"Scob" Web infection may be aimed at stealing financial data

In a MercuryNews.com article, a Web infection may be aimed at stealing financial data. A computer virus designed to steal valuable information like passwords spread Friday through a new technique that converted popular Web sites into virus transmitters.

Though the impact of the "Scob" outbreak was mild compared with recent infections like "Sasser" and "Blaster," security experts worried about its method of delivery.

With Scob, virus writers have discovered yet another way -- beyond e-mail and network techniques -- of distributing their malicious code.

Now that the exploit is out, it won't be long before others adapt it for spamming and for launching broad attacks to cripple the Internet, said Alfred Huger, senior director of engineering at security company Symantec Corp.

It is recommended to get the latest security updates from Microsoft, as well as updates for your anti-virus and firewall programs. Turning off the JavaScript function will lower your risk in the meantime. This exploitable flaw only affects MicroSoft Internet Explorer for Windows, the Mac version is not affected nor are other browsers such as Mozilla and Opera.

Users can search their computers for the files "Kk32.dll" or "Surf.dat" to see if they are infected. Removal tools are available from major anti-virus vendors.

More in the Band of Gonzos Virus Warnings Forum.