NEWS CATEGORIES:



NEWS ARCHIVE >>
SOFTPEDIA REVIEWS >>
Home / News / Security / Spam Reports

Spam Reports


...And More Dangerous PDFs for Your Computer Coming from GMail!

The war is not over

By Bogdan Popa, Security and Search Engines Editor

29th of October 2007, 11:07 GMT

Adjust text size:



Enlarge picture
They said PDF spam war was over. It was even thought that using PDF files is not a risky activity anymore. However, it seems that everything that you've heard is false. SecureWorks and F-Secure, two of the
top security companies on the web, discovered a new impressive assault of the PDF spam which seems to come from Gmail accounts. The malicious PDF files are attached to email messages and ask the users to download and open them. The only problem is that they infect the victims' computers with Trojan horses or other dangerous threats. SecureWorks said the campaign was started on October 23, most attachments being named as BILL.pdf or INVOICE.pdf.

"The exploit downloads executes a first-stage downloader EXE file from an RBN (Russian Business Network) server via anonymous FTP and executes it. That downloader installs a variant of the Gozi Trojan which steals data as described in the Threat Analysis posted on the SecureWorks website," SecureWorks mentioned in a security alert published a few days ago.

F-Secure sustains that most messages are related to financial matters and can have the following subjects: 'Your credit report', 'Your credit points', 'Your balance report', 'Personal Credit Points', 'Balance Report' or 'Your Credit file'.

"A malicious PDF file called report.pdf, debt.2007.pdf, overdraft.2007.10.26.pdf, or similar, has been massively spammed through e-mail. The PDF is spiced with exploit CVE-2007-5020 that downloads ms32.exe, which in turn downloads more components," F-Secure added on its official blog.

The only solution to avoid those dangerous spam messages is to update your antivirus software and the spam filters. Moreover, you can mark the emails as spam without clicking on them. Also, avoid downloading attachments included in the messages coming from unknown or untrusted sources and directed to your inbox.

TAGS:

pdf | spam | email | gmail


Rating:
Fair (2.0/5) 6 vote(s) so far    

Read by 467 user(s) | Add comment | Link to this article
Subscribe to news | Print article | Send to friend

© Copyright 2001-2008 Softpedia
Contact:

 

 

SEARCH THE NEWS ARCHIVE :




Today's News
| Yesterday's News | News Archive


MORE RELATED ARTICLES:


PDF Files Used in Hack Attacks

Microsoft Involved in Spam Campaigns

Spam Engulfs E-mails

PDF Spam Crashed and Burned!

Spammers: It's That Blasted Norton AntiVirus!

User opinions:

No user comments yet.
Be the first to express your opinion using the form below!

Share your opinion:

Your Name:
Your Email Address:
(will not be used for commercial purposes)
Solve this to prove you're not a bot: =
Your review/opinion:

 






SUBMIT PROGRAM   |   ADVERTISE   |   GET HELP   |   SEND US FEEDBACK   |   RSS FEEDS   |   ENTER NEWS SITE   |   ENGLISH BOARD   |   ROMANIAN FORUM