Trojan poses as war death notice

A new Trojan is spreading in an email purporting to be an alert about a major loss of life in Iraq.

The emails were first detected last night and claim to contain a report from The Guardian on the death of 140 US Marines. The email contains a link to the 'full story' but leads users to a bogus web page with two Trojans built in.

The Cgab-A and Borodr-Fam Trojans can be downloaded through an improperly patched version of Internet Explorer.

Once on the PC the Trojans will allow full control, harvesting personal information and using the computer to spam more copies of the Trojan.

"The deaths of American marines in Iraq are a tragedy and it's sickening to think that hackers are prepared to exploit these troubles in an attempt to break into computers for the purposes of spamming, extortion and theft," said Graham Cluley, senior technology consultant at Sophos. 

"Everyone should ensure that they have defences in place to properly protect against the very latest malware attacks."

Iraq has not been used as a social engineering tool for virus propagation before, although in the early days of the ground war spammers hoped to capitalise on patriotic feelings by selling flags and badges. 

Meanwhile, millions of people have received an email from 'Dr Samir Hassan' who is looking to covertly lodge millions of Saddam Hussein's dollars in a Western bank account in exchange for a 10 per cent cut. It is not known if he has had any takers.