Users at risk from 4th July!!!

Users at risk from 4th July .... Trojan Posted by Rene Millman at 5:57 PM , Wednesday, 4th July 2007. Storm spam Trojan returns as Independence Day Electronic Greeting Card.


Users have been warned that e-mails containing a link to download an electronic Independence day - Themed Greeting Card are in fact spam that instead downloads malware...

The storm Trojan has been Active since January this year and in it's current guise it comes via an e-mail inviting recipients to click on a link to receive an independence day greeting from a friend.
The links lead to a compromised computer hosting the JSECARD-a Trojan. The malware then attempts to download the MAL/DORF-C MALWARE.

Among the subject lines used in the spam e-mails include "America - The Beautiful","Independence Day Celebrations" and "July 4th Fireworks Show".
Should the malware successfully download and install the victim's computer... Then becomes a part of BOTNET. The storm Trojan has appeared in a variety of guises over the last few months. Usually, PIGGY BACKING on current events in a bid to entice the users into downloading the malware. Today's run of the Storm TROJAN using the 4th of july and it's hook continues this theme of exploiting current events to entice unsuspecting e-mail users into infecting themselves.

Graham Cluley , Senior Technology Consultant of anti-virus company Sophos said that the fact that the web link contains an IP Address instead of a web address should said ring alarm bells for users.

Rather than being send to a real E-Card website when u click on the link your are visiting someone else's compromised computer...

" What's great is that the Security Community is actively trying to get these sites to be shutdown. But the bad guys just keep on changing the IP Address in the new mails".



- .B.Sabitha
IT - VelTechEngg.College...
Chennai