[ insider_reports_insider ]
Barracuda Flags Virus Sent Via Fake Microsoft Email Update
Mike Sachoff
Staff Writer
2008-10-10
 Insider Reports RSS Feed
Barracuda Networks has detected and begun blocking a malicious "backdoor" virus distributed through a socially engineered email made to look like it was coming from Microsoft.
 | | Barracuda Flags Virus Sent Via Fake Microsoft Email Update |  |
The virus, categorized by Barracuda Central as "Trojan. Backdoor Haxdoor," is delivered as an attachment to an email allegedly from the Microsoft Security Assurance team and utilizes several social engineering techniques, such as using Microsoft KnowledgeBase naming conventions for the file attachment, as well as the inclusion of a PGP signature block at the bottom of the email message.
The email informs the recipient "Microsoft company has recently issued a Security Update for OS Microsoft Windows. The update applies to the following OS versions: Microsoft Windows 98, Microsoft Windows 2000, Microsoft Windows Millenium, Microsoft Windows XP, Microsoft Windows Vista."
The bogus email also "strongly" recommends that the recipient install an "update" to protect your computer against security threats and performance problems." Once installed the malware "phones home" and leaves an outbound TCP connection open to await further instructions.
"The leverage of the Microsoft name, the inclusion of an apparent PGP signature block - frequently used by security professionals - and the routine nature in which users are accustomed to applying software updates make for a dangerous and potentially effective combination of social engineering techniques in this particular attack," said Stephen Pao, vice president of product management for Barracuda Networks.
"Unsuspecting users without the proper virus protections in place, could mistakenly install the malware."
About the Author:
Mike is a staff writer for WebProNews. Visit WebProNews for the latest ebusiness news.
More insider_reports_insider Articles
Insider Reports RSS Feed
|
|
RSS
Archive
Contact Us
Advertise
