Fake WikiLeaks Emails Lead to Backdoor

[Peaches]

Fake WikiLeaks Emails Lead to Backdoor

Security researchers from Symantec warn that malware distributors are piggybacking on the WikiLeaks news storm in order to spread their malicious programs.

Rogue emails intercepted by Symantec, which purport to come from a [email protected] email address, are using explosive news headlines to trick users into clicking on malicious links.

“IRAN Nuclear BOMB!” one such communication is titled. The contained message looks unrelated and reads “OBAMA is an IMPOSTOR!” “W32.Spyrat opens a backdoor using a predetermined port and IP address, allowing an attacker to perform the following actions on the compromised computer: eead, write, and execute files; steal stored passwords; issue commands; activate and view a webcam, if present; log keystrokes; create an HTTP proxy to route traffic through the compromised computer,” Symantec researcher Samil Patil explains.

http://news.softpedia.com/news/Fake-WikiLeaks-Emails-Used-to-Distribute-Backdoor-171364.shtml