Microsoft security bulletin hides Trojan

By

Malware writers use Redmond to spread malware.

Microsoft security bulletin hides Trojan
Experts are warning of a bogus Microsoft security bulletin that contains malware designed to take control of the user's PC.

The emails contain the header 'Microsoft Security Bulletin MS07-0065' and come with Microsoft logos and a layout very similar to the Microsoft web page.

Recipients are told that a zero-day flaw in Outlook has already been exploited to infect over 100,000 machines, and the email contains a link to the 'patch' for the problem.

"Security bulletins from Microsoft describing vulnerabilities in its software are a common occurrence, so it comes as no surprise to see hackers adopting this kind of disguise in their attempt to infect Windows PCs," said Graham Cluley, senior technology consultant at Sophos.

"The irony is that, as awareness of computer security issues and the need for patching against vulnerabilities have risen, social engineering tricks which pose as critical software fixes are likely to succeed in conning the public."

The link in fact downloads the Behav-112 Trojan, which allows the computer to be operated remotely to send spam or take part in distributed denial-of-service attacks.

The emails have been widely spammed out over the past few days.
Got a news tip for our journalists? Share it with us anonymously here.
Copyright ©v3.co.uk
Tags:

Most Read Articles

CBA using facial recognition logins to verify disputed payments

CBA using facial recognition logins to verify disputed payments

Qantas contacted by "potential cyber criminal"

Qantas contacted by "potential cyber criminal"

SA Power Networks tackles IAM, cloud security under five-year strategy

SA Power Networks tackles IAM, cloud security under five-year strategy

Qantas facing 'significant' data theft after cyber attack

Qantas facing 'significant' data theft after cyber attack

Log In

  |  Forgot your password?