A new malicious web site that will infect your computer with a Trojan has sprung up using the recent earthquake in China and the Summer Olympics as bait.
The
Storm Worm social-engineering tactic is using malicious sites that speculate that the Beijing games will be under the threat of failure because of May's earthquake. It turn tricks the viewer into clicking on what appears to be an embedded flash video player. Instead of watching a video the visitor has just opened a file on their desktop that is infected with a Trojan.
Websense Security Labs ThreatSeeker technology has detected email lures containing links to these malicious sites spamming email accounts.
The Trojan is then spread to your contacts via your address book by sending an email our with a link to the sites. The file that contains the Trojan is called "beijing.exe".
These following subject lines are to be considered part of the phishing campaign;
# The most powerful quake hits China
# Countless victims of earthquake in China
# Death toll in China is growing
# Recent earthquake in china took a heavy toll
# Recent china earthquake kills million
# China is paralyzed by new earthquake
# Death toll in China exceeds 1000000
# A new powerful disaster in China
# A new deadly catastrophe in China
# 2008 Olympic Games are under the threat
# China's most deadly earthquake
To avoid such a Trojan US-Cert recommends that you install anti-virus software and keep its files up to date. Do not follow unsolicited web links received in email messages. Refer to the Avoiding Social Engineering and Phishing Attacks document for more information about these types of Storm Worms.
If you are a subscriber to Websense you are protected from this virus.
