The minds behind the Waledac
botnet are using the physical location of victims’ machines in a scheme to
lure them with false news reports.
The e-mails, which
have subject lines like "Why did it happen in your city?” claim that
18 people have been killed in an explosion and link to what appears to be a
Reuters-related news site. Those who click on the link, however, end up on a
malicious site that attempts to trick people into clicking on a video that
appears to be breaking news about a terrorist attack.
In an interesting twist, the Web site does a GEO-IP lookup on the
victim’s whereabouts and customizes the story to appear as though it relates to
the victim’s location.
“We have seen spam—or, more accurately, the Web sites that spam leads you to—doing
geo-location before, but I can't at the moment think of previous occasions when
it's been used as part of the trap to infect you with malware,” said Graham
Cluley, senior technology consultant at Sophos.
Read the rest of this article on eWEEK.com.
Online Media 
