Kaspersky researchers have uncovered a new method of distributing malware: under the guise of fake security certificates. When users attempt to enter an infected site, an iframe appears stating the site’s security certificate is out of date and the connection cannot be completed. In order to proceed, it is recommended that they install a new certificate. However, what’s actually installed is malware on the victim’s computer.
So far, two types of Trojans have been downloaded as a result of this type of attack: Mokes and Buerak. The former provides backdoor access to the victim’s device, while the latter downloads additional malware on the infected device.
Backdoors are a very dangerous type of malware. Their functionality allows threat actors to gain control over an infected machine for malicious purposes. At the same time, the user might not even suspect that the machine is being exploited.
Cybercriminals have, in the past, used updates for legitimate applications as a means of spreading malware, but the use of false security certificates is new.
“People are particularly susceptible to this type of attack because it appears on legitimate websites, ones they’ve possibly already visited. What’s more, the address listed in the iframe is, in fact, the real address of the website. The natural instinct then is to ‘install’ the recommended certificate, so they can view the content they want to. However, users should always be wary when prompted to download something by an online source – chances are, it’s not necessary,” says Victoria Vlasova, security expert at Kaspersky.
To avoid downloading potentially harmful malware on your device, Kaspersky experts recommend that you:
• Double-check the format of the URL and the spelling of the company name.
• Manually type the website address in your browser rather than visiting via a link.
• Use a security solution to protect you against a variety of cyber threats.
The promise of seamless interoperability in smart homes Altron Arrow
Smart Home Automation
Designed for smart homes and smart buildings, Matter ensures seamless interactions between connected devices across different IP technologies.
Read more...Matter protocol going from strength to strength Altron Arrow
Smart Home Automation Edge Computing & IIoT
The Consumer Electronics Show, that took place in January 2023, highlighted the importance of the new Matter protocol with the smart home being a prominent part of the event.
Read more...High performance CO2 sensor based on PAS EBV Electrolink
Smart Home Automation
Infineon has developed a CO2 sensor chip the XENSIV PAS CO2 sensor module that integrates a PAS transducer, a microcontroller, and a MOSFET on the PCB.
Read more...Protecting you and your home with IoT
Smart Home Automation
IoT technology gives people the power to keep a watchful eye on what is important to them, whether they are 200 metres or 200 kilometres away.
Read more...Adapt your home to your lifestyle
The Came Domotic3.0 home automation system allows people to manage all the automated devices in their home according to their lifestyle needs.
Read more...Smart home weather stations Legrand Southern Africa
Legrand’s Netatmo smart home weather stations are an easy and efficient way to understand and monitor a home’s indoor and outdoor environment.
printer friendly version