Zbot Pushers Target UK Vodafone and Verizon Customers

[Peaches]

Zbot Pushers Target UK Vodafone and Verizon Customers

Malware masquerades as account balance checking tool

By Lucian Constantin, Web News Editor

14th of November, 2009

Security researchers warn that a spam campaign distributing a new Zbot version is currently in circulation. The bogus emails try to trick users into opening and installing the malicious attachments, which are passed as a tool for checking the account balance.

The emails have their header spoofed to appear as originating from [email protected] or [email protected] and their subject is, "Your credit balance is over the limit." The email body is also identical, except for the references to the mobile service operator. "Your credit balance is over its limit. Please use the attached [Operator Name] Balance Checker Tool to review and analyze your payments," it reads.

The attached file is called balancechecker.zip and contains a new version of the Zbot banking trojan. Zbot, also known as Zeus, is a prominent family of information-stealing computer trojans that has been highly successful in stealing money from the bank accounts of both companies and private individuals lately.

"There is a danger that unsuspecting mobile phone owners might fall for the trap, perhaps convinced by the use of Vodafone's logo which is embedded in the email, and launch the file attachment, thus infecting their computers," Graham Cluley, senior technology consultant at Sophos, notes. The version of this trojan is detected by Sophos' products as Mal/Zbot-P.

details at softpedia - http://news.softpedi...rs-127030.shtml