Malware Masking Chrome Font Update on the Prowl
The increasingly mischievous hackers have devised one fresh medium for hacking into Chrome by which end-users would be downloading certain font that's usually not there, while actually get duped into planting malicious software onto their computers.
The missive arrives through a popup that tells that the font namely 'HoeflerText' was not found, therefore, end-users require taking down certain update onto their PCs. But, really the update happens to be malware.
Research Director Tod Beardsley from Rapid7 a cyber-security specialist writes that the popup missive, certain malware bait attacks end-users of Google Chrome who are running Windows OS, while keeps on spreading through compromised WordPress websites. He notes that there are plentiful design elements at the point other malware baits become unsuccessful. The popup missive masks like one apparently legitimate popup coming via Chrome Web-browser, Beardsley elaborates. Bgr.com posted this, February 22, 2017.
It was 10th December 2016 when the malware attack started, says Proofpoint that also says the sinister text font update is an advert fraud malicious program called Fleercivet.
Moreover, whereas pressing on 'Update' button will result in the download of one particular file named "Chrome Font v7.5.1.exe" that name does not correspond to the one exhibited inside the sinister guidelines graphic that reads "Chrome_Font.exe."
Further to his writing, Tod Beardsley states that the attacks seem as confined to hijacked WordPress websites, an area which's sadly full of targets. Chrome users require knowing that lawful alerts which the browser issues won't ever occur like any page's overlay. In particular, Chrome doesn't have the functionality of suggesting any missing font updating, thus every such suggestion actually comes from malvertising campaign alternatively malicious software.
Chrome Web-browser on Windows PCs inside U.K, USA, Canada and Australia is getting targeted.
» SPAMfighter News - 27-02-2017