Thursday, August 04, 2005

A wrong Virus Bulletin ...

Somebody notified me about a suspicious link. The link itself attracted my attention:
http://www.vbulettin.com/ ...[removed]
Naturally, anyone who follows information security knows Virus Bulletin: one of the oldest and most respected publications in the AV industry. I'm writing from time to time for them.
No, their site has not been hacked. If you read the URL carefully, you'll notice that the word bulletin is misspelled - bulettin. Moreover, Virus Bulletin can be found on-line at a slightly different URL: www.virusbtn.com. Most of us only scan URLs at best, and the malicious version is certainly close enough to the real thing to fool people. Virus writers are at it again: masquerading as a respected AV publication is a good way to get people to trust you.
Oh, before I forget... If you receive this link, don't click on it. The new virus 'Landis' is ready at that link to infect your pc and it sends the link out on command from its owner.