Total Members: 14197
Posted by: Samker
« on: 21. July 2009., 15:14:32 »
Wrongdoers have created a new strain of swine flu-themed malware.
A Trojan, containing backdoor and keylogger functionality, poses as a Word document from the US Centre of Disease Control giving information about the disease.
The infectious file - Novel H1N1 Flu Situation Update.exe - appears with an icon that makes it look like a Word document file. Users tempted to open the booby-trapped file are presented with a document.
Meanwhile the malicious code does its mischief in the background, as explained in a write-up (containing screenshots) by net security firm F-Secure here: http://www.f-secure.com/weblog/archives/00001734.html
F-Secure classifies the Trojan as Agent-AVZQ.
Junk mailers were quick to latch onto earlier media hype about the swine flu epidemic to promote websites selling dodgy pharmaceuticals. Agent-AVZQ is the first incident we've come across that uses the increased hype about pig plague to promote malware.
Using events in the news to spice up malware threats has been the stock in trade of VXers for years.
(The Register)