The JSRedir-R program, also known as Gumblar, could be used by cybercriminals to gain access to sensitive information or commit identity theft. Anti-virus experts at Sophos have warned that the malicious software, or “malware”, is spreading rapidly online, around six times faster than its nearest rival.
In the last week alone, almost half of all malware found on websites was identified as the
JSRedir-R Trojan, with a new webpage infected every 4.5 seconds.
SRedir-R embeds itself within legitimate but poorly secured websites, and loads malicious programs from third-party sites on to a user’s computer without their knowledge. This gives hackers and cybercriminals a “back door” in to the machine and presents them with the opportunity to steal passwords, identity details and financial information.
“No-one should be in any doubt that the web is still the main vector of attack for cybercriminals, and this new threat suggests this situation isn’t going to change anytime soon,” said Graham Cluley, a senior technology consultant at Sophos. “The problem is that too many computer users still think there’s no danger in surfing the web, but with legitimate sites often falling victim to these attacks, it’s time to wake up.
“Hackers won’t stop targeting the web as it’s proving a successful way for them to spread their infections. To combat this, it’s essential to scan every website for malicious code before visiting it.”
Security experts have warned web users to ensure their antivirus software is up to date in order to protect themselves against the malware threat.
{TELEGRAPH.CO.UK}