Users login

Create an account »

JOIN XATRIX

Users login

Home » Hacking News » Nuke news spread Trojan

Nuke news spread Trojan

by Nikola Strahija on August 11th, 2005 Widely circulated spam email posing as info about Iran's controversial decision to continue work at its Ishafan nuclear plant attempt to direct users to a site infected with Trojan code.


Subject lines used in the malicious emails include "Iran snubs pleas, resumes uranium shift", "TThe PPhantom Menace" and several others. Windows users who make the mistake of following the web link in the maliciously targeted emails arrive at a website which at first seems like a fuller version of the story.

But in the background the site exploits well-known vulnerabilities in Microsoft's Internet Explorer software to install the Cgab-A and Borodr-Fam Trojan horses. This malware lets hackers seize control of infected Windows PCs.

-We saw the same gang of hackers use a near-identical trick about the tragic story of US marine deaths in Iraq last week, said Graham Cluley, senior technology consultant at anti-virus firm Sophos. Users are advised to update their anti-virus defences and to avoid checking out links in spam messages.


Newsletter signup

Signup to our monthly newsletter and stay in touch with IT news!

Free E-books

We've got ebooks! But they're not online. :( Please give us a few days to bring downloads back.

Contact

Have something to say or just wanna drop us a line? Please keep this in mind: to spam, we reply with spam.

Contact us »