A new Trojan is spreading in an email purporting to be an alert about a major
loss of life in Iraq.
The emails were first detected last night and claim to contain a report from
The Guardian on the death of 140 US Marines. The email contains a link
to the 'full story' but leads users to a bogus web page with two Trojans built
in.
The
Cgab-A
and
Borodr-Fam
Trojans can be downloaded through an improperly patched version of Internet
Explorer.
Once on the PC the Trojans will allow full control, harvesting personal
information and using the computer to spam more copies of the Trojan.
"The deaths of American marines in Iraq are a tragedy and it's sickening to
think that hackers are prepared to exploit these troubles in an attempt to break
into computers for the purposes of spamming, extortion and theft," said Graham
Cluley, senior technology consultant at
Sophos.
"Everyone should ensure that they have defences in place to properly protect
against the very latest malware attacks."
Iraq has not been used as a social engineering tool for virus propagation
before, although in the early days of the ground war spammers
hoped to capitalise on patriotic feelings by selling
flags and badges.
Meanwhile, millions of people have received an email from 'Dr Samir Hassan'
who is looking to covertly lodge millions of Saddam Hussein's dollars in a
Western bank account in exchange for a 10 per cent cut. It is not known if he
has had any takers.
Do you agree?
Have your say on this article