Malware Attacks via Hotel Internet Connections

[Nude_Lewd_Man]

From an e-mail we're circulating at work

Click icon to go to the IC3 Web site
Intelligence Note
Prepared by the Internet Crime Complaint Center (IC3)
May 8, 2012
Malware Installed on Travelers' Laptops Through Software Updates on Hotel Internet Connections
Recent analysis from the FBI and other government agencies demonstrates that malicious actors are targeting travelers abroad through pop-up windows while establishing an Internet connection in their hotel rooms.

Recently, there have been instances of travelers' laptops being infected with malicious software while using hotel Internet connections. In these instances, the traveler was attempting to setup the hotel room Internet connection and was presented with a pop-up window notifying the user to update a widely-used software product. If the user clicked to accept and install the update, malicious software was installed on the laptop. The pop-up window appeared to be offering a routine update to a legitimate software product for which updates are frequently available.

The FBI recommends that all government, private industry, and academic personnel who travel abroad take extra caution before updating software products on their hotel Internet connection. Checking the author or digital certificate of any prompted update to see if it corresponds to the software vendor may reveal an attempted attack. The FBI also recommends that travelers perform software updates on laptops immediately before traveling, and that they download software updates directly from the software vendor’s Web site if updates are necessary while abroad.

Anyone who believes they have been a target of this type of attack should immediately contact their local FBI office, and promptly report it to the IC3's website at www.IC3.gov. The IC3's complaint database links complaints together to refer them to the appropriate law enforcement agency for case consideration. The complaint information is also used to identify emerging trends and patterns.

[Taxmancometh]

and was presented with a pop-up window notifying the user to update a widely-used software product.

A widely-used software product???? What widely-used software product?

[Nude_Lewd_Man]

I don't know, that's all we got from them...

Source, on their site:
Internet Crime Complaint Center (IC3) | Malware Installed on Travelers' Laptops Through Software Updates on Hotel Internet Connections

[RicheemxX]

I saw several article about this today. I'm not sure there was one specific piece of software targeted but usually you see flash-updates. But my guess is it could be just about anything.

[Taxmancometh]

I use Avira and I just hope it has a virus update for this.

[Nude_Lewd_Man]

Maybe the better option is to not run any AV on your computer - then you know not to trust the pop-up about updating..............??

[osprey4]

To a certain extent, people should know better. But believe me, the further up the management ladder, the less common sense. "Oh, it's my work laptop. If I screw it up, the help desk can fix it."

[Chuckiechan]

Most business laptops are set up so the user can't install software without calling the Help Desk.

Those who's computers are "unlocked", I would hope have enough sense to know that:
1- this is good advice
2- don't download something off the internet just for the hell of it...

[Nude_Lewd_Man]

There's the thing, where I work, we're all tech heads (well, apart from the office admin, security and accountant types - but that's only ~5 people) and we all have local admin permissions......

That said, I don't remember the last time any of us had any issues that we couldn't either fix ourselves......other than when the network fell over when a core switch borked; we didn't have access to it..

[SoloCamo]

To a certain extent, people should know better. But believe me, the further up the management ladder, the less common sense. "Oh, it's my work laptop. If I screw it up, the help desk can fix it."

Most business laptops are set up so the user can't install software without calling the Help Desk.

Those who's computers are "unlocked", I would hope have enough sense to know that:
1- this is good advice
2- don't download something off the internet just for the hell of it...

Exactly, same way it's set up at my current company (Verizon). Within our IT department we pretty much removed anyone from having admin rights due to the idiots.

I think it's easier to win an Olympic gold medal than get admin rights approved here. Luckily I'm on the IT side of the fence so I don't have to worry about not having them