Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Perimeter

Guest Blog // Selected Security Content Provided By Sophos
What's This?
10/19/2009
09:38 AM
Graham Cluley
Graham Cluley
Security Insights
50%
50%

Balloon Boy TV Circus Exploited By Hackers

Malicious hackers are poisoning search engines to entrap computer users hunting for the latest news on the Falcon Heene case.

Malicious hackers are poisoning search engines to entrap computer users hunting for the latest news on the Falcon Heene case.It shouldn't be a surprise, of course. After all, we've recently seen cybercriminals exploiting interest in breaking news stories, such as the deaths of Hollywood actor Patrick Swayze and Boyzone boyband star Stephen Gately, and even the on-court outburst of tennis ace Serena Williams.

But the story of the 6-year-old boy who had apparently hitched a lift in his father's experimental helium balloon has transfixed America for some days. Interest shows no sign of subsiding, as the boy was first found, then said some things on TV that made people think perhaps the whole scare was a hoax devised by his parents, and then vomited during a TV interview.

Understandably, perhaps, people have been searching the Internet for the latest developments in the story -- and that's where hackers have been taking advantage.

Dangerous Balloon Boy search result

Of course, visiting such Websites could put your computer and identity at risk.

When a hot news story breaks, you would be wiser to go to the established news Websites rather than trusting Web pages that could have been created specifically by hackers with the intention of defrauding you out of your money.

Graham Cluley is senior technology consultant at Sophos, and has been working in the computer security field since the early 1990s. When he's not updating his other blog on the Sophos website, you can find him on Twitter at @gcluley. Special to Dark Reading.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Mobile Banking Malware Up 50% in First Half of 2019
Kelly Sheridan, Staff Editor, Dark Reading,  1/17/2020
7 Tips for Infosec Pros Considering A Lateral Career Move
Kelly Sheridan, Staff Editor, Dark Reading,  1/21/2020
For Mismanaged SOCs, The Price Is Not Right
Kelly Sheridan, Staff Editor, Dark Reading,  1/22/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment:   It's a PEN test of our cloud security.
Current Issue
The Year in Security: 2019
This Tech Digest provides a wrap up and overview of the year's top cybersecurity news stories. It was a year of new twists on old threats, with fears of another WannaCry-type worm and of a possible botnet army of Wi-Fi routers. But 2019 also underscored the risk of firmware and trusted security tools harboring dangerous holes that cybercriminals and nation-state hackers could readily abuse. Read more.
Flash Poll
How Enterprises are Attacking the Cybersecurity Problem
How Enterprises are Attacking the Cybersecurity Problem
Organizations have invested in a sweeping array of security technologies to address challenges associated with the growing number of cybersecurity attacks. However, the complexity involved in managing these technologies is emerging as a major problem. Read this report to find out what your peers biggest security challenges are and the technologies they are using to address them.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-7220
PUBLISHED: 2020-01-23
HashiCorp Vault Enterprise 0.11.0 through 1.3.1 fails, in certain circumstances, to revoke dynamic secrets for a mount in a deleted namespace. Fixed in 1.3.2.
CVE-2019-15707
PUBLISHED: 2020-01-23
An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to perform system backup config download they should not be authorized for.
CVE-2019-15712
PUBLISHED: 2020-01-23
An improper access control vulnerability in FortiMail admin webUI 6.2.0, 6.0.0 to 6.0.6, 5.4.10 and below may allow administrators to access web console they should not be authorized for.
CVE-2019-16512
PUBLISHED: 2020-01-23
An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. There is stored XSS in the Appearance modifier.
CVE-2019-16513
PUBLISHED: 2020-01-23
An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. CSRF can be used to send API requests.