• Total Posts: 28067
  • Total Topics: 8059
  • Online Today: 1132
  • Online Ever: 51419
  • (01. January 2010., 09:27:49)

Author Topic: Do Not Pass Go: Malware Taps Phony 'Monopoly' (monopoly.exe,  (Read 4378 times)

0 Members and 1 Guest are viewing this topic.


  • SCF Administrator
  • *****
  • Posts: 7152
  • KARMA: 291
  • Gender: Male
  • Whatever doesn't kill us makes us stronger.
    • - Samker's Computer Forum

Unsolicited invitation to play an online version of the popular board game can turn your computer into a spam-spewing zombie.

This time, hackers are luring unsuspecting users with an invitation to play an online game of Monopoly. But there's no Boardwalk or Park Place -- just a Trojan that, if activated, will turn your PC or mobile device into a spam distribution center.

The discovery was made Monday by members of McAfee's MX Logic security software team:

This so-called social engineering tactic isn't new, however, though it's fairly well done and conceived, according to Sam Masiello, MX Logic's director of threat management.

"If the recipient follows the link to the Web site, they are greeted with a Web page that actually looks fairly well done advertising the Monopoly 'game' and encouraging the user to download using several links dispersed throughout the page after giving a brief history of the game and providing some fun facts," Masiello wrote on the security team's blog:

The malware isn't installed on the user's machine by visiting the Web page. But if a user downloads and installs the monopoly.exe file it offers, a Trojan is activated on the computer or mobile device. The virus then connects with another computer behind the scenes to download a second piece of malware that activates the spamming application.

Masiello wrote that the faux Web site includes some features designed to trick people into installing the malware, including a hit counter at the bottom of the page that fabricates how many people are playing online right now and how many people have visited the site.

Security software experts say social engineering and event-related come-ons -- such as the death of a celebrity or breaking news story -- have become all the rage with hackers in recent months and advise users to think twice before downloading any unsolicited applications no matter how intriguing they appear to be.


Samker's Computer Forum -


With Quick-Reply you can write a post when viewing a topic without loading a new page. You can still use bulletin board code and smileys as you would in a normal post.

Name: Email:
Type the letters shown in the picture
Listen to the letters / Request another image
Type the letters shown in the picture:
Second Anti-Bot trap, type or simply copy-paste below (only the red letters)

Enter your email address to receive daily email with ' - Samker's Computer Forum' newest content:

Terms of Use | Privacy Policy | Advertising