AVAST Software: Online game sites can be cute, pink, and infected

Play safe in a virtual sandbox

PRAGUE, Czech Republic, January 12, 2012 – Computer games are not risk free. The AVAST Virus Lab has identified over 60 individual sites during the last 30 days that contained game or arcade in their URL address.

The most visited site was cutearcade.com, a collection of online games with dressing up, coloring, and even Hello Kitty. avast! users reported an infection at this site over 12,600 times as of January 10. The malicious Trojan redirects viewers to linuxstabs.com, a known distribution point for malware.

Hiddenninjagames.com was the second most popular site. The collection of flash games contains an exploit kit sending visitors to astrofiber.co.be.

“Games like these require clicking and children don’t think much about what they are clicking on,” said Ondrej Vlcek, CTO of AVAST Software. “This makes them – or their parents’ computer – quite susceptible to malware.”

Children’s online behavior – impulsively moving between individual games and websites – increases the odds of picking up malware. “If there is something dangerous, a child will find it. But, moving between sites is normal behavior for most people – regardless of age,” added Mr. Vlcek.

Most of the infected sites seem legitimate, although some may have been created specifically to distribute malware. They contain a grab bag of Java script infections, redirectors, and potentially unwanted programs. For computer users, whether adult or child, there is no way to visually spot the danger.

“At a minimum, people need an antivirus program that looks for various kinds of malware and scans websites for infections. For additional security, users should consider using virtualization features to set up a ‚ ‘sandboxed’ virtual computer,” stated Mr. Vlcek. “With avast!, all users have this option and they can use it to keep themselves and their children safe online.”

Infected Gaming Sites

Cutearcade.com JS:Redirector-HB [Trj]||mult;JS:ScriptXE-inf [Trj]|UR9A642CDCF83165D0-0E|tinf
Hiddenninjagames.com HTML:Iframe-inf|URDDD27FAFBA227BDA-10|tinf
Territoriogamers.com JS:Small-Q [Trj]||mult
1st-kidsgames.com HTML:Iframe-inf|UR69A7CB85F72C776C-09|tinf
Gamesbox.com SWF:Downloader-B [Trj]||mult
jeux.com SWF:Downloader-B [Trj]||mult
coolespiele.com SWF:Downloader-B [Trj]||mult

*AVAST Virus Lab selection of confirmed infected sites as of January 10, 2012.

Your browser is obsolete.

1. On 8 April 2014, Microsoft stops support for Internet Explorer browsers running on Windows XP. This will put your computer and data, such as credit card and online banking details, at greater risk to hackers and malware.

2. Several browser alternatives exist, but we at AVAST use and recommend Chrome, as we find it to be the most-secure option available.