Smart malware injects spam into messages

Trojan scans outgoing messages before embedding spam content

Written by Shaun Nichols in California

Security experts are warning of a Trojan horse that can automatically attach spam to emails, instant messages and bulletin board postings.

Symantec researcher Eric Chien said that the malware uses a Windows layered service provider component to watch network traffic and alter outgoing messages and posts. 

Advertisement

"Message board spam is nothing new," Chien explained on the company's security response blog. "But what is different about this message board spam is that the spam text is integrated into legitimate messages posted by real users. "

The attack begins when a user follows a link posted on a spam message or posting promising a 'funny video'. The user is then tricked into downloading an executable that installs the Trojan, formally known as Trojan.Mespam.

The malware will attach the spam greeting to message board postings as well as instant messages sent from AIM, Yahoo Messenger, GTalk and ICQ

Chien said that emails sent from most popular webmail services, including Google Mail, Hotmail and Yahoo Mail, will also be injected with spam code. 

The researcher recommends users to avoid clicking on unrelated links in forum postings, emails and instant messages, and to avoid executing any unsolicited files from a suspicious source.

Tags:

Further reading

Related whitepapers

Related jobs

Do you agree?

IT white papers

Search vnunet IThound

Top categories

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Watch

Shaun Nichols and Iain Thomson

10 Oct 2008

7.33 MBPodcast Special: Views from the Valley More...

Podcast image

09 Oct 2008

12.99 MBComputing podcast - IT implications of the banking crisis, and the FSA clamps down on IT security More...

Shaun Nichols and Iain Thomson

03 Oct 2008

6.49 MBPodcast Special: Views from the Valley More...

Poll

Google Android

Google Android

Are you intending to try out a Google Android mobile phone?

Previous poll results

Spotlight

Microsoft

Microsoft plans Silverlight 2.0 announcement

Web application tool revamp promised later today   More...

Stock prices

Security disclosures tip the stock market

Events such as Microsoft's Patch Tuesday could be used for...  More...

Blogs

Analyst predicts Web 2.0 fire sale

Prices for online apps could soon plummet, says Forrester   More...

MoD building

Latest data breach leads MPs to demand culture change

MoD admits to losing a hard drive containing up to...  More...

Primary Navigation