Wednesday, May 04, 2005

Are you sure you want to read this?

For the many computer users that never bother to use anti-virus, firewall, or Ad-Aware type softwares to protect their computer from spyware and viruses, here is just another reason for you not to worry.

BBC NEWS | Technology | Bogus blogs snare fresh victims

Cyber criminals are starting to use fake blogs to snare new victims.

The bogus web journals are being used as traps that infect visitor's machines with keylogging software or viruses.

Filtering firm Websense said it had found hundreds of bogus blogs baited with all kinds of malicious software to snare the unwary.

Websense warned that the baited blogs could get past traditional security measures that try to protect people from malicious programs.

Hidden harm

The company said blogs were being used because they inadvertently offered lots of help to computer criminals.

Blogs are free and simple to use, offer users lots of storage space, can be used anonymously and most do not scan stored files for viruses and other malicious programs.

Websense said it had seen examples of some computer criminals creating a legitimate looking weblog, loading it with keylogging software or viral code...

... viruses hosted on weblogs might be a danger because they get round the filtering systems many firms have created to ensure malicious programs do not reach employees.

Users were urged to keep anti-virus and patches up to date, regularly scan machines with anti-spyware products and exercise caution when reading unsolicited messages sent via e-mail or instant messenger.

You have to keep in mind that this is just a phishing scam variation, but instead of hoping you will enter user names and passwords at the site they are looking to take control of your computer. That, of course, can still lead to identity theft once they control your computer. Another important fact to remember is that malicious code has always been hidden everywhere on the web. Hiding it on a blog is no different than websites that hide it in pictures or in links they put on their pages.

There really is not much you can do to avoid "all" spyware and viruses. The best you can do is hope that the people at companies like McAfee, Norton, Spybot destroyer, Ad-Aware, and others that help protect most computers stay on top of these problems as they develop.

If you do not have any of the needed software to protect your computer are you sure you want to read blogs? Of course you do. It is no less safe than any other web page you may visist.