This is a read-only archive. No new posts or registrations. Privacy Page
Discussion

Malicious Website: SPAM lure - "Lunar Eclipse Video"

1 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

FYI…

- http://www.websense.com/securitylabs/alert…php?AlertID=842
February 20, 2008 - "Websense Security LabsTM has discovered a run of spam emails that attempt to dupe users into downloading and installing a video… We have also seen similar blocks of SPAM purporting to contain videos of movie stars, singers, and other entertainers.
Sample subject lines include:
- Lunar Eclipse Video
- Your guide to the total lunar eclipse.
- Shocking video with Total moon eclipse
- Total Moon Eclipse Video on NASA TV
- Moon Eclipse is visible today
If users access any of the various Web sites hosting the malicious code, and attempt to view the video, they are infected with an information-stealing Trojan Horse. There is no exploit code hosted on the sites. Users are prompted to confirm that they want to run the code…"

(Screenshot available at the URL above.)

:ph34r:
More on same…

- http://blog.trendmicro.com/dark-shadows-lu…-lunar-eclipse/
February 22, 2008 - "…TrendLabs has received samples of email messages promising a video of the eclipse… Once the user clicks on the link however, a backdoor detected as BKDR_AGENT.AKJZ is downloaded instead. This is yet another example of cybercriminals riding on interesting events in order to spread threats…"

(Screenshot available at the URL above.)

:ph34r: