World War III spam dupes users

A weekend spam run tried to dupe recipients into downloading the infamous “Storm Trojan” by attaching files that posed as videos of a bogus missile strike by the U.S. against Iran, antivirus vendors said today.The unsolicited e-mail, which arrives with provocative subject lines that include “Missle [sic] Strike: The USA kills more then [sic] 20000 Iranian citizens,” “USA Declares War on Iran,” and “USA Just Have Started World War III,” include attached executable files such as video.exe and readme.exe, said Symantec Corp.

“The underlying threats are actually nothing new,” said Symantec researcher John McDonald on the company’s security response team’s blog. “They are simply minor variants of Trojan.Peacomm and W32.Mixor, which have been repacked in an attempt to avoid existing detection and appear to have been largely successful at that.” Symantec added that executable file attached to the war-scare spam is actually a worm that downloads and install both Trojan horses.

According to data from MessageLabs Ltd., Peacomm — also known as Zhelatin — was the most prevalent piece of malware in the past 24 hours. It accounted for 32% of all malicious code being distributed worldwide, said MessageLabs.

By early today, other security companies, including F-Secure Corp., Fortinet Inc., Kaspersky Lab Inc. and Sophos PLC, had released updated signatures to detect the tweaked threat.

Related posts:

1. “Missile Wars and World War III”
2. Single-victim spam attacks skyrocket
3. World of Warcraft: the spam crusades
4. Symantec is interested to acquire MessageLabs
5. Users hit by Russian Trojan … again
6. Netsky still spam malware king

Related posts brought to you by Yet Another Related Posts Plugin.