Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« 5 New Anti-Spam Techniques: Promising Technologies for Dealing with Spam and Phishing | Main | Mozilla Thunderbird: Last Great Email Client? »

VA Tech Tragedy Exploited by Malware Writers

After the past several days in Blacksburg I guess I should have realized there are no depths too low for some but I didn't see this one coming. The Register and the SANS Institutes are reporting attackers are exploiting the tragedy to spread their malware.

From The Register

Spam email messages carry a photograph of gunman Cho Seung-hui and claim to link to a Brazilian movie website carrying footage of the campus shootings. Surfers who click on the link will find only a malicious screensaver file (TERROR_EM_VIRGINIA.SCR) that attempts to install a banking spyware Trojan horse on the Windows PCs of prospective marks, anti-virus firm Sophos reports. The Packer Trojan horse attempts to steal online banking credentials. This login information offers cybercrooks the chance to subsequently clean out online banking accounts.

The SANS Institute warns there has been a flurry of activity in domain registration of sites related to the Virginia Tech tragedy. They warn:

Be on the lookout for a rash of spam & phishing coming from these leeches. If you receive a plea for donations, check the organization out closely before opening up your e-gold, Paypal, Visa or other account or providing any personal information. In some cases the phishers may use voice, fax, email and websites to dupe generous and thoughtful victims into disclosing valuable information.

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/281

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net