Newsletter:

Skip Navigation LinksHome > News > Security > New spam outbreak says its seen you naked

New spam outbreak says its seen you naked

18 April 2008 03:23PM
Tags: antispam | naked | marshal

New spam outbreak says its seen you naked

Security vendor Marshal is warning email users of a new mass targeted spam outbreak which contains a personalised subject line claiming to have caught 'you' naked on video.

The malicious campaign is being sent from the Srizbi botnet identified as the largest spam-sending botnet on the Internet and responsible for 45 percent of all spam caught, according to Marshal’s TRACE Team.

The message itself contains a clickable link which claims to be a naked video of the recipient and reads: “we caught you naked [your name]! check the video.”

When the user clicks on the link, the PC becomes infected and enlisted as a member of the Srizbi botnet.

“The spammers are clearly hoping to shock unsuspecting recipients into investigating this compromising footage. In their haste to look into the claim, some people might not consider the message is malware,” explained Bradley Anstis, vice-president of products at Marshal.

“It's a simple but clever form of social engineering. It is not a new trick by spammers, but it is proven to get your attention."

Researchers have identified Srizbi as the world’s largest botnet today superseding the notorious Storm Botnet, comprising 315,000 bots and responsible for an estimated 60 billion spam messages per day.

“We consider Sirzbi the biggest current spam threat. In December last year, we attributed 20 percent of the spam we caught to Sirizbi and now it is more than double that and more than double the next biggest botnet in terms of its spam volume," Anstis said.

   


Ads by Google


Thoughts on this article? Add a comment below.
Comments: 1
I found a XP machine with McAfee

This system suffered a rookit that infected numerous windows Services
RPC
Terminal Services
Winlogon
nolonger carry Microsoft as their provider is msconfig

this attachments payload
I tracked the cause back to this email in a gmail account.
caught you %username% nude
attached is a link? since gmail doesnt allow .exe files
follow the link and it fetchs video.exe?

The rootkit then installs hidden device drivers, downloads various applications and SMTP applications to the Local Service/Local Settings/Temporary Internet Files

and continues modify Windows core System Services until they are all Non Microsoft Providers

It also make use of the MS DCOM service to block Taskmanager Regedit and hide the contents of system32


Microsoft why is a non interactive system user allowed to use Internet Explorer?

iTnews - comments icon Posted by carlosApr 20, 2008 9:46 PM
Report this comment as offensive:

   * Indicates information we require to process your submission.

Name: *
Email: *
Reason for offense: *
Your report will not be displayed.  
Name:
*
 
Email:
(will not be displayed)
*
 
Comment:
(HTML not permitted)
*
 
Validation
*

Enter the code you see below:

 

 
 
 
 
 




Product Reviews

Star Rating
Blink is an endpoint security product that functions as a network protector.
Star Rating
EndPointSecurity installs a small footprint agent on the machine.
Star Rating
GuardianEdge Device Control is a component of the more robust GuardianEdge Data Protection Platform.
Star Rating
Lumension offers a pair of products, Sanctuary Application Control and Sanctuary Device Control, that work in...
Star Rating
First, it is important to note that unlike previous versions of ZENworks, Novell ZENworks Endpoint Security...
Product Reviews now available on iTnews.com.au

TopTopics
(3455) -  microsoft
(3443) -  telstra
(2425) -  network
(2335) -  broadband
(1816) -  security
(1793) -  apple
(1478) -  mobile
(1270) -  data
(1214) -  vmware
(1178) -  intel
(1097) -  internet
(1084) -  researchers
(1060) -  windows
(1043) -  iphone
(985) -  ibm