Links on Comelec Blog Site Directing Users to Malicious Porn Sites

The blog site of the Commission on Elections (Comelec) acquired the form of a malware threat at the end of the third week of September, after being infused by several links that a user named "toinsrillnone" inserted into the site's comments page. The links allegedly lead to porn sites.

While these links appeared on the afternoon of September 20, 2009, the time depicted by the links posted by the site abuser dates back to September 17, 2009. The time was 20:38 hours to be extremely exact as to when the site was infected.

Explaining the entire malicious scam, the MalwareURL Team (a group of Internet security experts committed to fight Trojan, malware and various other online threats) stated on its website that many of the links on the comments section of the targeted website offered to show visitors sites portraying naked female celebrities. Among those celebrities were Zoe Kravitz, Toni Braxton, Abbie Cornish and Gina Gershon.

There was, however, an interesting twist in this malware distribution tactic in use by the cybercriminals that any of the provided links on being clicked would direct the user to a webpage hosted by www.ibibo.com.

Further, clicking the media player on ibibo.com would lead the user to a webpage hosted by justetubes.com or top-celebrities.net. Once landing on the site, the users would see a media player that would download an executable file from the link http://streamingplugin.net.

The "Fighting Malware" site claimed that its database had malware matches on the streamingplugin.net and top-celebrities.net domains, reported gmanews.tv on September 20, 2009. It indeed added that streamingplugin.net has been famous for hosting a Trojan virus.

Porn is the fresh lure being used by malware distributors on social networking and blogging sites such as Twitter, Facebook, MySpace and many others. For instance, on Twitter, it starts with a notice that an anonymous person is following the user. And when checked, picture of a nude female posing temptingly might be found, whose tweets comprise of links to more naughty images. Though some are less clear, but then, the porn industry is not known for its subtlety, commented security experts.

Related article: Long URLs Cause Security Flaw in Opera Browser

» SPAMfighter News - 10/12/2009