Soccer fan Trojan Horses

Websense Security Labs has reports of a new email that is spoofed as a story about a group of soccer fans that have been killed by teenagers. The email includes the subject: "soccer fans killed by 5 teens" and includes an attachment called "soccer_fans.jpg.exe".

If the attachment is run, a Trojan Horse downloader connects to a website that is hosted in the United States and was up at the time of this alert. The filename downloaded is called "dianaimag.exe". When that file runs, it attempts to disable Microsoft's Firewall and then visit another website to download code. WebsenseŽ - Security Labs Alert: Soccer fan Trojan Horses

Linked by shanmuga Monday, 19th June 2006 11:29PM