Malicious Trojan poses as McAfee alert

By
Follow google news

Security experts have intercepted a mass mailing purporting to come from McAfee, but which actually spreads a Trojan horse.


Kaspersky Labs described the mass mailing as "unusual" because the messages attempt to spoof the email address mcafee@europe.com.

The Lafool.v infection is hidden in a Word document called 'McAfee Inc. Reports.doc'. The file is 80,635 bytes in size, and allegedly contains a report about the propagation of malicious programs on the internet.

However, the document actually contains a macro written in Visual Basic for Applications.

Lafool.v extracts a new modification of LdPinch, a well-known Trojan password stealing program, from itself and launches it for execution, Kaspersky Labs warned.

LdPinch steals passwords to a number of services and applications, including AOL Instant Messenger and ICQ, and other confidential user data.

Kaspersky Anti-Virus detects the new variant of this program as Trojan-PSW.Win32.LdPinch.bbg.

Add iTnews as your trusted source

Got a news tip for our journalists? Share it with us anonymously here.
Copyright ©v3.co.uk
Tags:

Most Read Articles

Supply chain attack hits 100 million-download Axios npm package

Supply chain attack hits 100 million-download Axios npm package

APRA pulls data submission system after security pentest

APRA pulls data submission system after security pentest

NAB is co-designing a SIEM with Databricks

NAB is co-designing a SIEM with Databricks

WA local gov entity lost $350,000 in phishing attack

WA local gov entity lost $350,000 in phishing attack

Log In

  |  Forgot your password?