Trojan Warning

February 25th, 2008

PandaLabs has detected the mass-mailing of messages with sensational subject fields to spread a downloader trojan. The e-mail format is always the same, only the subject field varies:

* Michael Jakson glued up a person a plaster
* Pamela Anderson divorces in third times!!!
* CIA tortures prisoners!!!
* Harry Potter was purchased by pentkhaus!!!
* Two powerful earthquakes happened in the USA!!!
* Princess Diana ´Could be have been killed by MI6´ - conclusions of experts!!!

The variable subject of the e-mail also appears in the text body, along with the text: “New Video!” and a link with the words “Download Now”. Any user clicking the link will be redirected to a web page that will infect their computer with Downloader.SQV. This trojan then downloads two other trojans: Spammer.AGF and KillFiles.BU. The first is designed to resend the e-mails, using the infected computer as a server, while the second prevents certain system functions from operating correctly.

To avoid falling victim to these malicious codes, PandaLabs advises users not to click links in e-mails from unknown sources. It is also advisable to have a good security solution installed and up-to-date to protect against both known and unknown threats.

Source: Financial Mirror, MJFC-USA

Category: General News, Michael Alert!