Malicious files distributed through fake Dell site

May 17, 2007 21:06 GMT  ·  By

Numerous email messages containing malicious links that redirect the users to a fake Dell online store were recently sent to the email addresses from all around the world. According to AusCERT (Australian Computer Emergency Response Team), the email message was informing the users that a fake transaction was made and redirected them to a fake website that attempted to download and install a dangerous Trojan file. The security company encourages users to avoid clicking on unknown or untrusted links included in email messages. However, you should update your antivirus solution to the last version to be able to detect any type of threat delivered by the fake Dell website.

"Thank you for shopping with us. Your order #[number] Canon DF-E037 8.0 MP Digital Camera has been accepted for the amount 865.00 AUD. Your card will be charged in that amount. Thank you for your purchase. You can check the order in your profile," the email message said.

At this time, there is no successful exploitation of the users' computers through the fake Dell store but all the receivers of the email message should be aware and avoid clicking on the links included.

It's obvious that our computer's security is not guaranteed by any of the applications installed on our systems. In the past, it was proved that even these products that are usually meant to protect the computers and stop hack attempts or viruses, are vulnerable to attacks and can invite hackers into the systems. However, most of the exploitations are requiring users' approval or at least a click to install the threat. Obviously, you should avoid opening untrusted links delivered by email, but the threats are often distributed using most of the Internet protocols including HTTP, FTP, instant messaging clients and even the file sharing applications installed on a certain computer.