New Storm Worm Spam Campaign Mentions FBI And Facebook

July 29th, 2008

New Storm Worm Spam Campaign Mentions FBI And Facebook

New Storm worm (aka Dorf) campaign has been launched in order to infect Windows running PCs. The latest campaign is centered around messages related to the Federal Bureau of Investigation and Facebook.

Starting a week ago, the authors have renewed their attacks and published 3 campaigns within the last 8 days. As usual, this most recent Trojan is spread via an unsolicited email message spam that contains a link to a malicious website. This website contains a link, that when clicked, may run the executable file “fbi_facebook.exe” to infect the user’s system with malicious code.

The email subjects for the latest campaign currently include:

F.B.I. may strike Facebook
F.B.I. watching us
The FBI’s plan to “profile” Facebook
The FBI has a new way of tracking Facebook
F.B.I. are spying on your Facebook profiles
F.B.I. busts alleged Facebook
Get Facebook’s F.B.I. Files
Facebook’s F.B.I. ties
F.B.I. watching you

This latest campaign employs both domains and the IP addresses as links. The malware and spam messages changed very little even though the topics and websites were updated regularly.

Users should install anti-virus software, keep its virus signature files up-to-date and never follow unsolicited web links received in email messages.

Email, Bookmark or Share:

More on CyberInsecure:

MySpace And Facebook Users Targeted By New Worms

Late Valentine E-cards By Storm Trojan

Storm Trojan April Fools Day Edition

Old Facebook Worm Using New Ways To Spread By Abusing Google Reader And Picasa Websites

Facebook “added friend confirmation” Malicious Spam

Posted in Malware, Spam, Trojans & Worms |

Print This Post

This entry was posted on Tuesday, July 29th, 2008 at 10:03 am and is filed under Malware, Spam, Trojans & Worms. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

If you found this information useful, consider linking to it from your own website.
Just copy and paste the code below into your website (Ctrl+C to copy)
It will look like this: New Storm Worm Spam Campaign Mentions FBI And Facebook

Comments with unsolicited links to other resources will be marked as spam. DO NOT leave links in comments. Please leave your real email, it wont be published.

Latest Virus Descriptions

Trojan-Downloader.JS.Small.fi 29 Oct 2008 20:03:00 +030
This Trojan downloads other files via the Internet and launches them for execution on the victim machine. The program is an HTML page which contains Java Script scenarios. It is 1432 bytes in size.
Trojan-PSW.Win32.OnLineGames.sxa 29 Oct 2008 20:01:00 +030
This malicious program is a Trojan. It is a Windows PE EXE file. It is 118103 bytes in size. Installation The Trojan copies its executable file to the Windows system directory: %System%\kavo.exe In order to ensure that the Trojan is launched automatically each time the system is restarted, the…
Trojan-PSW.Win32.OnLineGames.lfi 29 Oct 2008 20:00:00 +030
This malicious program is a Trojan. It is a Windows PE EXE file. It is 123873 bytes in size. Installation The Trojan copies its executable file to the Windows system directory: %System%\amvo.exe In order to ensure that the Trojan is launched automatically each time the system is restarted, the…
Trojan-Downloader_Win32_Agent.nmi 29 Oct 2008 19:59:00 +030
This Trojan downloads another program via the Internet and launches it on the victim machine without the user’s knowledge or consent. It is a Windows PE EXE file. The size of infected files can range from 18KB to 47KB.
Trojan-Downloader.Win32.Braidupdate.c 28 Oct 2008 15:54:00 +030
This Trojan downloads another program via the Internet and launches it on the victim machine without the user’s knowledge or consent. It is a Windows PE EXE file. It is 79360 bytes in size. It is written in C++. Installation In order to ensure that the Trojan is launched automatically each…
Trojan-Downloader.JS.Agent.sg 28 Oct 2008 15:52:00 +030
This Trojan downloads other files via the Internet and launches them for execution on the victim machine. It is an HTML page which contains Visual Basic Script and Java Script. It is 677 bytes in size.
Trojan-GameThief.Win32.OnLineGames.tnys 28 Oct 2008 15:48:00 +030
This Trojan is designed to steal account data from the online game LineAge2. It is a Windows PE EXE file. It is 654848 bytes in size.
Trojan-PSW.Win32.OnLineGames.rlh 28 Oct 2008 15:39:00 +030
This malicious program is a Trojan. It is a Windows PE EXE file. It is 112736 bytes in size. Installation The Trojan copies its executable file to the Windows system directory: %System%\kavo.exe In order to ensure that the Trojan is launched automatically each time the system is restarted, the…
Trojan-Downloader.Win32.Delf.cgx 20 Oct 2008 15:56:00 +030
This Trojan downloads other files via the Internet and launches them for execution on the victim machine without the user’s knowledge or consent. It is a Windows PE EXE file. It is 48128 bytes in size. It is packed using PECompact. The unpacked file is approximately 131KB in size. It is…
Backdoor.Win32.Small.x 20 Oct 2008 15:54:00 +030
This Trojan provides a remote malicious user with access to the victim machine. It is a Windows PE EXE file. It is 1087 bytes in size.

CyberInsecure.com

New Storm Worm Spam Campaign Mentions FBI And Facebook

Leave a Reply

Categories

Archives

Links

Internet Threat Level

Recent Entries

Vendor Security Alerts

Subscribe

Members

Latest Virus Descriptions