25 May 2007
Shiver me timbers! It's a pirate Trojan Hackers exploit interest in the movie Pirates of the Caribbean 3
Computer security researchers at SophosLabs™ are warning computer users about a widely-spammed out email teaser promising a trailer of the film "Pirates of the Caribbean 3" - and the chance of free tickets if you are in North America or Europe.
Rather than a trailer for the blockbuster movie starring Johnny Depp, Keira Knightley and Orlando Bloom, however, the Troj/Yar-A Trojan horse is attached to the email.
The email claims to offer free tickets and a trailer of the moview 'Pirates of the Caribbean 3'.
"Of course, there are no tickets," warns Paul Ducklin, Head of Technology, Asia Pacific, at Sophos. "And there is no film trailer - just a malicious program which tries to download further malware from the internet. Remember: if an email sounds too good to be true, then you can safely assume that it isn't true."
Ducklin reminds users that there is an easy solution to the risks posed by unknown or unlikely emails: "Don't try, don't buy, don't click, don't reply!"
Read more about this threat on the SophosLabs blog
Sophos users have been automatically updated to protect against the Yar Trojan horse.
Sophos recommends companies automatically update their corporate virus protection, and defend their users with a consolidated solution to defend against the threats of viruses, spyware, hackers and spam.
Skype worm leaps to ICQ, MSN networks
Stration worm out making new friends
May 24, 2007 (IDG News Service) --
A new variant of the Stration worm, which has been plaguing Windows users for the past year, has made the jump from Skype to the ICQ and MSN Messenger networks.
This latest variant popped up earlier this week, according to Chris Boyd, a researcher at FaceTime Communications Inc., who blogs under the pseudonym "Paperghost."
"They're using Skype as a jump off into other more established networks," Boyd said. "The infection will go looking for other instant messaging clients that are on the PC and then attempt to send the infection message that it initially sends through Skype through these other chat systems."
For a computer to be infected, a user must first click on a link and then agree to download an executable file. In one sample provided by Boyd, the malicious link is listed below the instant message, "Check this out. Give me your opinion."
Once installed, the worm will gradually start to send out messages to the victim's contacts, Boyd said.
Instant message worms have spread from network-to-network in the past, but this is the first time Boyd has seen a worm jump from Skype to another network.
"It's an odd system to make, because these guys have a foot in the door [in the Skype network]," he said. "You think they'd focus all their energies onto exploiting Skype."
Stration is not widespread and is considered to be a low-risk infection, but it has been a tough worm to fight for some security vendors. Over the past year it has morphed into hundreds of variants, and antivirus companies have been having a hard time keeping track of its many iterations.
Stration has also been called "Warezov" and "Stratio."
Nobody knows who is behind the worm, but the domains that host the malicious code are registered through a Chinese Internet company, Boyd said.
資訊安全 (4)
