<<<
Wednesday, May 19, 2004
>>>
 
New password stealer being spammed Posted by Mikko @ 12:30 GMT

We've received some reports of a new password stealer being spammed around the world. This one doesn't spread further, so it's not a virus. Once the user opens the attachment, a password stealer and a backdoor is installed to the system.

The emails look like this:

   From: [random email address]
   Subject: Important news about our soldiers in IRAQ!!!
   To: [random email address]

   Seven officers was lost today,
   follow the link to get the full story.

   http://www.iraqbodycount.net/bodycount.htm

   Attachment: IMPORTANT INFORMATION.ZIP

The mail links to website iraqbodycount.net, which has nothing to do with the whole case.

www.iraqbodycount.net






<<< The weird traffic is generated by two worms
|
More on the Bobax worms >>>