Topic: P2P Networks spread poisoned "Salt" with Angelina Jolie (quicktime update codec)

[Samker]

Cybercrooks have begun using booby-trapped QuickTime files to infect internet pirates' computers.

Malicious files posing as the recent Angelina Jolie film Salt are now available on file sharing networks. When users attempt to view these poisoned downloads a prompt is generated offering to download "update codecs" - actually fake files loaded with Trojan horse malware.

At first the attack was thought to rely on an unpatched flaw in QuickTime, but Apple told Trend Micro this is not the case, and the attack relies solely on social engineering trickery: http://blog.trendmicro.com/quicktime-player-allows-movie-files-to-trigger-malware-download/

The attack is therefore unrelated to the discovery of an unpatched flaw in QuickTime involving the handling of streaming movie files. The flaw poses a crucial code injection attack threat for users of QuickTime version 7.6.6 for Windows, security notification firm Secunia warns: http://secunia.com/advisories/40729

(ElReg)

[bBbLaHhH]

Sounds to be it's a nice slap in the face to people who download pirated movies.. haha

On a more unrelated note... Salt was a decent movie.. worth going to the threatre to watch imo

[scott0720]

Just another way to get infected and another way for AntiVirus/AntiMalware companies to stay in business.

Yes, Salt was a decent movie with lots of twists and turns.