Posted by Blair in Security
Like many just-launched e-commerce sites in the world, this unnamed Web site has a fairly functional, if somewhat rudimentary, home page. A list of options at top of the home page allows visitors to transact business in Russian or in English, offers an FAQ section, spells out the terms and conditions for software use and provides details on payment forms that are supported.
But contact details are, shall we say, sparse. That’s because the merchandise being hawked on the site — no we’re not going to say what it is — aren’t exactly legitimate. The site offers malicious code that webmasters with criminal intent can use to infect visitors to their sites with a spyware Trojan.
In return for downloading the malware to their sites, Web site owners are promised at least 50 Euros — about US$66 — every Monday, with the potential for even more for “clean installs” of the malicious code on end user systems. “If your traffic is good, we will change rates for you and make payout with new rates,” the site promises.
continued @ ComputerWorld.com