Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: acts of terrorism trojan - SANS Internet Storm Center SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
acts of terrorism trojan
Don't open zips you get in the mail.
Today's gem claims to be video about new acts of terrorism.
Attached to the email was a 47KB zip file news.zip.
Inside news.zip is news.exe.
But its a trojan, of course.
Only about half of the av scanners recognized it.
Those that did identified it as a trojan downloader of some sort

TEXT of the virus message:

From: BBC World News [mailto:news@info.bbc.com]
Sent: Fri 3/10/2006 7:24 PM
To: Smith, Donald
Subject: New acts of terrorism in New York and London

Today FBI and SCOTLAND YARD has informed on set of new acts of terrorism
in New York and London. On a communique was lost more than two thousand person
and about ten thousand have received the wounds which were much of them are in
a grave condition.Police and MI5 identified an Al-Qaeda cell that had carried
out extensive research and video-recorded reconnaissance missions in preparation
for the attack. You can learn the detailed information in the attached file.

donald

206 Posts
ISC Handler

Sign Up for Free or Log In to start participating in the conversation!