Help
From F-Secure blog:
When BREDOLAB entered the threat landscape several months ago, it was initially thought of as a common downloader (that downloads executable files) designed for malware infection only. However, Trend Micro researchers noticed a sudden increase in its activities by August 2009. This made our researchers delved more on the inner workings and behaviors of BREDOLAB.
Our analysis then observed BREDOLAB’s connections to two notorious malware families, FAKEAV and ZBOT/ZeuS. The samples always include the aforementioned malware in its download repertoire. Adding BREDOLAB in their long list of carriers, these malware families are mostly focused on information and financial theft.
BREDOLAB also exhibited certain similarities with another well-known botnet, PUSHDO in terms of downloading routines. This led our threat researchers to believe that the cybercriminals behind PUSHDO and BREDOLAB are the same.
Trend Micro’s Senior Threat Researcher David Sancho has written an in-depth analysis of this new threat. Read it here: You Scratch My Back…BREDOLAB’s Sudden Rise in Prominence.
http://blog.trendmic...dolab-revealed/
Malware Conceals Itself as Boss’s Letter
Trend Micro threat analysts found spammed messages that pretend to be a letter coming from the “boss”. It bears the subject “get back to my office for more details” and instructs users to read the attached ZIP file, which contains a letter. The ZIP attachment is, of course, not a letter but an .EXE file (info.exe) detected by Trend Micro as TROJ_CUTWAIL.GT.
http://blog.trendmic...s-bosss-letter/
Also, Christmas Spam Spotted
With Christmas just right around the corner, spammers are already flooding users’ inboxes with unwanted emails. No surprises there. Spammers are known to exploit the holidays for its malicious activities.
Just recently, Trend Micro threat analysts found another spammed messages that claimed to be a ‘replication specialist’ and entice users to buy replica products like watches, handbags, and jewelries in a discounted price.
http://blog.trendmic...s-spam-spotted/
http://msmvps.com/ag...?PostID=1737105View the full article
