The news report entices victims to click on an attached Word document and read the latest about the tragedy.
However, opening the Word document attached triggers an exploit which silently downloads a Trojan horse (known as Troj/MalDoc-Fam) onto the user's computer.
According to Sophos, hackers can then use this to steal sensitive and confidential information for financial gain and to commit identity theft.
"Over the last few weeks, we've already seen several examples of cybercriminals trying to exploit the natural disasters suffered by China and Burma, and it seems there's no end to their tactics," said Graham Cluley, senior technology consultant at Sophos
Computer users should be aware not to click on unsolicited emails, no matter how tempting the subject line or content, said Sophos.
Below is an example of the spam email:
BEIJING, May 20 (Xinhua) -- The death toll from the earthquake in southwest China's Sichuan Province has risen to 34,074 nationwide as of 2p.m. Saturday, while 198,347 people were injured, according to the Information
Cybercriminals feed off China earthquake disaster
By
Staff Writers
on May 22, 2008 4:41PM
A new spam email purporting to be a news report about China’s recent earthquake can install a malicious Trojan if its attachment is opened, warned Sophos.
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
Promoted Content
How Australian governments can accelerate their cloud-first IT strategies
Promoted Content
AWS She Builds seeks to bridge the great IT gender gap
Promoted Content
Do you know where your data sleeps at night?
Promoted Content
How UniSuper used BiZZdesign to accelerate its digital transformation
Sponsored Whitepapers
Understanding the next security control points: applications and workloads
Best security practices after rapid Digital Transformation
The CISO View 2021 Survey: Zero Trust and Privileged Access
How and why to backup your Office 365 tenant
ForgeRock for Australia’s Trusted Digital Identity Framework (TDIF)
