[ news_security_news ]
IPod Email Is Trojan Horse
SecurityProNews
Staff Writer
2006-08-29
 Insider Reports RSS Feed
Security company Sophos sent out the warning this morning of a Trojan virus accompanying email spam claiming to have charged recipients' accounts for an iPod.
The email, carrying the Troj/Dowdec-A Trojan horse, says the iPod was shipped to the recipient and they were charged nearly $500.
Subject Line:
Track your order
Message Body:
Dear (email address),
Please read the following message carefully.
We notify that your order was approved and shipped to you via FedEx 2Day Service, track 792531968828.
The amount of $479.95 USD was recieved from your e-gold account.
The details of transaction and specification of chosen product we send you in self-extracting compressed-zip file.
Read it carefully to make sure that there's no mistakes in characteristics of chosen product.
We appreciate your choice!
According to the rules, refund must be based on your original method of payment. Any requests to refund using e-gold are not accepted, if the payment method was credit card.
IPod For Your, Yahoo Shopping.
Attached to the emails is a file called OrderInf.zip, which unpacks to OrderInfo.exe. Executing the file infects Windows-based computers with a Trojan that attempts to download more malicious code.
"With luck the spelling mistakes in the email will warn many users that there is something not quite right about this email. Additionally, anyone who doesn't use e-gold should be able to smell a rat when it is claimed that almost $500 has been taken from their account," said Graham Cluley, senior technology consultant for Sophos.
"But everyone should practise safe computing, and be wary of any unsolicited email attachment that arrives in their inbox. Hackers are aiming to infiltrate the Windows computers of home users in their pursuit of more people to spy on and steal from."
Sophos says its anti-virus products were automatically updated to protect against the virus.
Get all the updates in RSS: 
About the Author:
SecurityProNews is a daily online and email publication focusing on internet security issues.
More news_security_news Articles
Insider Reports RSS Feed
|
|
iEntry 10th Anniversary
RSS
Archive
