Wednesday, May 19, 2004
New password stealer being spammed Posted by Mikko @ 12:30 GMT

We've received some reports of a new password stealer being spammed around the world. This one doesn't spread further, so it's not a virus. Once the user opens the attachment, a password stealer and a backdoor is installed to the system.

The emails look like this:

   From: [random email address]
   Subject: Important news about our soldiers in IRAQ!!!
   To: [random email address]

   Seven officers was lost today,
   follow the link to get the full story.



The mail links to website iraqbodycount.net, which has nothing to do with the whole case.


<<< The weird traffic is generated by two worms
More on the Bobax worms >>>