Bredolab trojan surges to new heights

Security administrators are being warned of a huge surge in incidents of the Bredolab trojan, which could allow hackers to gain complete remote control of an organisation's PCs.

Researchers at hosted security firm MessageLabs said that the trojan, which is being sent out by the Cutwail botnet, has reached its highest ever levels, and now accounts for 3.5 per cent of all spam and 5.6 per cent of all malware intercepted each day.

MessageLabs, which is now part of Symantec, said that so far in October around 3.6 billion Bredolab malware emails are likely to be in circulation globally each day.

The trojan is likely to appear in a zip file attachment to an unsolicited email with a subject line referring to postal tracking numbers, said the firm. The email prompts the recipient to open and run the attachment, which automatically installs the trojan.

"By nature, once this trojan is on a system, it is unlikely to be detected and will allow the controller to do whatever they wish with the infected machine, such as installing other malware and spyware," said MessageLabs senior analyst Paul Wood.