Criminals are using the #MH17 hashtag to spread malicious URLs on social media. Hashjacking is a term used to describe the act of leveraging a trending hashtag in order to spread your own message. At present, nearly 500 messages pointing to malicious URLs have been posted. The links point to one of two possible servers, both hosted on IPs in the US. Researchers at Trend Micro speculate that the traffic to the legitimate domains is being used to spike traffic and garner ad views. The malicious domains are connected to a ZeuS variant detected as TSPY_ZBOT and SALITY malware.”]