According to FaceTime researchers, a Trojan is falsely boosting traffic statistics for Chinese websites. FaceTime has discovered that the Symfly Trojan is abusing the Alexa Toolbar. Abusing the Alexa Toolbar causes a website’s traffic to be reported incorrectly.

FaceTime Security Labs, the threat research and remediation arm of FaceTime Communications, has discovered a Trojan named Symfly that is influencing Alexa Web traffic rankings for several Chinese Web sites. Customers who have deployed FaceTime Enterprise Edition, including RTGuardian, GEM and IMAuditor and configured for automatic filter updates, are automatically protected from this security threat.

According to their press release today, the Symfly Trojan downloads and installs multiple files to an infected PC, primarily via HTTP. The daisy chain of installations includes the Trojan Adcheat and can install an Alexa Toolbar from Renwu.info without the user’s consent. The infection causes the user’s PC to call out to various Web sites. If the Trojan has installed the Alexa Toolbar, the calls will register as legitimate hits and artificially inflate the site’s Alexa traffic ranking. FaceTime researchers have found that Alexa traffic reports on targeted sites peak in similar patterns, leading them to conclude that the infection is impacting the reported traffic rates.

FaceTime enterprise customers are protected from the Symfly Trojan through Web filtering at the gateway in combination with inoculation at the desktop. The RTGuardian perimeter appliance automatically updates its signatures to provide protection against the initial infection at the gateway. FaceTime’s Greynets Enterprise Manager provides an additional layer of protection with the ability to identify and remediate any infected endpoints.

The FaceTime research team offers a detailed accounting of the infection and the possible motives here.

About FaceTime Communications
FaceTime enables the safe and productive use of greynets like instant messaging, Skype, web conferencing and P2P file sharing. Ranked number one in market share among instant messaging management vendors for the third consecutive year, FaceTime’s award-winning solutions are used by more than 800 customers including nine of the ten largest U.S. banks. FaceTime Security Labs delivers the industry’s first IMPact Index, which assesses “point-in-time” risks posed by viruses, worms and other malware propagating through greynet applications. FaceTime supports or has strategic partnerships with all leading public and private IM network providers, including AOL, Google, Microsoft, Yahoo!, IBM, Reuters, and Jabber.

FaceTime is headquartered in Foster City, California. For more information visit www.facetime.com or call 888-349-FACE.

Related posts:

1. Web Hosts Hijacking 404 Error Pages on Live Web Sites Some web hosting companies have now taken it to a new low: they are monetizing (making money) from your web site without your knowledge. Web...
2. WOT Web of Trust Launches New Version A while back you may recall that I wrote about Web of Trust, the world’s first online tool for reputation rating. Web of Trust...
3. The 11 Types of Alexa Hot URLs and How to Get There Alexa is a subsidiary company of Amazon.com typically known for its rankings of websites. The Alexa Toolbar collects data on the web browsing behavior...
4. Thumbplay Chooses Attivio Enterprise Search Attivio, a software company that specializes in enterprise search solutions and information access, has been chosen to enhance the search functionality of Thumbplay, the...
5. Integrated Marketing Summit Comes to St. Louis December 10 The Integrated Marketing Summit is bringing 30 of the United States’ leading experts to St. Louis, Missouri on December 10, 2009. Some of the topics...

Are you looking for marketing services such as social media optimization, search engine marketing, pay per click program management or consulting, or search engine optimization services? Feel free to contact me.