Fake malware infection alerts spammed out
Latest spam run masquerades as malware warning and fix.
The group behind last week's Fourth of July spams are thought to be
behind another campaign this week, with messages claiming to warn of malware infections detected on the recipient's
system, and a trojan waiting to be downloaded if a link to an alleged patch is clicked.
The spams use subject lines like 'Virus detected' or 'trojan alert', and suggest that malware is behind some
'suspicious activity' which has been spotted on the system by an unspecified 'robot'. Links marked 'install this
patch' lead to web pages, via specific IP addresses rather than DNS names, which carry exploits attempting to
infect vulnerable systems.
More details on the latest campaign, including screenshots of the spams, are
here from F-Secure or
here from Websense.
09 July 2007
Tags:
exploit, malware, social engineering, spam.
del.icio.us 
digg this
As expected, the annual VB100 test on Windows XP was an epic. A higher than usual pass rate was tempered by numerous stability issues with the products under test, prompting the unveiling of a new stability rating system. John Hawes has all the details.