Trojan Camouflaged as Halloween Greeting Card
By CXOtoday Staff
Mumbai, Oct 30, 2007

Websense Security Labs has discovered a new Trojan horse information stealer. It's being e-mailed out as a Halloween Greeting Card in Mexico. When users click the URL, the Trojan horse gets downloaded which intents to steal banking information from users.

Till date, 4 sites in Korea, Brazil, and Russia were spammed with the same binary file. These sites were all up and running at the time of the alert. The file is called 'hallowenDay.exe' and has an MD5 of (65cd5a35bc70075f86cb6404f54d67b8). It's also poorly detected by anti-virus signatures.

Assuming users access the site and select to run the file, a Trojan horse is downloaded onto their machine that's designed to steal banking information from users. The file appears to be packed with a unique custom packer.

We expect to see additional email lures and malicious websites on our radar with Halloween night quickly approaching. The email is written in HTML and has a variety of subject lines.

Related Links:
Malicious Emails Hit Inboxes
Trojan Now Attacks the Australian Prime Minister