McAfee and F-Secure have published reports of a new password stealer being spammed around the world. This one doesn't spread further, so it's not a virus. Once the user opens the attachment, a password stealer and a backdoor is installed to the system.
Multidropper-KN - Trojan with War Theme (ZIP attachment)
http://vil.nai.com/vil/content/v_125316.htm
http://www.f-secure.com/weblog/
FORMAT OF SPAMMED EMAIL TO AVOID / BLOCK:
Subject of message: Important news about our soldiers in IRAQ!!!
Message body: Seven officers was lost today, follow the link to get the full story.
(Url link pointing to an innocent page showing stats on Iraqi soldiers killed).
Attachment: IMPORTANT INFORMATION.ZIP (17,520 bytes)
Infection: When run, the trojan drops both Backdoor and a Password Stealing components on to the victims computer.
Multidropper-KN - Trojan with War Theme (ZIP attachment)
http://vil.nai.com/vil/content/v_125316.htm
http://www.f-secure.com/weblog/
FORMAT OF SPAMMED EMAIL TO AVOID / BLOCK:
Subject of message: Important news about our soldiers in IRAQ!!!
Message body: Seven officers was lost today, follow the link to get the full story.
(Url link pointing to an innocent page showing stats on Iraqi soldiers killed).
Attachment: IMPORTANT INFORMATION.ZIP (17,520 bytes)
Infection: When run, the trojan drops both Backdoor and a Password Stealing components on to the victims computer.

Help
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.



Back to top








