Microsoft security bulletin hides Trojan

By

Malware writers use Redmond to spread malware.

Microsoft security bulletin hides Trojan
Experts are warning of a bogus Microsoft security bulletin that contains malware designed to take control of the user's PC.

The emails contain the header 'Microsoft Security Bulletin MS07-0065' and come with Microsoft logos and a layout very similar to the Microsoft web page.

Recipients are told that a zero-day flaw in Outlook has already been exploited to infect over 100,000 machines, and the email contains a link to the 'patch' for the problem.

"Security bulletins from Microsoft describing vulnerabilities in its software are a common occurrence, so it comes as no surprise to see hackers adopting this kind of disguise in their attempt to infect Windows PCs," said Graham Cluley, senior technology consultant at Sophos.

"The irony is that, as awareness of computer security issues and the need for patching against vulnerabilities have risen, social engineering tricks which pose as critical software fixes are likely to succeed in conning the public."

The link in fact downloads the Behav-112 Trojan, which allows the computer to be operated remotely to send spam or take part in distributed denial-of-service attacks.

The emails have been widely spammed out over the past few days.
Got a news tip for our journalists? Share it with us anonymously here.
Copyright ©v3.co.uk
Tags:

Most Read Articles

India's alarm over Chinese spying rocks CCTV makers

India's alarm over Chinese spying rocks CCTV makers

Hackers abuse modified Salesforce app to steal data, extort companies

Hackers abuse modified Salesforce app to steal data, extort companies

Cyber companies hope to untangle weird hacker codenames

Cyber companies hope to untangle weird hacker codenames

Victoria's Secret pulls down website amid security incident

Victoria's Secret pulls down website amid security incident

Log In

  |  Forgot your password?