Samsung Telecom Site hosting Crimeware

...The site, which is hosted in the United States, has been hosting a number of directories and files which, when downloaded and run, install malicious code on end users' machines.

The server appears to have been compromised and has been hosting a variety of files for some time (the owners have been contacted).

The most current code, which is still available for download, is a Trojan Horse that attempts to disable anti-virus programs, modify registry keys, download additional files, and log keystrokes when connecting to banking websites. WebsenseŽ - Security Labs Alert: Samsung Telecom Site hosting Crimeware

Linked by shanmuga Thursday, 7th September 2006 10:24PM