Storm Is Back–With Porn Scam
June 22, 2008 – 6:06 PMSecurity researchers Friday warned of a new, massive spam campaign that tries to convince users to install the long-running Storm bot Trojan on their PCs.
The new spam blitz is difficult to characterize, said researchers from MX Logic Inc. and F-Secure, because of the nearly 40 different subject heads used by the spammers. “We’ve seen subjects talking about everything from ‘White House hit by lightning, catches fire’ to ‘Italy knocked out of Euro 2008’ and ‘Nokia unveils revolutionary new phone design’,” said an F-Secure researcher in a post to his company’s blog Friday.
F-Secure has posted a text-only listing of the subject headings its researchers have seen in the wild. Among the more outrageous: “Statue of Liberty struck by lightning, catches fire,” ” Obama quits presidential race,” and “Man wakes up from 40 year coma.”
No matter what the subject headings used, all the spam includes a link to a fake version of the pornographic YouTube-lookalike PornTube.com. According to McAfee researchers, the phony site is hosted on multiple compromised legitimate servers.
Once the user’s browser reaches the spoofed site, a pop-up warns that an ActiveX control must be installed to watch the porn videos. The control is, not surprisingly, nothing of the kind, but is instead a variation of the Storm Trojan.
Source:
http://www.pcworld.com/article/id,147394-pg,1/article.html
You must be logged in to post a comment.