Chrome 'Font Wasn't Found' Malware Targets Windows Users Asylum rwxr-xr-x 0 4:24 PM

Filename	Chrome 'Font Wasn't Found' Malware Targets Windows Users
Permission	rw-r--r--
Author	Asylum
Date and Time	4:24 PM
Label
Action

(pc-Google Images)

A new kind of malware is making the rounds and is reportedly affecting Chrome users on Windows and Mac. Founded by NeoSmart Technologies, the “font wasn’t found” malware is taking the form of what looks like a real Chrome pop-up.

The malware works by replacing text on a page with gibberish and then prompting the user to download an update to the “Chrome Font Pack.” Clicking on the Update button will then download an application installer.

“This attack gets a lot of things right that many others fail at. The premise is actually believable: the text doesn’t render, and it says that is caused by a missing font, which it then prompts you to download and install,” says NeoSmart staffer Mahmoud Al-Qudsi .

“The usage of a clean, well-formatted dialog to present the message with the correct Chrome logo – and, more importantly, – the correct shade of blue for the update button. The shape of the update button seems correct, and the spelling and grammar are definitely good enough to get a pass.”

Al-Qudsi notes the malware includes incorrect Chrome version descriptions and blurred image text that indicate it’s a fake update. What is even worse is that neither Windows Defender nor Chrome recognises this software as malicious and allow users to download it.

via E Hacking News - Latest Hacker News and IT Security News Chrome 'Font Wasn't Found' Malware Targets Windows Users http://ift.tt/2mCkDCR