ISU IT sent out a note (originating from the state) telling people the DM Register website has compromised content (nasty malware) and urged people to stay away from the site until that content has been found and removed.
From the e-mails I've received:
Do Not visit the Des Moines Register site. If the torpig virus is installed on your machine the only solution is a full format and rebuild.
Subject: [security alert] Malware on the Des Moines register web site
This is a high priority security alert. The State of Iowa DAS security group sent a security alert out to State of Iowa employees regarding compromised web pages on the Des Moines register web site.
They recommended that all state employees avoid the Des Moines Register web site and were blocking access to the Des Moines register web page where possible.
I was able to verify their report. I used an instrumented virtual machine to visit the Des Moines Register web page then clicked on the photo of Lolo Jones at the Drake Relays. I quickly found the offending malware server and blocked it at the campus border. It is likely that I succeeded in removing access to the malware. However, it would be wise to avoid the Des Moines Register web site until they find and remove the tainted content.
It is extremely likely that this malware will either install Torpig, a nasty banking Trojan, or the familiar Rogue AV software. Both malware products are intended to drain money from the accounts of victims.
Last edited by Ms3r4ISU; 04-27-2010 at 12:03 PM.
Reason: More details
All content owned by CycloneFanatic.com - All rights reserved 2005-09. By viewing this website you agree to the Terms of Service, Site Rules and Legal Disclaimer. The words, views, images and opinions expressed or provided by users do not reflect the opinions or views of CycloneFanatic.com or Iowa State University. The names, words, symbols, and graphics representing Iowa State University are trademarks and copyrights of the University protected by the trademark and copyright laws of the United States of America and other countries and are used on this web site under license from the University. Original site design, premise & construction by Jeremy Lind.