Linux Malware Allows Routers On Facebook And Twitter Defraud

Linux / Moose Overview

Researchers have discovered a new form of Linux malware that tries to take over routers subsequently on social networks like Facebook, Twitter, YouTube, Instagram and other sites to commit fraud with. The malware is called Moose ( pdf ) and scans the internet in search of Linux routers with an accessible Telnet service. Once found, will perform a brute force attack to gain Telnet access to the router.

Moose will modify the DNS in the event of a successful attack, steal the unencrypted network traffic to and from the router, perform man-in-the-middle attacks and offer proxy services for the malware creator. In practice, the malware will steal HTTP cookies from the aforementioned social networking sites to perform with fraudulent actions, such as "track", "view" and "like" of users and content on the websites.

In addition, the malware infected routers will also be used to scan for new vulnerable systems. According to researchers from the Slovak anti-virus company ESET malware is remarkable, because most Linux malware going around and it has developed features on routers to perform DDoS attacks. ESET also denounces the security of routers to be desired and allows this type of malware can strike.

"Witness the primitive techniques Moose used to access other devices, it is unfortunate that the security vendors of routers do not take seriously", say the researchers conclude. That also recommend IT experts to check the routers acquaintances on firmware updates and safe settings if they are nearby.

Tesla Motors Website And Twitter Account Hacked

Attackers there last night managed to hack the Twitter account and website of Tesla Motors. The Twitter account of Tesla CEO Elon Musk had to believe it. On the hacked site the attackers left a message.Through the hacked Twitter account were the 564,000 followers are messages sent that they were given a free Tesla as they called a certain number or followed different accounts.

TechCrunch reports that it was a phone number of a computer store in Illinois. About an hour after the hack the Twitter account was restored to its original state and the tweets of the attackers removed. The website, after the hack was offline for some time, has also been restored. How the attackers access to both the Twitter account as the site managed to get is unknown. Tesla Motors has no comments yet.

Spammer Uses 750,000 Twitter Accounts For Slimming

One of the spammers have created over a period of one year 750,000 Twitter accounts and used for an extensive spam operation involving slimming based on green coffee beans were offered. To convince potential customers that the pills were legitimately used the spammer kinds Twitter accounts resembling the accounts of famous brands and celebrities, such as CNN, TMZ and MTV.

Spammers also used the Twitter accounts to real Twitterers to send these fake accounts, as reported anti-virus company Symantec. The virus fighter managed to unmask the spammer because that left some traces of his identity. For spam operation used the spammer three types of accounts. Namely new accounts that had no followers, no tweets sent out and used the standard "egg" icon. Symantec calls these accounts "eggs".

There were also accounts stolen content and tweeted photos of real women used. These accounts were followed by both the "eggs" as real users. Finally there were the "mockingbirds" accounts that occurred as the accounts of famous brands and celebrities and slimming advertised. Through the mockingbirds and parrots the spammer trying to spread the tweets about the diet pills among many people. For anyone who purchased the diet pills eventually the spammer got a fee ranging from 36 to 60 dollars.

The spammer could eventually become obsolete because he made some mistakes. So he left traces in the domains he registered and he used one of his "parrot Accounts" as a personal Twitter account. He also used some parrot accounts to retweet personal tweets.

Paying Attention

Symantec warns Twitterers to check that accounts they follow are real, identifiable by the blue tick. In addition, users of the micro blogging service wary of new followers and wants the number of followers on Twitter that someone does not say anything. "Numbers can lie," said the virus fighter. Finally follows the advice that no miracle pills exist to lose weight.