Newest Vicious Phishing Effort?

Discussion in 'Apple, Inc and Tech Industry' started by IJ Reilly, Dec 26, 2008.

  1. IJ Reilly macrumors P6

    IJ Reilly

    Joined:
    Jul 16, 2002
    Location:
    Palookaville
    #1
    This morning I clicked on a Google search link and was attacked by a popup, which itself is unusual. It did not allow me to cancel the dialog box. Clicking OK resulted in being send to another site, which immediately full-sized my Safari window to look like a Windows XP desktop, which then began "scanning" my computer for viruses, and popping up the "results," which you can see in the attachments. The most interesting things about this particular attack is that (1) Safari did not block it, and (2) the "scanning" seemed to be hosted on the server of a legitimate company (a plastics company in New Jersey), which presumably was hacked. The "websecurityworld.com" server is inaccessible. I haven't checked the registration yet.

    Has anyone else seen this one?
     

    Attached Files:

  2. iParis macrumors 68040

    iParis

    Joined:
    Jul 29, 2008
    Location:
    New Mexico
    #2
    I'd recommend fixing that asap.
    That kind of stuff has often happened to me in the past; all goes downhill from there.
    Although, I was on Windows XP computer and I got a pop up giving me the message you got, then it forced to download "Spy doctor."
     
  3. r.j.s Moderator emeritus

    r.j.s

    Joined:
    Mar 7, 2007
    Location:
    Texas
    #3
    Did it give you any cool presents in your downloads folder?
     
  4. IJ Reilly thread starter macrumors P6

    IJ Reilly

    Joined:
    Jul 16, 2002
    Location:
    Palookaville
    #4
    Fix what? I don't see how this can harm a Mac.

    Not that I can find.
     
  5. iParis macrumors 68040

    iParis

    Joined:
    Jul 29, 2008
    Location:
    New Mexico
    #5
    Well, find out if it did anything and make sure it doesn't happen again.
     
  6. IJ Reilly thread starter macrumors P6

    IJ Reilly

    Joined:
    Jul 16, 2002
    Location:
    Palookaville
    #6
    It couldn't really do anything on a Mac unless I authorized it with an administrative password, and AFAIK there's no way to prevent it from happening again, unless I plan on never clicking Google links.
     
  7. JG271 macrumors 6502a

    JG271

    Joined:
    Dec 17, 2007
    Location:
    UK
    #7
    I just had something similar, when I viewed a site that i've been on hundreds of times before. It kept redirecting me to various javascript alerts and redirections. Maybe the website itself is infected... if not I might need to change my sig.

    Last week i've also been redirected straight from a google link. Odd, but more annoying than harmful I think.
     
  8. iParis macrumors 68040

    iParis

    Joined:
    Jul 29, 2008
    Location:
    New Mexico
    #8
    Ugh. Great... I'm on a PC and something similar happened to me while using Safari.
    All I did was search for "open office" on [some site] and this came up.

    BTW, what I was doing wasn't illegal because Open Office has always been a free application.

    EDIT: I didn't press "ignore this warning" or "go back," I just opened up the task manager ended Safari.
     

    Attached Files:

  9. lord patton macrumors 65816

    lord patton

    Joined:
    Jun 6, 2005
    Location:
    Chicago
    #9
    I've seen something similar over the last few weeks... mostly after clicking on links to editorials from financial papers found on realclearpolitics.com.

    It happened 2 or 3 times. All of a sudden a window (in Safari 3, Leopard) would "take over" and display some bs regarding security settings or scanning or some such. An obvious fake.

    The annoying thing is that I couldn't get rid of it except to force quit Safari—all the menu options were greyed out and I couldn't access any other Safari windows.
     
  10. iParis macrumors 68040

    iParis

    Joined:
    Jul 29, 2008
    Location:
    New Mexico
    #10
    Do you guys think this has something to do with Safari? I've noticed nobody saying this for FireFox, Opera, etc.
     
  11. IJ Reilly thread starter macrumors P6

    IJ Reilly

    Joined:
    Jul 16, 2002
    Location:
    Palookaville
    #11
    Good question, but why would anyone go to this much trouble to target only Safari users, most of whom are running it on a Mac?
     
  12. Macky-Mac macrumors 68030

    Macky-Mac

    Joined:
    May 18, 2004
    #12
    does it ultimately "recommend" you buy & download some product to deal with all these "security problems" it shows you?? or does it install something on your computer when you click on "remove"??
     
  13. EvanLugh macrumors 68000

    EvanLugh

    Joined:
    Aug 29, 2007
    Location:
    Developer land
    #13
    Lol Mininova.. The page is safari's new blocker? Or am I missing something?
     
  14. iParis macrumors 68040

    iParis

    Joined:
    Jul 29, 2008
    Location:
    New Mexico
    #14
    No, Lol.
    I always used mininova and after awhile I went back and it wasn't blocked.
    That thing where it says it's detecting a virus is obviously a virus itself.
     
  15. IJ Reilly thread starter macrumors P6

    IJ Reilly

    Joined:
    Jul 16, 2002
    Location:
    Palookaville
    #15
    I don't know -- I didn't click on anything. ;)
     

Share This Page