TDSS Pretending To Be Tweetdeck Update

Timing is everything–especially if you’re trying to spread malware. Last week, the developers of the popular Twitter application Tweetdeck notified users that due to changes in the supported authentication protocols by Twitter, users of older versions would have to upgrade.

Naturally, cybercriminals latched onto this bit of news and sent out their own tweets saying the same thing. However, their malicious tweets contained a URL-shortened link to what was supposedly a Tweetdeck installer named tweetdeck-08302010-update.exe:

This particular file, however, is not a legitimate installer but a TDSS variant detected as TROJ_TDSS.FAT. The TDSS malware family functions as rootkits that are able to take complete control of affected systems; in addition their complexity and sophistication makes these malware difficult to remove.

Tweetdeck has officially warned their users not to fall prey to this attack. In addition to detecting the malicious “installer”, the website hosting it has been blocked as well.

Trend Micro Advanced Threat Researcher Paul Ferguson was earlier interviewed about this threat by PC World. His comments may be found here.

Post from: TrendLabs | Malware Blog - by Trend Micro

TDSS Pretending To Be Tweetdeck Update

Re: Premeštena tema: kako da zatvorim sve konekcije osim Opere ili Mozile

Re: Premeštena tema: kako da zatvorim sve konekcije osim Opere ili Mozile

Apple QuickTime potential vulnerability/backdoor, (Mon, Aug 30th)