

The links these guys are using change by the hour (but their pitch doesn't), so it should be pretty easy to kill these things.

And maybe I'm some sort of old skool fascist, but do you really need to allow live links on comment pages?

Tom

160 Posts
ISC Handler

Sign Up for Free or Log In to start participating in the conversation!