You are here: silicon.com > Software > Malware

Malware

Police warning over new key-logging 'Trojan' spam emails

Latest scam blends phishing, spam and hacking tools…

By Andy McCue

Published: 13 August 2004 15:00 BST

Police are warning internet users about 'Trojan' emails containing links to malicious websites that can steal sensitive information such as PINs and password log-ins from vulnerable PCs.

The UK's National Hi-Tech Crime Unit (NHTCU) said the spam emails contain details of a fictitious order for web hosting or computer goods and display the cost that will supposedly be charged to their credit card.

The email also contains a link to a website to view the order in more detail but if people click on the link, it takes them to a malicious website that allows hackers to steal data from their PC.

The user is presented with a site that appears to be under construction but an exploit for a security flaw in Microsoft's Internet Explorer browser allows the criminals to plant a key-logging Trojan on an unpatched PC. The hackers can then record the victim's log-ins, passwords and PINs for online banking accounts the next time they use them.

In addition, the Trojan compromises the machine, giving the attacker full remote access, which allows them to control the computer for other purposes.

Police have traced the malicious websites to North America and China and the NHTCU is working with the banking industry to shut them down.

Users are urged to download the latest Microsoft security patches for the well-publicised flaws in IE to protect themselves against the scam.

Detective Chief Superintendent Len Hynds, Head of the NHTCU said in a statement: "The criminals behind these attacks are constantly evolving their techniques and changing tactics to target a wider range of victims. With this range of exploits being blended in one piece of code, it is not just about online banking. There is a second key-logger and a program that allows the machine to act as a mail proxy that could be used by spammers. It is the Swiss Army knife of the cyber-criminal."

  1. Zones
  2. Management
  3. Networks
  4. Software
  5. IT Services
  6. Hardware
  1. Verticals
  2. Public Sector
  3. Financial Services
  4. Retail & Leisure

  • Jobs
Product and Service Development Manager / Project Manager

You will have a strong Project Management background as well as a background in delivering Websites / Website development or Software Development ...

Web Developer/Designer

Web Developer/Designer Salary: 19,203 - 21,087 per annum Based: Nottingham The successful Web Developer will: - Working alongside the Graphic ...

Test Analyst URGENTLY required !!

The successful candidate must be able to demonstrate - Strong experience of testing websites and website usability - Website usability - Test analyst ...

CIO50 2008
The silicon.com CIO50 2008 profiles the most influential and innovative tech chiefs in the UK across all industries and organisation size, from the biggest FTSE100 companies to high growth dot-com start ups and the public sector. The list was voted on by the UK CIO community and a panel of experts. Find out more in our latest special report.





Quick Sitemap Links: