Cybercriminals are now targeting Internet users through a massive SEO poisoning attack. The latest attack identified by security researchers at Sophos, attempts to capitalize on the Google image searches on various topics from global warming to Osama bin Laden’s death. The purpose of the attacks is to entice users to visit compromised web pages, wherein they are sought to download fake anti-virus programs. While browsing the compromised web pages, users are prompted with a fake anti-virus warning, which warns of spyware and adware on the computer. The attack targets Windows and Mac operating systems. When users attempt to close the window, they are prompted to download a .zip file, which either installs a fake anti-virus scanner or a Mac application. The interface of the fake anti-virus application resembles MacDefender, tricking users to believe that scanner is genuine. The fake scanner displays that some crucial applications are infected. Users are enticed to purchase the program to protect confidential information such as credit card information being compromised. Unwary users, who fall prey to the scam, reveal personally identifiable information such as names, credit card numbers, card expiry date, CVV number, e-mail addresses, mailing address and contact numbers.

Fake anti-virus programs are designed to extract confidential information from unsuspecting users by resembling genuine security software. Once installed, the malicious software may make alterations to the system, making it difficult for users to remove the program. Cybercriminals propagate scams through search engines, social networking sites, online advertisements and spam e-mails. Internet users must be vary of pop-ups displaying security alerts. Users must install genuine anti-virus programs by directly visiting website of a legitimate security software vendor. Internet users may abreast themselves of latest security threats by following security blogs, vendor advisories, e-tutorials and undertaking online degree courses on cyber security.

Google had recently announced plans to introduce a new feature in Chrome, which will warn users from downloading malicious Windows executable files. The feature will match the web pages with the latest list of malicious URLs listed by Safe browsing API. Internet users must use latest updated web browsers and refrain from visiting suspicious sites. Internet users must be cautious while conducting image searches for various topics and events. They must be wary of clicking on suspicious links, advertisements and pop-ups. They must adhere to alerts and guidelines issued by Internet security firms, product vendors and computer security response teams. Proactive action is required to deal with the menace of cybercrime. Vibrant threats in the IT environment has led to increased demand for professionals qualified in computer science degree and IT security certifications across various sectors.

Employees use Internet for purpose of research, communication and product promotion. Cybercriminals target organizational users through social engineering techniques to extract privileged information. Organizations must train employees on best practices in information security, use of social media sites and computer security through training sessions and e-learning programs. Organizations may also encourage professionals to undertake online university degree courses on information security and participate in security conferences.