Be Aware Of A New Storm Worm Tactic Using Chinese Earthquake and Olympics

Buy an ad on DigitalJournal.com

The Storm Worm social-engineering tactic is using malicious sites that speculate that the Beijing games will be under the threat of failure because of May's earthquake. It turn tricks the viewer into clicking on what appears to be an embedded flash video player. Instead of watching a video the visitor has just opened a file on their desktop that is infected with a Trojan.

Websense Security Labs ThreatSeeker technology has detected email lures containing links to these malicious sites spamming email accounts.

The Trojan is then spread to your contacts via your address book by sending an email our with a link to the sites. The file that contains the Trojan is called "beijing.exe".

These following subject lines are to be considered part of the phishing campaign;

# The most powerful quake hits China
# Countless victims of earthquake in China
# Death toll in China is growing
# Recent earthquake in china took a heavy toll
# Recent china earthquake kills million
# China is paralyzed by new earthquake
# Death toll in China exceeds 1000000
# A new powerful disaster in China
# A new deadly catastrophe in China
# 2008 Olympic Games are under the threat
# China's most deadly earthquake

To avoid such a Trojan US-Cert recommends that you install anti-virus software and keep its files up to date. Do not follow unsolicited web links received in email messages. Refer to the Avoiding Social Engineering and Phishing Attacks document for more information about these types of Storm Worms.

If you are a subscriber to Websense you are protected from this virus.