• Trojan Camouflaged as Halloween Greeting Card
    Share
    |
  • By CXOtoday Staff, Oct 30, 2007 1618 hrs IST
  • Tags : Trojan Camouflaged as Halloween Greeting Card
  • Websense Security Labs has discovered a new Trojan horse information stealer. It's being e-mailed out as a Halloween Greeting Card in Mexico. When users click the URL, the Trojan horse gets downloaded which intents to steal banking information from users.

    Till date, 4 sites in Korea, Brazil, and Russia were spammed with the same binary file. These sites were all up and running at the time of the alert. The file is called 'hallowenDay.exe' and has an MD5 of (65cd5a35bc70075f86cb6404f54d67b8). It's also poorly detected by anti-virus signatures.

    Assuming users access the site and select to run the file, a Trojan horse is downloaded onto their machine that's designed to steal banking information from users. The file appears to be packed with a unique custom packer.

    We expect to see additional email lures and malicious websites on our radar with Halloween night quickly approaching. The email is written in HTML and has a variety of subject lines.

    Related Links:
    Malicious Emails Hit Inboxes
    Trojan Now Attacks the Australian Prime Minister
  • by jaiden on Dec 16, 2007 02:29 AM 
    PWS-Banker.dldr
  • by ahmed on Nov 03, 2007 09:26 PM 
    ok
  • by Guido on Nov 03, 2007 01:17 AM 
    be si prova un po di preoccupazione quando si installa la prima volta.
  • Re:
    by Guido on Nov 03, 2007 02:03 AM
    mi scuso se ho emmesso l'errore.
  • by Guido on Nov 03, 2007 01:13 AM 
    vediamo se ? efficace questo modello 2008. cordiali saluti.
  • When you talk, we listen
  • Do you find CXOtoday useful?
    Advise us on how to make it better.
  • Advertisement  
  • Advertisement