Sunday, July 10, 2005
Warning: Computer Virus Being Spread, Disguised as E-mail from CNN
Source: ZD-Net An e-mail purporting to offer a link to amateur video footage of the events on the London Underground in the aftermath of the bomb blast will install a Trojan on users' machines if they click on the attachment.
According to UK e-mail security firm MessageLabs the e-mail appears as a mocked-up html newsletter from CNN with the subject line 'TERROR HITS LONDON'.
The sender's e-mail address appears as breakingnews@CNNonline.com. Although that address could easily have been spoofed, the domain is not an official CNN domain and is registered to a firm in Florida.
The e-mail asks recipients to 'See attachments for unique amateur video shots'.
The file name, 'London Terror Moovie.avi' appears a valid film clip bar the typo in 'movie', however after 124 character spaces there is the real .exe file name, though even this has been disguised as 'Checked By Norton Antivirus.exe'. MORE

