Kaspersky Labs described the mass mailing as "unusual" because the messages attempt to spoof the email address mcafee@europe.com.
The Lafool.v infection is hidden in a Word document called 'McAfee Inc. Reports.doc'. The file is 80,635 bytes in size, and allegedly contains a report about the propagation of malicious programs on the internet.
However, the document actually contains a macro written in Visual Basic for Applications.
Lafool.v extracts a new modification of LdPinch, a well-known Trojan password stealing program, from itself and launches it for execution, Kaspersky Labs warned.
LdPinch steals passwords to a number of services and applications, including AOL Instant Messenger and ICQ, and other confidential user data.
Kaspersky Anti-Virus detects the new variant of this program as Trojan-PSW.Win32.LdPinch.bbg.
Malicious Trojan poses as McAfee alert
Security experts have intercepted a mass mailing purporting to come from McAfee, but which actually spreads a Trojan horse.
Add iTnews as your trusted source
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
.jpg&h=140&w=231&c=1&s=0)
Partner Content
From data overload to decisive action – accelerating decisions with AI agents
iTnews State of Security Breakfast comes to Sydney
.jpg&h=140&w=231&c=1&s=0)
Promoted Content
The AI era demands a new kind of network
.jpg&h=140&w=231&c=1&s=0)
Promoted Content
Protecting the Human Operating System: How Technology Teams Can Perform Under Pressure in an Always-On World
SPONSORED RESOURCES
Rethinking Ransomware Recovery: Closing the Detection and Recovery Gap in Asia Pacific
Strategies to Counter the Ransomware Threat in APJ
Craft your ideal hybrid multicloud strategy
Secure your AI future with generative AI defense
See how F5 protects modern applications against evolving threats
Cloud Resilience Summit
iTnews Benchmark Security Awards 2026
iTnews State of Security Breakfast Sydney
iTnews Executive Retreat - Security Leaders Edition - VIC
