Users login

Create an account »

JOIN XATRIX

Users login

Home » Hacking News » Trojan replaces porn for Koran

Trojan replaces porn for Koran

by Nikola Strahija on September 8th, 2005 A new Trojan, called Yusufali-A, monitors Web surfing habits. When it spots an objectionable term such as "sex" or "exhibition", in the browser's title bar, it hides the website and instead pops up a message from the Koran.


-Allah knows how ye move about and how ye dwell in your homes, reads part of the message, said Gregg Mastoras, a senior security analyst with Sophos.

If the user doesn't leave the offending website, the Trojan will eventually displays a message reading "Oh! No I'm in the Cage" and force the computer to log-out.

Other than chastising adult website surfers, Yusufali-A appears to cause no serious harm to infected systems, Mastoras said. Users must be running the Windows and click on an e-mail attachment to become infected with the
program.

Sophos has not received many reports of users being affected by Yusufali-A, which is blocked by updated anti-virus software, Mastoras said. Sophos has posted instructions on how to remove the Trojan.


Newsletter signup

Signup to our monthly newsletter and stay in touch with IT news!

Free E-books

We've got ebooks! But they're not online. :( Please give us a few days to bring downloads back.

Contact

Have something to say or just wanna drop us a line? Please keep this in mind: to spam, we reply with spam.

Contact us »