[ news_security_news ]
Trojan Horse Discovered On Samsung Site
Doug Caverly
Staff Writer
2006-09-08
 Insider Reports RSS Feed
People generally expect to enjoy a degree of safety when they visit the website of a major corporation. There's an implicit guarantee that these brand names won't have any malware on their pages. That trust may have been broken, though, with the recent revelation that the Samsung site is home to a Trojan horse.
Websense put out an alert on the issue on Wednesday, saying that it had "received reports that the Samsung Telecom website is hosting malicious code. The site, which is hosted in the United States, has been hosting a number of directories and files which, when downloaded and run, install malicious code on end-users' machines."
"The server appears to have been compromised and has been hosting a variety of files for some time (the owners have been contacted)," the report continued. "The most current code, which is still available for download, is a Trojan Horse that attempts to disable anti-virus programs, modify registry keys, download additional files, and log keystrokes when connecting to banking websites."
Samsung fans don't necessarily need to be too concerned - "currently there is no exploit code on the website that attempts to trigger a download of the file without user interaction," Websense reported. "The site is hosting and most likely distributing files to users who are lured through Instant Messaging or email links."
Joel Camissar, the Australian country manager for Websense, spoke to ZDNet Australia about the Trojan. The quotes were reprinted in a CNET article. "Why not hack into a site that people are visiting that is a trusted brand? Trust is so important these days," Camissar said.
"People are being preached to by banks not to trust links (in unsolicited e-mails) - that is something people are starting to follow," he stated. "So if one does go to a site that is trusted, it is certainly a very easy way for hackers to compromise users."
Tag: Samsung
Add to  Del.icio.us |  Digg |  Yahoo! My Web |  Furl
Get all the updates in RSS: 
About the Author:
Doug is a staff writer for SecurityProNews, InternetFinancialNews, SearchNewz, and WebProNews.
More news_security_news Articles
Insider Reports RSS Feed
|
|
iEntry 10th Anniversary
RSS
Archive
