Four year olds used to steal their parents' data
Posted on 23 Feb 2012 at 10:03
Davey Winder reveals how malware writers are tricking young children into installing trojans
One of the problems that isn’t addressed by many people – be they parents, media or even IT security vendors – is the relatively new, and totally despicable, practice of using very young children as a conduit to steal the valuable personal data stored on their parents’ computers.
How young? Well, how about pre-school age? BitDefender Online Threats Lab, one of the security vendors doing research in this area of cybercrime, uncovered a whole bunch of Flash-based games, colourful and attractive to young kids, which came complete with a trojan that has been designed to appeal to those same youngsters.
BitDefender even found one painting application where the very act of swiping the paintbrush over an online pet to change the colour of the virtual animal was enough to trigger redirection to an infected site
The games concerned are mostly of the virtual pet variety, including those “swipe the screen with a huge paintbrush to complete a picture” type that are so popular with very young children and their parents alike. Not a problem you say, because the parents would be required to install the application, or at the very least supervise their child when they first visit the website.
That’s where the scum behind these scams are being so clever, because most of these game sites are genuine enough, but have been compromised in order to insert a nice big “click here for more games” or just a “click here” button that then takes the clicker to a different site, where another game pops up or downloads while at the same time a remote access trojan (RAT) capable of stealing financial data is installed. Pretty fiendish, and likely to fool a financially profitable number of parents into allowing their kids to use these games unsupervised, or fail to notice when the bad stuff was being installed.
But worse still, BitDefender even found one painting application where the very act of swiping the paintbrush over an online pet to change the colour of the virtual animal was enough to trigger redirection to an infected site. Remember that the unsuspecting parents are not being required to take any great leap of faith here, because all the games in question were being hosted on legitimate and very high-traffic sites.
Parents whose computers are protected by security software and whose young children are protected by parental supervision during online play sessions are at far less risk of being caught up in all this, but it still causes me concern that people would sink so low as to exploit a four-year-old child who is hardly likely to be worrying about the security consequences of clicking that big green button.
The moral of this tale? Don’t use your laptop as a babysitter, and don’t be one of the 24.7% of parents who, according to BitDefender’s research, don’t supervise their young kids’ online activity.
To be honest, if you're the kind of person who is stupid enough to let a 4 year old child use an internet connected PC unattended, I struggle to muster any sympathy.
By flyingbadger on 23 Feb 2012
Anyone can be caught out
Even teenagers - all they need is "click here and install this software to download free Justin Beeber wall paper". It is not easy to teach people vigilence.
By qwerty on 23 Feb 2012
Please can you link to your source material if possible (I cant find the research on BitDefenders lab page)
By petehobo on 24 Feb 2012
Lots of warnings about 'click here' links
And at the bottom of the article?
A "Download lots of free goodies" link... Nice!
By greemble on 24 Feb 2012
Dastardly and stupid
@flyingbadger - I guess that you don't have children, but my 4.5yrs old likes playing angry birds in chrome or various counting, spelling etc. games on BBC website.
By radnor on 27 Feb 2012
A Security Question
I don't find it particularly surprising that malware writers would use children's programs as a way in. I don't even think it especially "dastardly" since it is not the children themselves who suffer. Even if they did, your average criminal hacking organisation is hardly likely to be worried about it.
I suspect that anyone who has had a four-year old will not be that amazed that their online use is not constantly monitored - parents, especially those in full-time employment, do sometimes have to do something else around the house or with another child. Anything that keeps a four-year old in still and (apparently) innocently occupied is a blessing.
What I wondered was why the four year-old was allowed on a computer account with installation privileges. I'm still learning Windows 7 (just as everyone else is talking about Windows 8!), but isn't it possible to nail down the computer so that trojans can't be installed?
This is a real query - no one else has said it, so I'm wondering if my understanding is at fault here.
By Philippa on 28 Mar 2012
How does supervision help?
What does the supervising adult see that stops this happening? If a swipe is all that is neccessary then why is a 40 year old gamer not equally at risk? If a dialog box appears asking if software is to be installed then surely the problem is not having an admin password, as Phillippa suggests?
By davids4kes on 10 May 2012
Davey is a contributing editor to PC Pro, having covered the internet as a topic since the magazine started in 1994. Since that time he's won numerous awards for his journalism, but remains a small-business consultant specialising in privacy, security and usability issues.
- How to fix Facebook: Social Fixer
- Taking the stress out of WordPress updates
- Where to download free web fonts
- Turn your tablet into a Sky+ remote control
- How to measure the success of a new IT system
- Three years on: the state of the tablet market
- Windows 8: what works and what doesn't
- Yes, I write down my passwords
- How to make money from apps
- Hack your own radio transmitter
- Hands on with the new Google Maps
- Nokia Lumia 925 review: first look
- Why I won't subscribe to Creative Cloud
- GoPro camera strapped to a remote-control helicopter: the ultimate boy's toy
- Acer Iconia A1 review: first look
- Acer Aspire P3 review: first look
- Acer Aspire R7 review: first look
- How we produce the PC Pro podcast
- Google Now draining iPhone battery
- The government website that doesn't work with IE, Chrome, Firefox, Safari, Macs or smartphones
- Dell profits slide 79% amid buyout talks
- Forget cloud subscriptions: users prefer standard licences
- McAfee: cloud storage could help spread viruses
- Analysts question Windows 8 as UK PC shipments slump
- Google pools storage across Gmail and Drive
- Ofcom accused of killing off VoIP competition
- ShoreTel dock turns iPhones and iPads into desk phones
- Bill Gates says iPad users "frustrated"
- Intel Silvermont promises three-fold boost for tablets
- Customers fume as BT introduces IP sharing