post #1
12 July 2005, 10:24 UTC#1
These dumb fucks need knocking out...
QUOTE
The attachment instead contains a Trojan designed to compromise the recipient's computer. The email containing this Trojan has been made to appear as a CNN Newsletter that asks recipients to 'See attachments for unique amateur video shots'.
When executed, the attachment copies itself to %Windir%\winlog.exe and modifies the Windows registry key 'HKLM/Software/microsoft/Windows/CurrentVersion/Run' so that it runs automatically on system start-up.
The Trojan then attempts to obtain a list of the SMTP servers that the victims machine is configured to use and starts to use these servers to send large volumes of unsolicited mail.
The mail looks something like this:
From: [email address redacted]
Subject: TERROR HITS LONDON
Filename: 'London Terror Moovie.avi
MessageLabs noted a steep raise in 'legitimate' email volumes as they rose sharply yesterday morning due to the terrorist attacks in London.
When executed, the attachment copies itself to %Windir%\winlog.exe and modifies the Windows registry key 'HKLM/Software/microsoft/Windows/CurrentVersion/Run' so that it runs automatically on system start-up.
The Trojan then attempts to obtain a list of the SMTP servers that the victims machine is configured to use and starts to use these servers to send large volumes of unsolicited mail.
The mail looks something like this:
From: [email address redacted]
Subject: TERROR HITS LONDON
Filename: 'London Terror Moovie.avi
MessageLabs noted a steep raise in 'legitimate' email volumes as they rose sharply yesterday morning due to the terrorist attacks in London.
