Spyware Detected on Banner Ads on Myspace.com and other Web Sites
Myspace.com and a few other websites are playing host to a banner advertisement for DeckOutYourDeck.com, which apparently loads a Trojan Horse program onto systems. Millions of visitors to Myspace.com and other websites have been infected with this spyware said Reston, Va., company iDefense.
iDefense is an Internet security company which is owned by Verisign. iDefense said that the spyware infects unpatched versions of Windows by using a security flaw in the way the operating system and Microsoft Internet Explorer open Windows Metafile images.
The banner ad called DeckOutYourDeck.com, on Myspace.com and other websites loads a Trojan horse program onto unpatched systems, which then installs adware of the PurityScan/ ClickSpring family, said Michael la Pilla, who is an iDefense “malcode” analyst. He said the adware is able to track the user’s Internet usage and causes the infected system to be flooded with pop-up advertisements.
La Pilla said that the installation program contacts Russian- language server in Turkey that counts how often the program is installed. He also said that the site suggests that the program has already been installed on 1.07 million computers.
Del.icio.us
Cosmos
Digg