Technology news and Jobs arrow Information Technology News arrow Web 2.0 Trojan hits forums and web mail
Web 2.0 Trojan hits forums and web mail E-mail
by Stephen Withers   
Thursday, 01 March 2007
A new Trojan variant is spreading by inserting malicious links into forum and webmail postings from infected machines.

According to security researchers at Symantec, a variant of the Mespam Trojan (aka SpamToo-U) is being distributed via the botnet created by the Storm (aka Peacomm) worm.

Because the new malware operates at a very low level - the malicious links are added just before Windows sends outgoing packets to the network - there is no obvious sign of what's happening on the infected computer.

Affected services include the widely used VBulletin and phpBB forum software plus web mail by AOL, Bellsouth, EarthLink, FastMail, Gmail, Hotmail, Yahoo and other popular providers.

Mespam also sends malicious links in instant messages via AOL Instant Messenger, Google Talk and Yahoo Messenger.

"It will become a real threat in the future if the bad guys behind Mespam and Peacomm add code to spread over other popular Web channels (e.g. injecting malicious content while posting on YouTube, Myspace, RSS feed, or while using Google Office on the Web)," wrote Symantec's Elia Florio.

At the time of Symantec's analysis, the malicious URLs all pointed to 'online postcard' sites, but the links and messages can easily be changed by the attackers.{moscomment}
Powered By Joomla Tags

Please enable JavaScript in your browser to post your comment!

 
< Next story in category   Previous story in the category >
iTWire user statistics Visitors last 30 days
694,279
Subscribers 15,210
#1 independent technology news advertise here
  •   *  
  • Search
  • AdvSeach
  • Login
  • Events
  • FreeStuff

- Advertisement -

Featured Whitepapers

Follow iTWire on Twitter

About iTWire

iTWire is all about technology news, information, jobs and community for the IT and telecommunications industry professional. Subscribe to our free ICT daily newsletter