Sophos and bit.ly – making short links safer

bit.ly logo
Here’s some good news if you’re one of the millions of people who have come to depend upon shortened urls in your day-to-day life.

bit.ly, isn’t just the default link shortening service used by Twitter, it’s also widely used on other social networking sites and communications as a handy way to shorten a link.

For instance, bit.ly will convert a link such as:

http://www.sophos.com/pressoffice/news/articles/2009/11/bit.ly-agreement.html

to the much more manageable:

http://bit.ly/8JYaoV

Today, bit.ly announced that it was partnering with Sophos (and our friends at Verisign and WebSense) to offer additional protection to users clicking on short bit.ly links to defend against the possibility of them visiting a webpage created by spammers or phishers, or infected with malware.

Cybercrime on social networks

And that’s important, because our research shows that spam, malware and phishing is far from uncommon on social networks.

bit.ly already does some great work filtering links to see if they might be malicious or objectionable, and provides the ability the users to preview the final destination of the link by adding a “+” to the end of any bit.ly URL, but partnering with security vendors such as Sophos should offer an even higher level of protection in future.

Malicious tweet spread via Guy Kawasaki's Twitter account

Of course, it shouldn’t be forgotten that bit.ly is just one of many URL-shortening services out there – and I’m not aware of any which are currently working as hard to fight the bad guys as bit.ly are. It’s possible that the cybercriminals might switch their focus to other less well-known URL shorteners when planting traps for unwary users – so now is not the time to let your guard down.

You can read the corporate propaganda from our PR folks about the partnership here.

Share and Enjoy:
  • Digg
  • del.icio.us
  • Facebook
  • NewsVine
  • Reddit
  • StumbleUpon
  • Google Bookmarks
  • Yahoo! Buzz
  • Twitter
  • Technorati
  • Live
  • LinkedIn
  • MySpace
  • MySpace

URLDistract.A

It is designed to steal information about the computer. It reaches the computer in a file that seems to be unoffensive, which once is run displays a YouTube video and the Trojan is also run.

< ?javax.xml.transform.enable-output-escaping ?

Share and Enjoy:
  • Digg
  • del.icio.us
  • Facebook
  • NewsVine
  • Reddit
  • StumbleUpon
  • Google Bookmarks
  • Yahoo! Buzz
  • Twitter
  • Technorati
  • Live
  • LinkedIn
  • MySpace
  • MySpace

TDSS.CZ

It has rootkit functionalities in order to remain hidden in the system and avoid its detection. When users access any website, another website is displayed before, preventing users to access ir straightly. It reaches the computer passing itself off as a flash update in an email message.

Share and Enjoy:
  • Digg
  • del.icio.us
  • Facebook
  • NewsVine
  • Reddit
  • StumbleUpon
  • Google Bookmarks
  • Yahoo! Buzz
  • Twitter
  • Technorati
  • Live
  • LinkedIn
  • MySpace
  • MySpace

Banbra.GLS

It is designed to steal the banking data of users when they access the website belonging to certain Brazilian banking entities. It reaches the computer in a file which once is run displays a browser window with the image of a false PayPal receipt.

Share and Enjoy:
  • Digg
  • del.icio.us
  • Facebook
  • NewsVine
  • Reddit
  • StumbleUpon
  • Google Bookmarks
  • Yahoo! Buzz
  • Twitter
  • Technorati
  • Live
  • LinkedIn
  • MySpace
  • MySpace

Packed.Generic.268

Risk Level: Very Low. Type: Trojan, Virus, Worm.

Share and Enjoy:
  • Digg
  • del.icio.us
  • Facebook
  • NewsVine
  • Reddit
  • StumbleUpon
  • Google Bookmarks
  • Yahoo! Buzz
  • Twitter
  • Technorati
  • Live
  • LinkedIn
  • MySpace
  • MySpace