Cybercriminals use various types of Social Engineering attacks to spread malware. Symantec researchers have discovered a website that encourages users to download an important browser update.
The website has the ability to detect the victim's browser. Based on the type of browser they are using, they will be redirected to a fake but convincing Chrome, Firefox, or Internet Explorer website.
It also uses a javascript to force the victim to stay on the website – it asks users to click “Yes/No” 100 times in order to close the browser.
The malicious website is distributed through advertisements for networks and free movie streaming. The domain used in the attack was registered on December 30, 2013. Researchers report that the attacks are allegedly targeting users in the United Kingdom.
As we always say, we should update our programs from the official websites of the programs we have installed on our computer. Symantec has identified these websites as Trojan.Shylock.
