Obama speech steals the show! - CIOL News Reports

Email Spam

Most Commented

Unified Communication for your Biz

Improve your contact center performance. See how you can make a difference.

Watch Now

Reach the ICT Community

Engage and build your ICT audience with CIOL online advertising.

Know more

Obama speech 'steals' the show!

Watch out before clicking on that Adobe Flash Player update through spam email, warns Trend Micro; same group involved that sent the fake bank certificate spam

Sunday, November 09, 2008

Email This

Print This

Comments

RSS

BANGALORE, INDIA: While the race to the US presidency has ended with Barack Obama winning by a landslide, the race for new Web threats related to his victory has now begun. Trend Micro Research Manager Ivan Macalintal reported of spam messages that started circulating to spread malware, within hours after Obama delivered his acceptance speech.

Says Amit Nath, Country Manager, India & SAARC, Trend Micro: "The spam which has so far affected computers in China, US and Japan, may come with a subject line like, 'Election Night Results' or 'Priorities for the New President' or 'Fear of a Black President'. The modus operandi of
infecting is quite stealthy, which may lead several gullible users infected, the email invites readers to click on a link to watch Obama's speech, this link leads them to a make-believe website, 'America.gov'.

The video pane reads, 'Loading Player', and prompts to download Adobe Flash Player. To further make it look genuine, the site also provides the estimated time for downloading as 4-6 seconds! This tricks users into clicking the link that serves the malicious file adobe_flash9.exe."

Trend Micro detects the downloaded Trojan file as TROJ_DLOADER.ISZ of 3,261 bytes size. Trend Micro researcher Macalintal further points out that this spam run is from the same group that sends fake bank certificate spam (targeting Wachovia, Bank of America, Merrill Lynch, and a German bank's account holders). The properties of this attack still suggest cybercriminals using a fast-flux network of compromised computers. This spam run is currently still underway as of this writing, using different subjects and fast-changing domains.

Warns Nath: "Trend Micro analysis reveals that TROJ_DLOADER.ISZ downloads an infostealer, TSPY_PAPRAS.AM, which in turn drops a rootkit
component which hides its routines. This infostealer dives into network packets to scour for passwords using Carnivore by searching strings like
ftp, icq, imap, and pop3. It sends stolen information to a server in Ukraine. The Trojan is known to infect Windows 98, ME, NT, 2000, XP and
Server 2003."

The malicious URL where this Trojan is downloaded is already blocked by the Trend Micro Smart Protection Network.

©CIOL Bureau

Would you like to on this article?

Be first to comment on this article

Name
Email
Your reply

Intuit Money Manager set to make India debut

Is China speaking English to beat Indian IT?

Obama visit arouses mistrust among China netizens

I have never used Twitter: Obama

Satyam rejects Rs 1230-cr claims from 37 firms

Logica signs deal with Microsoft for cloud

Top 10 Mobile App Trends in 2012

McAfee warns on "The Twelve Scams of Christmas"

Celstream partners Verizon Business for cloud

Ciena raises bid for some Nortel assets

	Stop squeezing the data. Use ILM!
	Carry your Dream, Convey your Value with ZTE
	A fault tolerant server to reduce your TCO

	A must attend event for IT Professionals
	How to make your enterprise productive
	Unified Communication can impact business. Know how

	Making Web3.0 a Reality!
	CIOL Enterprise Next :What's NEXT in IT? :
	Decrease Total System Costs With Cyclone IV FPGAs

	Reach your desired Target Audience and realize high ROI
	Effective ways of Customer Acquisition through Demand Generation
	Reach 2,500 potential Enterprise Customers!