Visitors to the homepages of these sites are redirected to a site that hosts a Trojan downloader which then attempts to infect the PC.
“Given the world’s attention on relations between China and Tibet ahead of the Olympics, it makes sense that these sites would be targeted as web surfers go online to learn more about Tibet and Tibetan independence,” said Spencer Parker, director of product management at ScanSafe.
He said that the attack appeared to have been the work of top-level hackers rather than amateur malware authors.
“These websites appear to have been specifically targeted as this is not a generic Trojan downloader. Someone or some group has gone to great trouble to rewrite the exploit and personalize it to the FreeTibet.org and SaveTibet.org websites,” Parker said.
Source: Web User (UK)
| Share this post : |