It's called flash for a reason!
Fiendish fake Flash plugin squirts grumble-flick ads into kiddies' websites
A fake Adobe Flash browser plugin that hijacks on-screen web adverts to tout hardcore smut is doing the rounds, we're told. The rogue add-on even slaps racy adults-only teasers on websites aimed at children, according to Jérôme Segura, a security researcher at antivirus firm Malwarebytes. The software nasty, named …
-
-
Saturday 17th August 2013 10:55 GMT Robert Carnegie
I don't see where "FlashBlock" helps with this.
As far as I can see, this malware only -says- that it's Flash, and tells you that you need to install its plug-in.
And, of course, whichever browser you're using makes it easy to do that.
If they took an actual copy of Flash and inserted their virus into it... that seems peculiarly thorough. Although I suppose if you're familiar with the Flash upgrade process - which you probably are - then it makes it look realistic.
I wonder why they don't have an Internet Explorer version. Maybe IE got some security right for once.
-
-
Sunday 18th August 2013 19:05 GMT crayon
Re: Weird, thought
Most IE exploits didn't require user input, you only need to "visit" a dodgy website to get infected. This particular "exploit" requires you to explicitly allow the installation of a plugin. If you're dumb enough to install from unknown sources then you deserve to be exploited.
-
-
-
Monday 19th August 2013 04:33 GMT JCitizen
Mitigation is possible...
Even if it isn't perfect - Microsoft has built in application and web site content control every since Vista. Even if the kiddies click through the application block, SpywareBlaster will block installation of Active X, as if any adult would give them access to the UAC - so you will have to limit browsers to Internet Explorer to maximize protection. The other browsers only have host controls after that, when using JavaCools protection, if I'm not mistaken.
Parental controls are always imperfect, but just as in security defenses, a blended defense is always best; and always better than nothing.