|By Marketwired .||
|July 4, 2014 01:48 PM EDT||
SUNNYVALE, CA -- (Marketwired) -- 07/04/14 -- Researchers from Proofpoint, Inc. (NASDAQ: PFPT), a leading security-as-a-service provider, have discovered a nasty piece of malware which is targeting vacationers who visit US travel sites, just in time for the July 4th holiday.
The discovery shows that popular travel destination websites for cities including Boston, Salt Lake City, Houston, Monterey, Rochester, Myrtle Beach, Victoria and Utah Valley have been exploited and are serving malware to unsuspecting visitors. Proofpoint can also confirm that the command-and-control infrastructure of the cyber criminals behind the attacks all appears to be based in the Ukraine.
In response to the discovery, Mike Horn, VP, Threat Response Products at Proofpoint, said: "This is a good example of how poorly protected websites play a big role in the distribution of malware. Users might be directed to these sites by a search engine and they have no idea that just by visiting the site they can become infected. We are also seeing a large number of phishing campaigns which direct people to the legitimate travel sites which have been infected with malware by the hackers. The attacks were brought to our attention by our Targeted Attack Protection technology."
When users visit one of the infected websites a web exploit kit is run that then downloads additional malware onto their machine. However, more concerning is the fact that the exploit being used has very low detection rates with traditional antivirus solutions. When Proofpoint tested the piece of malware they discovered it was able to bypass all but four out of the 51 antivirus products on Virus Total. This makes it a particularly dangerous exploit for consumers.
"Since the attack started on July 3rd, and some of the web pages are promoting 4th of July activities, this attack appears to have been carefully timed to coincide with the US holiday season," Horn said. "We suspect that the websites have been compromised for some time, but the attackers were carefully planning their attack for maximum impact."
About Proofpoint, Inc.
Proofpoint Inc. (NASDAQ: PFPT) is a leading security-as-a-service provider that focuses on cloud-based solutions for threat protection, compliance, archiving and governance, and secure communications. Organizations around the world depend on Proofpoint's expertise, patented technologies and on-demand delivery system to protect against phishing, malware and spam, safeguard privacy, encrypt sensitive information, and archive and govern messages and critical enterprise information. More information is available at www.proofpoint.com.
Proofpoint is a trademark of Proofpoint, Inc. in the U.S. and other countries. All other trademarks contained herein are the property of their respective owners.
01144 20 71 832 840
In 2014, Amazon announced a new form of compute called Lambda. We didn't know it at the time, but this represented a fundamental shift in what we expect from cloud computing. Now, all of the major cloud computing vendors want to take part in this disruptive technology. In his session at 20th Cloud Expo, John Jelinek IV, a web developer at Linux Academy, will discuss why major players like AWS, Microsoft Azure, IBM Bluemix, and Google Cloud Platform are all trying to sidestep VMs and containers...
Jan. 19, 2017 06:00 AM EST Reads: 780
SYS-CON Events announced today that Enzu will exhibit at SYS-CON's 20th International Cloud Expo®, which will take place on June 6-8, 2017, at the Javits Center in New York City, NY, and the 21st International Cloud Expo®, which will take place October 31-November 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA. Enzu’s mission is to be the leading provider of enterprise cloud solutions worldwide. Enzu enables online businesses to use its IT infrastructure to their competitive ad...
Jan. 19, 2017 06:00 AM EST Reads: 1,583
@ThingsExpo has been named the ‘Top WebRTC Influencer' by iTrend. iTrend processes millions of conversations, tweets, interactions, news articles, press releases, blog posts - and extract meaning form them and analyzes mobile and desktop software platforms used to communicate, various metadata (such as geo location), and automation tools. In overall placement, @ThingsExpo ranked as the number one ‘WebRTC Influencer' followed by @DevOpsSummit at 55th.
Jan. 19, 2017 06:00 AM EST Reads: 4,750
Jan. 19, 2017 05:45 AM EST Reads: 3,676
Jan. 19, 2017 05:30 AM EST Reads: 4,153
Jan. 19, 2017 05:30 AM EST Reads: 1,889
Jan. 19, 2017 05:15 AM EST Reads: 5,019
Jan. 19, 2017 04:15 AM EST Reads: 3,445
Jan. 19, 2017 04:00 AM EST Reads: 5,356
Jan. 19, 2017 03:30 AM EST Reads: 401
Jan. 19, 2017 01:15 AM EST Reads: 7,807
Jan. 19, 2017 01:15 AM EST Reads: 6,099
Jan. 19, 2017 01:00 AM EST Reads: 1,282
Jan. 19, 2017 12:45 AM EST Reads: 4,701
Jan. 19, 2017 12:00 AM EST Reads: 4,177