New Years Emails install Rootkits
Saturday, December 30th, 2006A newly spammed email sending users New Year’s Greeting is being spammed out from over 160 servers worldwide at a rate of 5 per second from some servers. The email contains a greeting and an executable file which when run installs malware hidden via 2 rootkits on the users PC.
The email can arrive with the subject “Happy New Year!” or newly created versions have “Fun Filled New Year” or “Sender Happy 2007!” as the subject.
There is no text in the message only an attachment. The attachment names vary from “postcard.exe” to ”greeting card.exe”.
When the attachmnt is run it installs malicious code variants of Tibs, Nuwar, Banwarum, Mixor and Glowa onto users PC’s.
Two rootkit files are installed to prevent the malware from being discovered.
The malware then infects many files and searches the users hard drive for email addresses and sends itself out to these email addresses hoping again to infect more people.
Beware New Year Greetings even from friends as they could be infected and because your email address is on their computer it may seem like a legitimate email.
Keep Safe,
regards
Steo
www.antirootkit.com
rootkit