Free Newsletters
Technology & Business Daily

InfoWorld
Log-in | Register

Storm Trojan floods e-mail boxes

Malicious software disguised as a report on the severe storms battering northern Europe


Malicious Trojan horse software claiming to provide information on topics like the deadly storms that have battered Europe this week has infected thousands of computers over the past 24 hours, security vendor Sophos PLC warned Friday.

The e-mail tries to entice victims into clicking on the malicious attachments by offering reports on topics like "230 Dead as storm batters Europe," or "U.S. Secretary of Sate Condoleeza Rice has kicked German Chancellor," said Graham Cluley, a senior technology consultant with Sophos.

The attachments have names such as "Full Story.exe" or "Full Video.exe." Once they are launched, these files install software that then waits to receive further instructions over the Internet, Cluley said. Unlike a worm, this Trojan software does not immediately seek out other targets to infect once it has been installed.

"You think you're reading a news report or you're watching a movie," he said. "It's the age old technique that we've seen since the mid 1990s: Here's something you want to look at. Look here!"

Cluley estimates that the Trojan accounted for about one of every 200 e-mails being sent on the Internet Friday.

These e-mails appear to have been particularly effective because they offer information on a topic that is of intense public interest in Europe right now. Over the past few days, storms in northern Europe have caused widespread damage and killed close to 40 people.

Symantec has seen this particular Trojan variant in circulation since Wednesday and has counted "thousands" of infections since then. "It's not a small threat, but it isn't an epidemic either," said Dave Cole, a director with Symantec Security Response.

This latest Trojan -- rated as a "medium" threat by Symantec -- is no more widespread than other similar outbreaks over the past year, but it has raised eyebrows by coming on so quickly, security expert said.

Some customers were finding that the Trojan was making up as much as 10 percent of all their incoming e-mail on Thursday, said Adam O'Donnell, a senior research scientist at Cloudmark. "It's not as bad as some other ones," he said. "It just sped up so quickly, it caught some people by surprise."


Talkback:

commentPost a Comment

 

MOST COMMENTS

 
 





Develop an integrated management and security strategy
Watch this Webcast and discover a scalable mobile software platform that combines mobile device management, enterprise-to-edge security, email/messaging, and back-office application extension capabilities, to empower employees to do their work anywhere, anytime, on any device. Sponsor: Sybase iAnywhere

»  Click here to view this Webcast
  The Silver Lining: Cloud Computing
This IT Strategy Guide digs deep into cloud computing helping put you ahead of the curve on this hot topic. It explores the differences between cloud computing, grid computing and utility computing and then helps you see where and how each applies to your business. Sponsored by Box.net

»  Click here to download now

- Special Advertising Partners -
WHITE PAPERS
 

» Technology White Papers Library

Technology White Papers by Topic

Technology White Papers E-mail Alert

Find out when the latest white paper is available:
 
 
INFOWORLD MARKETPLACE
 
» BUY A LINK NOW
 
 

Video

 
 
 

Podcasts

 
 
 

 

Columnists

 
 
 

Resource Center


Ads by techwords beta  [See your link here]
 




Sponsored Technology Links

 
 
 HOME  NEWS  BLOGS  PODCASTS  VIDEOS  TECHNOLOGIES  TEST CENTER  EVENTS  CAREERS   About | Advertise | Awards | RSS | Contact Us 

Copyright © 2008, Reprints, Permissions, Licensing, IDG Network, Privacy Policy, Terms of Service.
All Rights reserved. InfoWorld is a leading publisher of technology information and product reviews on topics including viruses,
phishing, worms, firewalls, security, servers, storage, networking, wireless, databases, and web services.

CIO :: ComputerWorld :: CSO :: Demo :: GamePro :: Games.net :: IDG Connect :: IDG World Expo
Industry Standard :: IT World :: JavaWorld :: LinuxWorld :: MacUser :: Macworld :: Network World :: PC World :: Playlist