Magala Trojan Clicking on Search Result Ads for Money

Kaspersky Lab Researcher, Sergey Yunakovsky had discovered a new click-fraud Trojan namely “Magala” which is infecting the Windows based PC in a very unique way. It is using virtual desktops to click on search-result ads in order to gain financial benefits. This Trojan is especially targeting IE 9 or above. How Dows Magala Functions? The aim of Magala Trojan is to run search-engine queries and click on ads. This happens by initializing a virtual desktop and then installs “Maps Galaxy”. This toolbar changes the IE homepage to MyWay/hp.myway.com which is a search-engine that uses custom Google search result. Magala communicates with a “Command and Control” server for downloading the list of keywords. These words are used to run a search queries on MyWay website which is now your homepage of IE. In the search result page, it clicks on the first ten search results and many of them are promoted Read more