Search
Contactez-nous Suivez-nous sur Twitter En francais English Language
 

De la Théorie à la pratique











Freely subscribe to our NEWSLETTER

Newsletter FR

Newsletter EN

Vulnérabilités

Unsubscribe

Websense Security LabsTM: a spam attempt to dupe users into downloading a video of the solar eclipse

February 2008 by Websense

Websense Security LabsTM has discovered a run of spam emails that attempt to dupe users into downloading and installing a video of the solar eclipse. We have also seen similar blocks of spam purporting to contain videos of movie stars, singers, and other entertainers.

Sample subject lines include:

Lunar Eclipse Video
Your guide to the total lunar eclipse.
Shocking video with Total moon eclipse
Total Moon Eclipse Video on NASA TV
Moon Eclipse is visible today

If users access any of the various Web sites hosting the malicious code, and attempt to view the video, they are infected with an information-stealing Trojan Horse. There is no exploit code hosted on the sites. Users are prompted to confirm that they want to run the code.

Screenshot of email written in HTML:




See previous articles

    

See next articles