Phoney Free iPhone but a Real Rootkit
Monday, July 2nd, 2007Secure Computing has released information about a new Spammed email telling users that they have won a new iPhone from an online store. The email has a link that promises the email reader a free iPhone and when the user clicks on the link they are brought to a website that then downloads a Spam Bot and a Rootkit.
The subject of the message is “Congratulations, you have won a new iPhone from our store!”
“Should the victim fall for the social engineering attack, clicking on a link directs the user’s browser to a web page that contains malware that exploits 10 Active X vulnerabilities in order to install a malicious payload including an MSODataSourceControl vulnerability.”
There is also website analysis on the servers that host the malware. If a person is seen to revisit the malware site then they are being redirected to the correct authentic site. This is to make it hard for researchers to have a good look at the site.
This technique of infecting websites and in turn getting them to infect PC’s is being used more and more by hackers and malware authors. Using social engineering and spam techniques malware authors have a great platform to spawn their creations.
Take Care,
regards
Steo
References:
http://www.itpro.co.uk/news/118791/new-malware-exploits-iphone-popularity.html
rootkit