Michael Jackson is being used to recruit PCs for a
network of zombie computers under the remote control of
hackers.
Security software company Sophos is reporting a massive
spam campaign using current interest in the Jackson
trial, at which the jury is currently considering its verdict.
The email, which contains several spelling mistakes, is headed 'Re: Suicidal
aattempt' and carries the following message:
"Last night, while in his Neverland Ranch, Michael Jackson has made a
suicidal attempt. They suggest this attempt follows the last claim was made
against the king of pop. 46 years old Michael has left pre-suicid note which
describes and interpretes some of his sins. Read more..."
If users follow the URL they reach a page indicating that the site's
bandwidth has been exceeded. However, the site contains a
Trojan program called
Troj/Borobt-Gen
and attempts to install the malware onto the computer via a
patchable
flaw in Internet Explorer.
Once infected the computer becomes part of a botnet, a
network of slave PCs that can be used to generate spam or take part in online
denial of service attacks.
"There's loads of it about at the moment," said Carole Theriault, security
consultant at Sophos. "The volume of spam is ramping up as the day progresses."
This is not the first time that self-styled 'king of pop' Jackson has been
used as a hook by hackers. In 2004 a link purporting to show the singer's home
videos used a similar tactic to infect PCs with the Hackarmy
Trojan.
Hackarmy has been used repeatedly in this kind of attack, and has
demonstrated the effectiveness of headline-grabbing spam by using hooks like
Osama Bin Laden, American hostage
Nick Berg and Arnold
Schwarzenegger.
"We find that once this type of spam lands in employees' inboxes, all common
sense about suspicious emails goes out the window," said Mark Herbert, founder
of managed email security firm intY.
"Against their better judgement, people will follow the link that downloads a
dangerous Trojan onto their computer. Businesses need to continually warn
employees to be on their guard."
Do you agree?
Have your say on this article