ARP Attack Is So Easy
Mdesvc.exe, IRCBot.aof
We once reported that spams was being masqueraded as Microsoft Security Update on Nov.2.
In the next two days, we found another variant was also spreading via spams with the subject lines as "Critical Security Update" , "Windows Update" ,etc. But the file name of attachments is "game.zip".
The body of these spams are as the following:
In the .zip file, it contains "game.exe", the size is 20,992 bytes, MD5 hash is 71b1ec0416a77905864d5c93a501b90a.
Kaspersky detects it as Trojan-Spy.Win32.KeyLogger.rp.
Last modified by smallmo onNovember 5, 2007 20:35
In the next two days, we found another variant was also spreading via spams with the subject lines as "Critical Security Update" , "Windows Update" ,etc. But the file name of attachments is "game.zip".
The body of these spams are as the following:
Hi, Friend!
I found fantastic game. Asshunter...
You're guy with big cock. You must catch angelina jolie in beverly hills and fuck her in her ass. Oh, the game is in your attach. Enjoy!
Bye.
I found fantastic game. Asshunter...
You're guy with big cock. You must catch angelina jolie in beverly hills and fuck her in her ass. Oh, the game is in your attach. Enjoy!
Bye.
In the .zip file, it contains "game.exe", the size is 20,992 bytes, MD5 hash is 71b1ec0416a77905864d5c93a501b90a.
Kaspersky detects it as Trojan-Spy.Win32.KeyLogger.rp.
Last modified by smallmo onNovember 5, 2007 20:35
