MAY 23, 2014
Your regular source of security updates from TrendLabsSM
In This Issue

Security Spotlight
Cybercrime Hits the Unexpected

Security for Home Users
Cybercriminals Attempt to Score with World-Cup-Themed Threats

Security for Business
Why Threat Intelligence Is Important When Securing Against Targeted Attacks



Security for Home Users

Cybercriminals Attempt to Score with World-Cup-Themed Threats

Major sports events have become a staple social engineering lure for cybercriminals because these are sure to have an audience.”



One of the most anticipated sports events of the year is the FIFA World Cup and this year, it will be held in Brazil. With the event just a few weeks away, the buzz surrounding it has been larger than ever. Unfortunately, cybercriminals are using this buzz to unleash World-Cup-themed threats.

Online Searches Lead to Malicious Results

Sports fans often rely on search engines to get the latest news and updates—a habit that cybercriminals are exploiting. They have been leading searchers to malware- and adware-laden pages. We even came across a file that would supposedly allow users to stream events live but it turned out to be a backdoor we detect as BKDR_BLADABIN.AB in disguise.

Even football fans were not spared, as a World-Cup-related search led to a supposed key generator for the game, FIFA 14. As in the first case, the key generator was an adware we detect as ADW_INSTALLREX.

Phishing Football Fans

Malware aren’t the only threats to sports fans online. Scammers are also taking advantage of the hype to phish for sensitive user information.

We started seeing phishing emails as early as last year. Phishers used a supposed “FIFA World Cup 2014 Promotional Draw” to convince users to share their personal information in exchange for a chance to watch the events live. We spotted a phishing site that tricked victims into providing information, including credit card details.

Preventing Foul Play

Major sports events have become a staple social engineering lure for cybercriminals because these are sure to have an audience. We’ve seen threats use other major sports events like the Olympics and the UEFA European Championship.

Keeping tabs on the latest sports updates can be fun but can also be risky. When it comes to getting sports details online, it pays to have a dose of skepticism. Double-check promos and deals before responding. Rely only on official sites for updates. Avoid clicking links in emails, especially those from unknown or unverified senders.

The TrendLabs Race to Security site has everything you need to stay safe while staying updated on major sports events. And its next feature—the 2014 FIFA World Cup!

Copyright ©2014 Trend Micro Incorporated. All rights reserved. Trend Micro and the Trend Micro t-ball logo are trademarks or registered trademarks of Trend Micro Incorporated. All other company and/or product names may be trademarks or registered trademarks of their respective owners. The information contained in this document is subject to change without prior notice.

www.trendmicro.com

  CONNECT WITH US ON: