To print: Click here or Select File and then Print from your browser's menu

This story was printed from silicon.com, located at http://www.silicon.com/

Story URL: http://networks.silicon.com/webwatch/0,39024667,39169407,00.htm

Bot attacks target those looking for romance
Online dating: ID at risk?

By Ina Fried

Published: Monday 10 December 2007

Those entering online dating forums risk having more than their hearts stolen.

A program that can mimic online flirtation and then extract personal information from its unsuspecting conversation partners is making the rounds in Russian chat forums, according to security software company PC Tools.

Security from A to Z

Click on the links below to find out more...

A is for Antivirus
B is for Botnets
C is for CMA
D is for DDoS
E is for Extradition
F is for Federated identity
G is for Google
H is for Hackers
I is for IM
J is for Jaschan (Sven)
K is for Kids
L is for Love Bug
M is for Microsoft
N is for Neologisms
O is for Orange
P is for Passwords
Q is for Questions
R is for Rootkits
S is for Spyware
T is for Two-factor authentication
U is for USB sticks/devices
V is for Virus variants
W is for Wi-fi
X is for OS X
Y is for You
Z is for Zero-day

The artificial intelligence of CyberLover's automated chats is good enough that victims have a tough time distinguishing the 'bot' from a real-life potential suitor, PC Tools said. The software can work quickly too, establishing up to 10 relationships in 30 minutes, the company said. It compiles a report on every person it meets complete with name, contact information and photos.

PC Tools senior malware analyst, Sergei Shevchenko, said in a statement: "As a tool that can be used by hackers to conduct identity fraud, CyberLover demonstrates an unprecedented level of social engineering."

CyberLover has the ability to offer a range of different profiles, from "romantic lover" to "sexual predator". It can also lead victims to a "personal" website, which could be used to deliver malware, PC Tools said.

Although the program is currently targeting Russian websites, PC Tools is urging people in chat rooms and social networks elsewhere to be on the alert for such attacks. Their recommendations amount to just good sense in general, such as avoiding giving out personal information and using an alias when chatting online. The software company believes CyberLover's creators plan to make it available worldwide in February.

Robot chatters are just one type of social-engineering attack that uses trickery rather than a software flaw to access victim's valuable information. Such attacks have been on the rise and are predicted to continue to grow.

Mike Greene, vice president of product strategy at PC Tools, said the company learned of CyberLover's existence last week as part of its regular monitoring of IRC chat rooms and other places where talk about malware takes place.

Greene said it is hard to tell how prevalent use of the program is in Russia.

He said the perceived anonymity of the internet has desensitised people to the fact that information disclosed in an online chat can cause real-world damage.

Greene said: "People are used to not opening attachments or maybe not clicking on a link that shows up in their IM [Instant Messenger], but this emulates a real conversation, so you more are likely to give over personal information, click on a link or send your photograph."

Ina Fried writes for CNET News.com